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- 
40, 50 and 66 Megabytes/See 
Bus 


- 
64 Terabyte Virtual 
Bandwidth 
- 
4 Gigabyte Maximum Segment Size 
• Numerics Support via Intel387™ OX 
• Integrated 
Memory Management Unit 
Math Coprocessor 
- 
Virtual Memory Support 
• Complete System Development 
- 
Optional On-Chip Paging 
Support 
- 
4 Levels of Protection 
- 
Software: C, PL/M, Assembler 
- 
Fully Compatible with 80286 
System Generation Tools 
• Object Code Compatible with All 8086 
- 
Debuggers: PSCOPE, ICETM·386 
Family Microprocessors 
• High Speed CHMOS IV Technology 
• Virtual 8086 Mode Allows Running of 
• 132 Pin Grid Array Package 
8086 Software In a Protected and 
Paged System 
• 132 Pin Plastic Quad Flat Package 
• Hardware Debugging Support 
(See Packaging 
Specification. 
Order 
# 231369) 


The Intel386 
DX Microprocessor 
is an entry-level 
32-bit microprocessor 
designed 
for single-user 
applications 


and operating 
systems 
such as MS-DOS 
and Windows. 
The 32-bit 
registers 
and data paths 
support 
32-bit 


addresses 
and data types. The processor 
addresses 
up to four gigabytes 
of physical 
memory and 64 terabytes 
(2"46) 
of virtual memory. 
The integrated 
memory 
management 
and protection 
architecture 
includes 
address 
translation 
registers, 
multitasking 
hardware 
and a protection 
mechanism 
to support operating 
systems. 
Instruc- 
tion pipelining, 
on-chip 
address 
translation, 
ensure 
short average 
instruction 
execution 
times and maximum 


system 
throughput. 


The Intel386 
DX CPU offers new testability 
and debugging 
features. 
Testability 
features 
include a self-test 
and 


direct access 
to the page translation 
cache. 
Four new breakpoint 
registers 
provide 
breakpoint 
traps on code 


execution 
or data accesses, 
for powerful 
debugging 
of even ROM-based 
systems. 


Object-code 
compatibility 
with 
all 8086 
family 
members 
(8086. 
8088, 
80186, 
80188, 
80286) 
means 
the 
Intel386 
DX offers 
immediate 
access 
to the world's 
largest 
microprocessor 
software 
base. 
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The Intel386 
OX pinout as viewed 
from the top side 


of the component 
is shown 
by Figure 1-1. Its pinout 


as viewed 
from 
the 
Pin side 
of the 
component 
is 


Figure 
1-2. 
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VCC and GNO connections 
must be made to multi- 


ple VCC and Vss 
(GNO) 
pins. 
Each 
VCC and Vss 


must be connected 
to the appropriate 
voltage 
level. 


The 
circuit 
board 
should 
include 
Vcc 
and 
GNO 


planes 
for power 
distribution 
and all Vcc 
and Vss 


pins must be connected 
to the appropriate 
plane. 


NOTE: 
Pins identified 
as "N.C." 
should 
remain 
completely 


unconnected 
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Figure1-1.lnteI386™OXPGA 
Figure1-2.lnteI386™OXPGA 
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M13 
Ml0 
A12 
E3 
BE1# 
C13 
016 
Nll 
M/IO# 
A12 
N4 
N3 
A13 
E2 
BE2# 
B13 
017 
Nl0 
NA# 
013 
N7 
P6 
A14 
El 
BE3# 
A13 
01B 
Pl1 
NMI 
BB 
P2 
P14 
A15 
Fl 
BS16# 
C14 
019 
Pl0 
PEREQ' 
CB 
PB 
W/R# 
B10 
A16 
Gl 
BUSY# 
B9 
020 
M9 
READY # 
G13 
Vss 
A2 
N.C. 
A4 
A17 
Hl 
CLK2 
F12 
021 
N9 
RESET 
C9 
A6 
B4 
A1B 
H2 
DO 
H12 
022 
P9 
Vcc 
Al 
A9 
B6 
A19 
H3 
01 
H13 
023 
NB 
A5 
Bl 
B12 
A20 
Jl 
02 
H14 
024 
P7 
A7 
B5 
C6 
A21 
K1 
03 
J14 
025 
N6 
Al0 
Bll 
C7 
A22 
K2 
04 
K14 
026 
P5 
A14 
B14 
E13 
A23 
L1 
05 
K13 
027 
N5 
C5 
Cll 
F13 
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The following table lists a brief description of each pin on the Intel386 OX.The following definitions are used in 
these descriptions: 
# 
The named signal is active LOW. 
I 
Input signal. 


o 
Output signal. 


I/O 
Input and Output signal. 
No electrical connection. 


Symbol 
Type 
Name and FunctIon 


CLK2 
I 
CLK2 provides the fundamental timing for the Intel386 OX. 


031-00 
I/O 
DATA BUS inputs data during memory, I/O and interrupt acknowledge 
read cycles and outputs data during memory and I/O write cycles. 


A31-A2 
0 
ADDRESS 
BUS outputs physical memory or port I/O addresses. 


BEO#-BE3# 
0 
BYTE ENABLES indicate which data bytes of the data bus take part in 
a bus cycle. 


W/R# 
0 
WRITE/READ 
is a bus cycle definition pin that distinguishes write 
cycles from read cycles. 


O/C# 
0 
DATA/CONTROL 
is a bus cycle definition pin that distinguishes data 
cycles, either memory or I/O, from control cycles which are: interrupt 
acknowledge, halt, and instruction fetching. 


M/IO# 
0 
MEMORY 
I/O is a bus cycle definition pin that distinguishes memory 
cycles from input! output cycles. 


LOCK# 
0 
BUS 
LOCK 
is a bus cycle definition pin that indicates that other 
system bus masters are denied access to the system bus while it is 
active. 


A08# 
0 
ADDRESS 
STATUS 
indicates that a valid bus cycle definition and 
address (W/R#, 
O/C#, 
M/IO#, 
BEO#, BE1#, 
BE2#, BE3# and 
A31-A2) are being driven at the Intel386 OX pins. 


NA# 
I 
NEXT ADDRESS 
is used to request address pipelining. 


REAOY# 
I 
BUS READY terminates the bus cycle. 


B816# 
I 
BUS SIZE 
16 input allows direct connection of 32-bit and 16-bit data 
buses. 


HOLO 
I 
BUS HOLD 
REQUEST 
input allows another bus master to request 
control of the local bus. 
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Symbol 
Type 
Name and Function 


HLOA 
0 
BUS HOLD 
ACKNOWLEDGE 
output indicates that the Intel386 OX 
has surrendered control of its local bus to another bus master. 


BUSY# 
I 
BUSY signals a busy condition from a processor extension. 


ERROR# 
I 
ERROR signals an error condition from a processor extension. 


PEREO 
I 
PROCESSOR 
EXTENSION 
REQUEST 
indicates that the processor 
extension has data to be transferred by the Intel386 OX. 


INTR 
I 
INTERRUPT 
REQUEST 
is a maskable input that signals the Intel386 
OX to suspend execution of the current program and execute an 
interrupt acknowledge function. 


NMI 
I 
NON·MASKABLE 
INTERRUPT 
REQUEST 
is a non-maskable input 
that signals the Intel386 OX to suspend execution of the current 
program and execute an interrupt acknowledge function. 


RESET 
I 
RESET suspends any operation in progress and places the Intel386 
OX in a known reset state. See Interrupt 
Signals 
for additional 
information. 


N/C 
- 
NO CONNECT 
should always remain unconnected. Connection of a 
N/C pin may cause the processor to malfunction or be incompatible 
with future steppings of the Intel386 OX. 


Vcc 
I 
SYSTEM 
POWER provides the + 5V nominal O.C. supply input. 


VSS 
I 
SYSTEM 
GROUND 
provides OV connection from which all inputs and 
outputs are measured. 


intel~ 


The Intel386 OX consists of a central processing 
unit, a memory management unit and a bus inter- 
face. 


The central processing unit consists of the execu- 
tion unit and instruction unit. The execution unit con- 
tains the eight 32-bit general purpose registers 
which are used for both address calculation, data 
operations and a 64-bit barrel shifter used to speed 
shift, rotate, multiply, and divide operations. The 
multiply and divide logic uses a 1-bit per cycle algo- 
rithm. The multiply algorithm stops the iteration 
when the most significant bits of the multiplier are all 
zero. This allows typical 32-bit multiplies to be exe- 
cuted in under one microsecond. The instruction unit 
decodes the instruction opcodes and stores them in 
the decoded instruction queue for immediate use by 
the execution unit. 


The memory management unit (MMU) consists of a 
segmentation unit and a paging unit. Segmentation 
allows the managing of the logical address space by 
providing an extra addressing component, one that 
allows easy code and data relocatability, and effi- 
cient sharing. The paging mechanism operates be- 
neath and is transparent to the segmentation pro- 
cess, to allow management of the physical address 
space. Each segment is divided into one or more 4K 
byte pages. To implement a virtual memory system, 
the Intel386 OX supports full restartability for all 
page and segment faults. 


Memory is organized into one or more variable 
length segments, each up to four gigabytes in size. A 
given region of the linear address space, a segment, 
can have attributes associated with it. These attri- 
butes include its location, size, type (Le. stack, code 
or data), and protection characteristics. Each task 
on an Intel386 OX can have a maximum of 16,381 
segments of up to four gigabytes each, thus provid- 
ing 64 terabytes (trillion bytes) of virtual memory to 
each task. 


The segmentation unit provides four-levels of pro- 
tection for isolating and protecting applications and 
the operating system from each other. The hardware 
enforced protection allows the design of systems 
with a high degree of integrity. 


The Intel386 OX has two modes of operation: Real 
Address Mode (Real Mode), and Protected Virtual 
Address Mode (Protected Mode). In Real Mode the 
Intel386 OX operates as a very fast 8086, but with 


32-bit extensions if desired. Real Mode is required 
primarily to setup the processor for Protected Mode 
operation. Protected Mode provides access to the 
sophisticated memory management, paging and 
privilege capabilities of the processor. 


Within Protected Mode, software can perform a task 
switch to enter into tasks designated as Virtual 8086 
Mode tasks. Each such task behaves with 8086 se- 
mantics, thus allowing 8086 software (an application 
program, or an entire operating system) to execute. 
The Virtual 8086 tasks can be isolated and protect- 
ed from one another and the host Intel386 OX oper- 
ating system, by the use of paging, and the I/O Per- 
mission Bitmap. 


Finally, to facilitate high performance system hard- 
ware designs, the Intel386 OX bus interface offers 
address pipelining, dynamic data bus sizing, and di- 
rect Byte Enable signals for each byte of the data 
bus. These hardware features are described fully be- 
ginning in Section 5. 


The Intel386 OX has 32 register resources in the 
following categories: 


• General Purpose Registers 
• Segment Registers 
• Instruction Pointer and Flags 
• Control Registers 
• System Address Registers 
• Debug Registers 
• Test Registers. 


The registers are a superset of the 8086, 80186 and 
80286 registers, so all 16-bit 8086, 80186 and 
80286 registers are contained within the 32-bit In- 
tel386 OX. 


Figure 2-1 shows all of Intel386 OX base architec- 
ture registers, which include the general address 
and data registers, the instruction pointer, and the 
flags register. The contents of these registers are 
task-specific, so these registers are automatically 
loaded with a new context upon a task switch opera- 
tion. 


The base architecture also includes six directly ac- 
cessible segments, each up to 4 Gbytes in size. The 
segments are indicated by the selector values 
placed in Intel386 OX segment registers of Figure 
2-1. Various selector values can be loaded as a pro- 
gram executes, if desired. 
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Figure 2-1.lnteI386™ 
OX Base 
Architecture 
Registers 


The selectors 
are also task-specific, 
so the segment 
registers 
are automatically 
loaded 
with new context 
upon a task switch 
operation. 


The 
other 
types 
of registers, 
Control, 
System 
Ad- 
dress, 
Debug, 
and Test, 
are primarily 
used by sys- 
tem software. 


2.3.1 
General Purpose Registers 


General 
Purpose 
Registers: 
The eight general 
pur- 


pose registers 
of 32 bits hold data or address quanti- 
ties. The general 
registers, 
Figure 2-2, support 
data 
operands 
of 1, 8, 16, 32 and 64 bits, and bit fields of 
1 to 32 bits. They support 
address 
operands 
of 16 
and 
32 bits. The 
32-bit 
registers 
are named 
EAX, 
EBX, ECX, EDX, ESI, EDI, EBP, and ESP. 


The least significant 
16 bits of the registers 
can be 
accessed 
separately. 
This is done by using the 16- 


bit names 
of the registers 
AX, BX, CX, OX, SI, 01, 
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BP, and SP. When 
accessed 
as a 16-bit operand, 


the upper 16 bits of the register are neither used nor 
changed. 


Finally 
8-bit operations 
can individually 
access 
the 
lowest 
byte (bits 0-7) 
and the higher 
byte (bits 8- 
15) of general 
purpose 
registers 
AX, BX, CX and OX. 


The 
lowest 
bytes 
are named 
AL, BL, CL and 
DL, 


respectively. 
The higher 
bytes 
are named 
AH, BH, 
CH and DH, respectively. 
The individual 
byte acces- 
sibility offers additional 
flexibility 
for data operations, 
but is not used for effective 
address 
calculation. 


31 
16 
15 
8 
7 
0 


AH 
AX 
AL 
EAX 


BH 
BX 
BL 
EBX 


CH 
CX 
CL 
ECX 


DH 
OX 
DL 
EDX 


SI 
ESI 


01 
EDI 


BP 
EBP 


SP 
ESP 


Figure 2-2. General 
Registers 
and Instruction 
Pointer 


The instruction 
pointer, 
Figure 2-2, is a 32-bit regis- 
ter named 
EIP. EIP holds the offset 
of the next in- 
struction 
to be executed. 
The offset 
is always 
rela- 
tive to the base of the code segment 
(CS). The low- 
er 16 bits (bits 0-15) 
of EIP contain 
the 
16-bit 
in- 


struction 
pointer 
named 
IP, which 
is used by 16-bit 


addressing. 


The 
Flags 
Register 
is 
a 
32-bit 
register 
named 
EFLAGS. 
The 
defined 
bits 
and 
bit 
fields 
within 
EFLAGS, 
shown in Figure 2-3, control 
certain opera- 


tions 
and 
indicate 
status 
of the 
Intel386 
OX. The 
lower 
16 bits 
(bit 
0-15) 
of 
EFLAGS 
contain 
the 
16-bit 
flag 
register 
named 
FLAGS, 
which 
is most 


useful when executing 
8086 and 80286 
code. 


VIRTUAL MODE 
RESUME FLAG 
NESTED TASK FLAG 
I/O 
PRIVILEGE LEVEL 
OVERFLOW 
DIRECTION FLAG 
INTERRUPT ENABLE 


NOTE: 
o indicates 
Intel reserved: 
do not define; 
see section 
2.3.10. 


CARRY FLAG 
PARITY FLAG 
AUXILIARY CARRY 
ZERO FLAG 
SIGN FLAG 
TRAP FLAG 


VM 
(Virtual 8086 Mode, bit 17) 


The VM bit provides 
Virtual 8086 Mode within 
Protected 
Mode. 
If set while the Intel386 
DX 
is in Protected 
Mode, 
the 
Intel386 
DX will 
switch 
to 
Virtual 
8086 
operation, 
handling 
segment 
loads as the 8086 does, but gener- 
ating 
exception 
13 faults 
on 
privileged 
op- 
codes. The VM bit can be set only in Protect- 
ed Mode, 
by the 
IRET instruction 
(if current 
privilege 
level = 0) and by task switches 
at 
any privilege 
level. The VM bit is unaffected 
by POPF. 
PUSHF 
always 
pushes 
a 0 in this 
bit, even 
if executing 
in virtual 
8086 
Mode. 


The 
EFLAGS 
image 
pushed 
during 
interrupt 
processing 
or saved during task switches 
will 
contain 
a 1 in this bit if the interrupted 
code 
was executing 
as a Virtual 
8086 Task. 


RF 
(Resume 
Flag, bit 16) 


The 
RF flag is used in conjunction 
with the 
debug 
register 
breakpoints. 
It is checked 
at 
instruction 
boundaries 
before 
breakpoint 
pro- 
cessing. 
When RF is set, it causes any debug 
fault to be ignored 
on the next instruction. 
RF 
is then automatically 
reset at the successful 
completion 
of every instruction 
(no faults are 
signalled) 
except 
the 
IRET 
instruction, 
the 
POPF instruction, 
(and JMP, CALL, 
and INT 
instructions 
causing 
a task switch). 
These 
in- 
structions 
set RF to the value specified 
by the 
memory 
image. 
For example, 
at the 
end of 
the 
breakpoint 
service 
routine, 
the 
IRET 


instruction 
can pop an EFLAG 
image 
having 
the RF bit set and resume the program's 
exe- 
cution at the breakpoint 
address 
without 
gen- 
erating 
another 
breakpoint 
fault on the same 
location. 


NT 
(Nested 
Task, bit 14) 


This flag applies to Protected 
Mode. NT is set 
to indicate 
that the execution 
of this task 
is 
nested 
within 
another 
task. If set, it indicates 
that 
the 
current 
nested 
task's 
Task 
State 
Segment 
(TSS) 
has a valid 
back 
link to the 
previous task's 
TSS. This bit is set or reset by 
control 
transfers 
to other tasks. The value of 
NT in EFLAGS 
is tested 
by the IRET instruc- 


tion to determine 
whether 
to do an inter-task 
return 
or an intra-task 
return. 
A POPF or an 
IRET instruction 
will affect 
the setting 
of this 
bit according 
to the 
image 
popped, 
at any 


privilege 
level. 


10PL 
(Input/Output 
Privilege 
Level, bits 12-13) 


This two-bit 
field applies 
to Protected 
Mode. 


10PL indicates 
the numerically 
maximum 
CPL 
(current 
privilege 
level) value permitted 
to ex- 
ecute 
I/O 
instructions 
without 
generating 
an 
exception 
13 fault or consulting 
the I/O 
Per- 
mission 
Bitmap. 
It also 
indicates 
the 
maxi- 
mum CPL value 
allowing 
alteration 
of the IF 
(INTR Enable 
Flag) bit when 
new values 
are 
popped 
into the EFLAG 
register. 
POPF and 
IRET instruction 
can alter the 10PL field when 
executed 
at CPL = O. Task switches 
can al- 
ways alter the 10PL field, when the new flag 
image 
is loaded 
from 
the 
incoming 
task's 
TSS. 


OF 
(Overflow Flag, bit 11) 
OF is set if the operation resulted in a signed 
overflow. Signed overflow occurs when the 
operation resulted in carry/borrow 
Into the 
sign bit (high-order bit) of the result but did 
not result in a carry/borrow out of the high- 
order bit, or vice-versa. For 8/16/32 bit oper- 
ations, OF is set according to overflow at bit 
7/15/31, respectively. 


DF 
(Direction Flag, bit 10) 
DF defines whether ESI and/or EDI registers 
postdecrement or postincrement during the 
string instructions. Postincrement occurs if 
DF is reset. Postdecrement occurs if DF is 
set. 


IF 
(INTR Enable Flag, bit 9) 
The IF flag, when set, allows recognition of 
external interrupts signalled on the INTR pin. 
When IF is reset, external interrupts signalled 
on the INTR are not recognized. IOPL indi- 
cates the maximum CPL value allowing alter- 
ation of the IF bit when new values are 
popped into EFLAGS or FLAGS. 


TF 
(Trap Enable Flag, bit 8) 
TF controls the generation of exception 1 
trap 
when 
single-stepping 
through 
code. 


When TF is set, the Intel386 DX generates an 
exception 1 trap after the next instruction is 
executed. When TF is reset, exception 1 
traps occur only as a function of the break- 
point addresses loaded into debug registers 
DRO-DR3. 


SF 
(Sign Flag, bit 7) 
SF is set if the high-order bit of the result is 
set, it is reset otherwise. For 8-, 16-, 32-bit 
operations, SF reflects the state of bit 7, 15, 
31 respectively. 
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ZF 
(Zero Flag, bit 6) 
ZF is set if all bits of the result are O.Other- 
wise it is reset. 


AF 
(Auxiliary Carry Flag, bit 4) 
The Auxiliary Flag is used to simplify the addi- 
tion and subtraction of packed BCD quanti- 
ties. AF is set if the operation resulted in a 
carry out of bit 3 (addition) or a borrow into bit 
3 (subtraction). Otherwise AF is reset. AF is 
affected by carry out of, or borrow into bit 3 
only, regardless of overall operand length: 8, 
16 or 32 bits. 


PF 
(Parity Flags, bit 2) 


PF is set if the low-order eight bits of the op- 
eration contains an even number of "1 's" 
(even parity). PF is reset if the low-order eight 
bits have odd parity. PF is a function of only 
the low-order eight bits, regardless of oper- 
and size. 


CF 
(Carry Flag, bit 0) 
CF is set if the operation resulted in a carry 
out of (addition), or a borrow into (subtraction) 
the high-order bit. Otherwise CF is reset. For 
8-, 16- or 32-bit operations, CF is set accord- 
ing to carry/borrow at bit 7, 15 or 31, respec- 
tively. 


Note in these descriptions, "set" means "set to 1," 
and "reset" means "reset to 0." 


Six 16-bit segment registers hold segment selector 
values identifying the currently addressable memory 
segments. Segment registers are shown in Figure 2- 
4. In Protected Mode, each segment may range in 
size from one byte up to the entire linear and physi- 
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cal space of the machine, 4 Gbytes (232 bytes). If a 
maximum 
sized 
segment 
is 
used 
(limit 
FFFFFFFFH) it should be Oword aligned (Le., the 
least two significant bits of the segment base should 
be zero). This will avoid a segment limit violation (ex- 
ception 13) caused by the wrap around. In Real Ad- 
dress Mode, the maximum segment size is fixed at 
64 Kbytes (216 bytes). 


The six segments addressable at any given moment 
are defined by the segment registers CS, SS, OS, 
ES, FS and GS. The selector in CS indicates the 
current code segment; the selector in SS indicates 
the current stack segment; the selectors in OS, ES, 
FS and GS indicate the current data segments. 


The segment descriptor registers are not program- 
mer visible, yet it is very useful to understand their 
content. Inside the Intel386 OX,a descriptor register 
(programmer invisible) is associated with each pro- 
grammer-visible segment register, as shown by Fig- 
ure 2-4. Each descriptor register holds a 32-bit seg- 
ment base address, a 32-bit segment limit, and the 
other necessary segment attributes. 


When a selector value is loaded into a segment reg- 
ister, the associated descriptor register is automati- 
cally updated with the correct information. In Real 
Address Mode, only the base address is updated 
directly (by shifting the selector value four bits to the 
left), since the segment maximum limit and attributes 
are fixed in Real Mode. In Protected Mode, the base 
address, the limit, and the attributes are all updated 
per the contents of the segment descriptor indexed 
by the selector. 


Whenever a memory reference occurs, the segment 
descriptor register associated with the segment be- 
ing used is automatically involved with the memory 
reference. The 32-bit segment base address be- 
comes a component of the linear address calcula- 


tion, the 32-bit limit is used for the limit-check opera- 
tion, and the attributes are checked against the type 
of memory reference requested. 


The Intel386 OX has three control registers of 32 
bits, CRO,CR2 and CR3, to hold machine state of a 
global nature (not specific to an individual task). 
These registers, along with System Address Regis- 
ters described in the next section, hold machine 
state that affects all tasks in the system. To access. 
the Control Registers, load and store instructions 
are defined. 


CRO: Machine Control 
Register (includes 80286 
Machine Status Word) 


CRO,shown in Figure 2-5, contains 6 defined bits for 
control and status purposes. The low-order 16 bits 
of CROare also known as the Machine Status Word, 
MSW, for compatibility with 80286 Protected Mode. 
LMSW and SMSW instructions are taken as special 
aliases of the load and store CROoperations, where 
only the low-order 16 bits of CROare involved. For 
compatibility with 80286 operating systems the In- 
tel386 OX LMSW instructions work in an identical 
fashion to the LMSW instruction on the 80286. (Le. It 
only operates on the low-order 16-bits of CROand it 
ignores the new bits in CRO.)New Intel386 OXoper- 
ating systems should use the MOV CRO, Reg in- 
struction. 


The defined CRObits are described below. 
PG 
(Paging Enable, bit 31) 
the PG bit is set to enable the on-chip paging 
unit. It is reset to disable the on-chip paging 
unit. 


R 
(reserved, bit 4) 
This bit is reserved by Intel. When loading CRO 
care should be taken to not alter the value of 
this bit. 


MSW 


NOTE: 0indicates 
Intel reserved: Do not define; SEE SECTION 2.3.10 


Figure 2·5. Control Register 0 
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Intel reserved: 
Do not define; SEE SECTION 
2.3.10 


Figure 2-6. Control 
Registers 
2 and 3 


TS 
(Task Switched, 
bit 3) 


TS is automatically 
set whenever 
a task switch 
operation 
is performed. 
If TS is set, a coproces- 
sor ESCape 
opcode 
will cause a Coprocessor 
Not Available 
trap (exception 
7). The trap han- 
dier typically 
saves the Intel387 
DX coproces- 
sor context 
belonging 
to a previous 
task, loads 
the Intel387 
DX coprocessor 
state belonging 
to 
the current 
task, 
and clears 
the TS bit before 
returning 
to the faulting 
coprocessor 
opcode. 


EM 
(Emulate 
Coprocessor, 
bit 2) 


The EMulate 
coprocessor 
bit is set to cause all 
coprocessor 
opcodes 
to generate 
a Coproces- 
sor Not Available 
fault (exception 
7). It is reset 
to allow 
coprocessor 
opcodes 
to be executed 
on an actual 
Intel387 
DX coprocessor 
(this is 
the 
default 
case 
after 
reset). 
Note 
that 
the 
WAIT opcode 
is not affected 
by the EM bit set- 
ting. 


MP 
(Monitor 
Coprocessor, 
bit 1) 


The MP bit is used in conjunction 
with the TS 
bit to determine 
if the WAIT opcode 
will gener- 
ate a Coprocessor 
Not Available 
fault (excep- 
tion 7) when TS = 1. When both MP = 1 and 
TS = 1, the WAIT 
opcode 
generates 
a trap. 
Otherwise, 
the WAIT opcode 
does 
not gener- 
ate a trap. 
Note 
that 
TS is automatically 
set 
whenever 
a task switch operation 
is performed. 


PE 
(Protection 
Enable, bit 0) 


The PE bit is set to enable the Protected 
Mode. 


If PE is reset, the processor 
operates 
again in 
Real Mode. PE may be set by loading 
MSW or 
CRO. PE can be reset only by a load into CRO. 
Resetting 
the PE bit is typically 
part of a longer 
instruction 
sequence 
needed 
for proper 
tran- 
sition from Protected 
Mode to Real Mode. Note. 


that for strict 80286 compatibility, 
PE cannot 
be 
reset by the LMSW instruction. 


CR2, shown in Figure 2-6, holds the 32-bit linear ad- 
dress that caused 
the last page fault detected. 
The 


error 
code 
pushed 
onto 
the 
page 
fault 
handler's 
stack 
when 
it is invoked 
provides 
additional 
status 
information 
on this page fault. 


CR3, 
shown 
in Figure 
2-6, 
contains 
the 
physical 
base 
address 
of the 
page 
directory 
table. 
The 
In- 
tel386 
DX 
page 
directory 
table 
is 
always 
page- 
aligned 
(4 
Kbyte-aligned). 
Therefore 
the 
lowest 
twelve 
bits 
of CR3 
are ignored 
when 
written 
and 
they store as undefined. 


A task 
switch 
through 
a TSS which 
changes 
the 
value in CR3, or an explicit 
load into CR3 with any 
value, will invalidate 
all cached 
page table entries 
in 
the paging unit cache. 
Note that if the value in CR3 
does not change 
during the task switch, the cached 
page table entries 
are not flushed. 


Four special 
registers 
are defined 
to reference 
the 
tables 
or segments 
supported 
by the 
80286 
CPU 
and Intel386 
DX protection 
model. 
These 
tables 
or 
segments 
are: 


GDT (Global 
Descriptor 
Table), 


IDT (Interrupt 
Descriptor 
Table), 


LDT (Local Descriptor 
Table), 


TSS (Task State Segment). 


The 
addresses 
of these 
tables 
and 
segments 
are 
stored 
in special 
registers, 
the System 
Address 
and 
System 
Segment 
Registers 
illustrated 
in Figure 2-7. 


These registers 
are named GDTR, IDTR, LDTR and 
TR, respectively. 
Section 
4 Protected 
Mode Archi- 
tecture 
describes 
the use of these registers. 


These 
registers 
hold the 32-bit 
linear base address 
and 16-bit limit of the GDT and IDT, respectively. 


The GDT and IDT segments, 
since they are global to 
all tasks 
in the system, 
are defined 
by 32-bit 
linear 


addresses 
(subject 
to page translation 
if paging 
is 
enabled) 
and 16-bit limit values. 


CR2 


CR3 


SYSTEM 
ADDRESS 
REGISTERS 
47 
32-BIT 
LINEAR 
BASE ADDRESS 
16 15 
LIMIT 
0 
~~~:I==========I====I 


SYSTEM 
SEGMENT 


REGISTERS 


TR 


LDTR 


SELECTOR 


SELECTOR 


.. 


r 
32-BIT LINEAR 
BASE ADDRESS 
32-BIT SEGMENT 
LIMIT 
ATIRIBUTES' 
==~-====_-====_I======tEB 


Figure 2-7. System Address and System Segment Registers 


Test Registers: Two 
registers 
are used to control 
the testing 
of the RAM/CAM 
(Content 
Addressable 
Memories) 
in the Translation 
Lookaside 
Buffer 
por- 
tion of the 
Intel386 
OX. TR6 
is the command 
test 
register, 
and TR? is the data register which contains 
the 
data 
of the Translation 
Lookaside 
buffer 
test. 


Their use is discussed 
in section 
2.11 Testability. 


These 
registers 
hold the 16-bit selector 
for the LOT 
descriptor 
and the TSS descriptor, 
respectively. 


The 
LOT and TSS segments, 
since 
they 
are task- 
specific 
segments, 
are defined 
by selector 
values 
stored 
in the system 
segment 
registers. 
Note that a 
segment 
descriptor 
register 
(programmer-invisible) 
is associated 
with each system 
segment 
register. 


Debug Registers: The six programmer 
accessible 
debug 
registers 
provide 
on-chip 
support 
for debug- 
ging. Debug Registers 
DRO-3 
specify the four linear 
breakpoints. 
The 
Debug 
Control 
Register 
DR? 
is 
used to set the breakpoints 
and the Debug 
Status 
Register 
DR6, 
displays 
the 
current 
state 
of 
the 
breakpoints. 
The use of the debug 
registers 
is de- 
scribed 
in section 
2.12 Debugging support. 


DEBUG REGISTERS 
31 
0 


LINEAR BREAKPOINT 
ADDRESS 
0 


LINEAR BREAKPOINT 
ADDRESS 
1 


LINEAR BREAKPOINT 
ADDRESS 
2 


LINEAR BREAKPOINT 
ADDRESS 
3 


Intel reserved. 
Do not define. 


In~1 reserved. 
Do not define. 


BREAKPOINT 
STATUS 


BREAKPOINT 
CONTROL 


ORO 


DR1 


DR2 


DR3 


DR4 


DR5 


DR6 


DR? 


TEST REGISTERS 
(FOR PAGE CACHE) 
31 
0 
I TEST CONTROL 


TEST STATUS 


TR6 


TR? 


There are a few differences 
regarding 
the accessibil- 
ity of the registers 
in Real and Protected 
Mode. Ta- 
ble 2-1 summarizes 
these 
differences. 
See Section 
4 Protected Mode Architecture for further 
details. 


2.3.10 
Compatibility 


VERY IMPORTANT NOTE: 
COMPATIBILITY WITH FUTURE PROCESSORS 


In the preceding register descriptions, note cer- 
tain Intel386 OX register bits are Intel reserved. 
When reserved bits are called out, treat them as 
fully undefined. This is essential for your soft- 
ware compatibility with future processors! Fol- 
low the guidelines below: 
1) Do not depend on the states of any unde- 
fined bits when testing the values of defined 
register bits. Mask them out when testing. 
2) Do not depend on the states of any unde- 
fined bits when storing them to memory or 
another register. 
3) Do not depend on the ability to retain infor- 
mation written into any undefined bits. 
4) When loading registers always load the unde- 
fined bits as zeros. 


•• 


Use in 
Use in 
Use In 


Register 
Real Mode 
Protected 
Mode 
Virtual 
8086 Mode 


Load 
Store 
Load 
Store 
Load 
Store 


General 
Registers 
Yes 
Yes 
Yes 
Yes 
Yes 
Yes 


Segment 
Registers 
Yes 
Yes 
Yes 
Yes 
Yes 
Yes 


Flag Register 
Yes 
Yes 
Yes 
Yes 
IOPL' 
IOPL' 


Control 
Registers 
Yes 
Yes 
PL = 0 
PL = 0 
No 
Yes 


GOTR 
Yes 
Yes 
PL = 0 
Yes 
No 
Yes 


IOTR 
Yes 
Yes 
PL = 0 
Yes 
No 
Yes 


LOTR 
No 
No 
PL = 0 
Yes 
No 
No 


TR 
No 
No 
PL = 0 
Yes 
No 
No 


Debug Control 
Yes 
Yes 
PL = 0 
PL = 0 
No 
No 


Test Registers 
Yes 
Yes 
PL = 0 
PL = 0 
No 
No 


NOTES: 
PL = 0: The registers 
can be accessed 
only when the current 
privilege 
level is zero. 
'IOPL: 
The PUSHF 
and POPF instructions 
are made 
I/O 
Privilege 
Level sensitive 
in Virtual 
8086 
Mode. 


5) However, 
registers 
which 
have 
been 
previ- 
ously 
stored 
may 
be reloaded 
without 
mask· 
ing. 


Depending 
upon 
the 
values 
of undefined 
regis- 
ter bits will make your 
software 
dependent 
upon 
the 
unspecified 
Intel386 
DX 
handling 
of 
these 
bits. 
Depending 
on undefined 
values 
risks 
mak- 
Ing your 
software 
incompatible 
with 
future 
proc- 
essors 
that 
define 
usages 
for 
the 
Intel386 
DX- 
undefined 
bits. 
AVOID 
ANY SOFTWARE 
DEPEN- 
DENCE 
UPON 
THE 
STATE 
OF 
UNDEFINED 
In- 
tel386 
DX REGISTER 
BITS. 


The instruction 
set is divided 
into nine categories 
of 
operations: 


Data Transfer 


Arithmetic 


Shift/Rotate 


String Manipulation 


Bit Manipulation 


Control 
Transfer 


High Level Language 
Support 


Operating 
System 
Support 


Processor 
Control 


These 
Intel386 
OX instructions 
are listed 
in Table 
2-2. 


All Intel386 
OX instructions 
operate 
on either 0, 1, 2, 


or 3 operands; 
where an operand 
resides 
in a regis- 
ter, in the instruction 
itself, or in memory. 
Most zero 
operand 
instructions 
(e.g. CLI, STI) take 
only 
one 
byte. 
One 
operand 
instructions 
generally 
are 
two 
bytes long. The average 
instruction 
is 3.2 bytes long. 


Since 
the 
Intel386 
OX has 
a 
16-byte 
instruction 
queue, 
an 
average 
of 
5 instructions 
will 
be 
pre- 
fetched. 
The use of two operands 
permits the follow- 
ing types of common 
instructions: 


Register 
to Register 


Memory 
to Register 


Immediate 
to Register 


Register 
to Memory 


Immediate 
to Memory. 


The operands 
can be either 8, 16, or 32 bits long. As 
a general 
rule, when executing 
code written 
for the 
Intel386 
OX (32-bit code), operands 
are 8 or 32 bits; 


when executing 
existing 
80286 or 8086 code (16-bit 
code), 
operands 
are 8 or 16 bits. 
Prefixes 
can 
be 
added 
to all instructions 
which 
override 
the default 
length of the operands, 
(Le. use 32-bit operands 
for 
16-bit code, or 16-bit operands 
for 32-bit code). 


For a more elaborate 
description 
of the instruction 
set, refer 
to the Intel386 DX Programmer's Refer- 
ence Manual. 


GENERAL 
PURPOSE 


MOV 
Move operand 


PUSH 
Push operand 
onto stack 


POP 
Pop operand 
off stack 


PUSHA 
Push all registers 
on stack 


POPA 
Pop all registers off stack 


XCHG 
Exchange 
Operand, 
Register 


XLAT 
Translate 


CONVERSION 


MOVZX 
Move byte or Word, Dword, with zero 
extension 


MOVSX 
Move byte or Word, Dword, sign 
extended 


CBW 
Convert 
byte to Word, or Word to Dword 


CWO 
Convert Word to DWORD 


CWDE 
Convert 
Word to DWORD extended 


COO 
Convert 
DWORD to OWORD 


INPUT/OUTPUT 


IN 
Input operand from 110 space 


OUT 
Output operand to I/O space 


ADDRESS 
OBJECT 


LEA 
Load effective 
address 


LOS 
Load pointer into 0 segment 
register 


LES 
Load pointer into E segment 
register 


LFS 
Load pointer into F segment 
register 


LGS 
Load pointer into G segment 
register 


LSS 
Load pointer into S (Stack) segment 
register 


FLAG MANIPULATION 


LAHF 
Load A register from Flags 


SAHF 
Store A register in Flags 


PUSHF 
Push flags onto stack 


POPF 
Pop flags off stack 


PUSHFD 
Push EFlags onto stack 


POPFD 
Pop EFlags off stack 


CLC 
Clear Carry Flag 


CLD 
Clear Direction 
Flag 


CMC 
Complement 
Carry Flag 


STC 
Set Carry Flag 
sm 
Set Direction 
Flag 


ADDITION 


ADD 
Add operands 


ADC 
Add with carry 


INC 
Increment 
operand 
by 1 


AAA 
ASCII adjust for addition 


DAA 
Decimal adjust for addition 


SUBTRACTION 


SUB 
Subtract 
operands 


SBB 
Subtract 
with borrow 


DEC 
Decrement 
operand 
by 1 


NEG 
Negate operand 


CMP 
Compare 
operands 


DAS 
Decimal adjust for subtraction 


AAS 
ASCII Adjust for subtraction 


MULTIPLICATION 


MUL 
Multiply Double/Single 
Precision 


IMUL 
Integer multiply 


AAM 
ASCII adjust after multiply 


DIVISION 


DIV 
Divide unsigned 


IDIV 
Integer Divide 


AAD 
ASCII adjust before division 


MOVS 
Move byte or Word, Dword string 


INS 
Input string from 110 space 


OUTS 
Output string to I/O space 


CMPS 
Compare 
byte or Word, Dword string 


SCAS 
Scan Byte or Word, Dword string 


LODS 
Load byte or Word, Dword string 


STOS 
Store byte or Word, Dword string 


REP 
Repeat 


REPE/ 
REPZ 
Repeat while equal/zero 


RENE/ 
REPNZ 
Repeat while not equal/not 
zero 


LOGICALS 


NOT 
"NOT" 
operands 


AND 
"AND" 
operands 


OR 
"Inclusive 
OR" operands 


XOR 
"Exclusive 
OR" operands 


TEST 
"Test" 
operands 


SHIFTS 


SHL/SHR 
Shift logical left or right 


SALISAR 
Shift arithmetic 
left or right 


SHLD/ 
SHRD 
Double shift left or right 


ROTATES 


ROL/ROR 
Rotate left/right 


RCL/RCR 
Rotate through carry left/right 


SINGLE 
BIT INSTRUCTIONS 


BT 
Bit Test 


BTS 
Bit Test and Set 


BTR 
Bit Test and Reset 


BTC 
Bit Test and Complement 


BSF 
Bit Scan Forward 


BSR 
Bit Scan Reverse 


CONDITIONAL 
TRANSFERS 


SETCC 
Set byte equal to condition 
code 


JAlJNBE 
Jump if above/not 
below nor equal 


JAE/JNB 
Jump if above or equal/not 
below 


JB/JNAE 
Jump if below/not 
above nor equal 


JBE/JNA 
Jump if below or equal/not 
above 


JC 
Jump if carry 


JE/JZ 
Jump if equal/zero 


JG/JNLE 
Jump if greater/not 
less nor equal 


JGE/JNL 
Jump if greater or equal/not 
less 


JLlJNGE 
Jump if less/not 
greater nor equal 


JLE/JNG 
Jump if less or equal/not 
greater 


JNC 
Jump if not carry 


JNE/JNZ 
Jump if not equal/not 
zero 


JNO 
Jump if not overflow 


JNP/JPO 
Jump if not parity/parity 
odd 


JNS 
Jump if not sign 


JO 
Jump if overflow 


JP/JPE 
Jump if parity/parity 
even 


JS 
Jump if Sign 


Table 2-2f. Program Control Instructions 
(Continued) 


UNCONDITIONAL 
TRANSFERS 


CALL 
Call procedure/task 


RET 
Return from procedure 


JMP 
Jump 


ITERATION 
CONTROLS 


LOOP 
Loop 


LOOPE/ 
LOOPZ 
Loop if equal/zero 


LOOPNE/ 
LOOPNZ 
Loop if not equal/not 
zero 


JCXZ 
JUMP if register CX = 0 


INTERRUPTS 


INT 
Interrupt 


INTO 
Interrupt 
if overflow 


IRET 
Return from Interrupt/Task 


CLI 
Clear interrupt 
Enable 


STI 
Set Interrupt 
Enable 


BOUND 
Check Array Bounds 


ENTER 
Setup Parameter 
Block for Entering 
Procedure 


LEAVE 
Leave Procedure 


SGDT 
Store Global Descriptor 
Table 


SlOT 
Store Interrupt 
Descriptor 
Table 


STR 
Store Task Register 


SLOT 
Store Local Descriptor 
Table 


LGDT 
Load Global Descriptor 
Table 


L1DT 
Load Interrupt 
Descriptor 
Table 


LTR 
Load Task Register 


LLDT 
Load Local Descriptor 
Table 


ARPL 
Adjust Requested 
Privilege Level 


LAR 
Load Access 
Rights 


LSL 
Load Segment 
Limit 


VERR/ 
VERW 
Verify Segment 
for Reading 
or Writing 


LMSW 
Load Machine Status Word (lower 
16 bits of CRO) 


SMSW 
Store Machine 
Status Word 


HLT 
Halt 


WAIT 
Wait until BUSY # negated 


ESC 
Escape 


LOCK 
Lock Bus 


2.5.1 
Addressing 
Modes Overview 


The Intel386 OX provides a total of 11 addressing 
modes for instructions to specify operands. The ad- 
dressing modes are optimized to allow the efficient 
execution of high level languages such as C and 
FORTRAN, and they cover the vast majority of data 
references needed by high-level languages. 


Two of the addressing modes provide for instruc- 
tions that operate on register or immediate oper- 
ands: 


Register 
Operand 
Mode: The operand is located 
in one of the 8-, 16- or 32-bit general registers. 


Immediate 
Operand 
Mode: 
The operand is in- 
cluded in the instruction as part of the opcode. 


2.5.3 
32-Bit Memory Addressing 
Modes 


The remaining 9 modes provide a mechanism for 
specifying the effective address of an operand. The 
linear address consists of two components: the seg- 
ment base address and an effective address. The 
effective address is calculated by using combina- 
tions of the following four address elements: 


DISPLACEMENT: 
An 8-, or 32-bit immediate value, 
following the instruction. 


BASE: The contents of any general purpose regis- 
ter. The base registers are generally used by compil- 
ers to point to the start of the local variable area. 


INDEX: The contents of any general purpose regis- 
ter except for ESP. The index registers are used to 
access the elements of an array, or a string of char- 
acters. 


SCALE: The index register's value can be multiplied 
by a scale factor, either 1, 2, 4 or 8. Scaled index 
mode is especially useful for accessing arrays or 
structures. 


Combinations of these 4 components make up the 9 
additional addressing modes. There is no perform- 
ance penalty for using any of these addressing com- 
binations, since the effective address calculation is 
pipelined with the execution of other instructions. 


The one exception is the simultaneous use of Base 
and Index components which requires one addition- 
al clock. 


As shown in Figure 2-9, the effective address (EA) of 
an operand is calculated according to the following 
formula. 


Direct Mode: The operand's offset is contained as 
part of the instruction as an 8-, 16- or 32-bit dis- 
placement. 
EXAMPLE: 
tNC Word 
PTR [500] 


Register Indirect Mode: A BASE register contains 
the address of the operand. 
EXAMPLE: 
MOV [ECX], 
EDX 


Based Mode: A BASE register's contents is added 
to a DISPLACEMENTto form the operands offset. 
EXAMPLE: 
MOV ECX, [EAX + 24] 


Index Mode: An INDEX register's contents is added 
to a DISPLACEMENTto form the operands offset. 
EXAMPLE: 
ADD EAX, TABLE[ESI] 


Scaled Index Mode: An INDEX register's contents is 
multiplied by a scaling factor which is added to a 
DISPLACEMENTto form the operands offset. 
EXAMPLE: 
IMUL EBX, TABLE[ESI·4],7 


Based Index Mode: The contents of a BASE register 
is added to the contents of an INDEX register to 
form the effective address of an operand. 
EXAMPLE: 
MOV EAX, 
[ESI] [EBX] 


Based Scaled Index Mode: The contents of an IN- 
DEX register is multiplied by a SCALING factor and 
the result is added to the contents of a BASE regis- 
ter to obtain the operands offset. 
EXAMPLE: 
MOV ECX, [EDX·S] 
[EAX] 


Based Index Mode with Displacement: The contents 
of an INDEX Register and a BASE register's con- 
tents and a DISPLACEMENT are all summed to- 
gether to form the operand offset. 
EXAMPLE: 
ADD EDX, [ESI] [EBP + OOFFFFFOH] 


Based Scaled Index Mode with Displacement: The 
contents of an INDEX register are multiplied by a 
SCALING factor, the result is added to the contents 
of a BASE register and a DISPLACEMENT to form 
the operand's offset. 
EXAMPLE: 
MOV 
EAX, 
LOCALTABLE[EDI·4] 
[EBP+SO] 
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2.5.4 
Differences 
Between 
16 and 32 
Bit Addresses 


In order 
to provide 
software 
compatibility 
with 
the 
80286 
and the 8086, the 
Intel386 
DX can execute 
16-bit instructions 
in Real and Protected 
Modes. The 
processor 
determines 
the size of the instructions 
it is 
executing 
by examining 
the D bit in the CS segment 
Descriptor. 
If the D bit is 0 then all operand 
lengths 
and effective 
addresses 
are assumed 
to be 16 bits 
long. If the D bit is 1 then the default 
length for oper- 
ands 
and 
addresses 
is 32 bits. 
In Real 
Mode 
the 
default 
size for operands 
and addresses 
is 16-bits. 


Regardless 
of the default 
precision 
of the operands 
or addresses, 
the Intel386 
DX is able to execute 
ei- 
ther 16 or 32-bit instructions. 
This is specified 
via the 
use of override 
prefixes. 
Two prefixes, 
the Operand 
Size Prefix 
and the Address 
Length 
Prefix, 
over- 
ride the value of the D bit on an individual 
instruction 
basis. These prefixes 
are automatically 
added by In- 
tel assemblers. 


Example: 
The processor 
is executing 
in Real Mode 
and the programmer 
needs to access the EAX regis- 
ters. 
The 
assembler 
code 
for this 
might 
be MOV 
EAX, 32-bit 
MEMORYOP, 
ASM386 
Macro 
Assem- 
bler automatically 
determines 
that an Operand 
Size 
Prefix is needed 
and generates 
it. 


Example: 
The D bit is 0, and the programmer 
wishes 
to use Scaled 
Index addressing 
mode to access 
an 
array. The Address 
Length 
Prefix allows 
the use of 
MOV 
DX, TABLE[ES'*2]. 
The 
assembler 
uses 
an 
Address 
Length 
Prefix since, with D = 0, the default 
addressing 
mode is 16-bits. 


Example: 
The D bit is 1, and the program 
wants 
to 
store a 16-bit quantity. 
The Operand 
Length Prefix is 
used to specify 
only a 16-bit value; 
MOV 
MEM16, 
DX. 


16-Blt Addressing 
32-Blt Addressing 


BASE REGISTER 
BX,BP 
Any 32-bit GP Register 
INDEX REGISTER 
SI,DI 
Any 32-bit GP Register 
Except ESP 
SCALE FACTOR 
none 
1,2,4,8 
DISPLACEMENT 
0,8,16 bits 
0,8,32 bits 


The OPERAND LENGTH and Address Length Pre- 
fixes can be applied separately or in combination to 
any instruction. The Address Length Prefix does not 
allow addresses over 64K bytes to be accessed in 
Real Mode. A memory address which exceeds 
FFFFH will result in a General Protection Fault. An 
Address Length Prefix only allows the use of the ad- 
ditional Intel386 OX addressing modes. 


When executing 32-bit code, the Intel386 DX uses 
either 8-, or 32-bit displacements, and any register 
can be used as base or index registers. When exe- 
cuting 16-bit code, the displacements are either 8, or 
16 bits, and the base and index register conform to 
the 80286 model. Table 2-3 illustrates the differenc- 
es. 


The Intel386 DX supports all of the data types com- 
monly used in high level languages: 


Bit: A single bit quantity. 


Bit Field: A group of up to 32 contiguous bits, 
which spans a maximum of four bytes. 


Bit String: A set of contiguous bits, on the Intel386 
DX bit strings can be up to 4 gigabits long. 


Byte: A signed 8-bit quantity. 


Unsigned Byte: An unsigned 8-bit quantity. 


Long Integer (Double Word): A signed 32-bit quan- 
tity. All operations assume a 2's complement rep- 
resentation. 


Unsigned Integer (Word): An 
unsigned 16-bit 
quantity. 


Unsigned Long Integer (Double Word): An un- 
signed 32-bit quantity. 


Unsigned Quad Word: An unsigned 64-bit quanti- 
ty. 


Offset: A 16- or 32-bit offset only quantity which 
indirectly references another memory location. 


Pointer: A full pointer which consists of a 16-bit 
segment selector and either a 16- or 32-bit offset. 


Char: A byte representation of an ASCII Alphanu- 
meric or control character. 


String: A contiguous sequence of bytes, words or 
dwords. A string may contain between 1 byte and 
4 Gbytes. 


BCD:A byte (unpacked) representation of decimal 
digits 0-9. 


Packed BCD: A byte (packed) representation of 
two decimal digits 0-9 
storing one digit in each 
nibble. 


When the Intel386 DX is coupled with an Intel387 
DX Numerics Coprocessor then the following com- 
mon Floating Point types are supported. 


Floating Point: A signed 32-, 64-, or 80-bit real 
number representation. Floating point numbers 
are supported by the Intel387 DX numerics co- 
processor. 


Figure 2-10 illustrates the data types supported by 
the Intel386 DX and the Intel387 DX numerics co- 
processor. 
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2.7.1 
Introduction 


Memory on the Intel386 OX is divided up into 8-bit 
quantities (bytes), 16-bit quantities (words), and 
32-bit quantities (dwords). Words are stored in two 
consecutive bytes in memory with the low-order byte 
at the lowest address, the high order byte at the high 
address. Dwords are stored in four consecutive 
bytes in memory with the low-order byte at the low- 
est address, the high-order byte at the highest ad- 
dress. The address of a word or dword is the byte 
address of the low-order byte. 


In addition to these basic data types, the Intel386 
OX supports two larger units of memory: pages and 
segments. Memory can be divided up into one or 
more variable 
length 
segments, which 
can 
be 
swapped to disk or shared between programs. Mem- 
ory can also be organized into one or more 4K byte 
pages. Finally, both segmentation and paging can 
be combined, gaining the advantages of both sys- 
tems. The Intel386 OX supports both pages and 
segments in order to provide maximum flexibility to 
the system designer. Segmentation and paging are 
complementary. Segmentation is useful for organiz- 
ing memory in logical modules, and as such is a tool 
for the application programmer, while pages are use- 
ful for the system programmer for managing the 
physical memory of a system. 


2.7.2 
Address Spaces 


The Intel386 OX has three distinct address spaces: 
logical, 
linear, 
and physical. 
A logical 
address 


ErrEcnvE 


ADDRESS 
2 
D 
LOGICAL 
OR 
14 VIRTUAL 
ADDRESS 


DESCRIPTOR 
INDEX 


(also known as a virtual address) consists of a se- 
lector and an offset. A selector is the contents of a 
segment register. An offset is formed by summing all 
of the addressing components (BASE, INDEX, DIS- 
PLACEMENT) discussed in section 2.5.3 Memory 
Addressing 
Modes into an effective address. Since 
each task on Intel386 OX has a maximum of 16K 
(214 -1) 
selectors, and offsets can be 4 gigabytes, 


(232 bits) this gives a total of 246 bits or 64 terabytes 
of logical address space per task. The programmer 
sees this virtual address space. 


The segmentation unit translates the logical 
ad- 
dress space into a 32-bit linear address space. If the 
paging unit is not enabled then the 32-bit linear ad- 
dress corresponds to the physical 
address. The 
paging unit translates the linear address space into 
the physical address space. The physical 
address 
is what appears on the address pins. 


The primary difference between Real Mode and Pro- 
tected Mode is how the segmentation unit performs 
the translation of the logical address into the linear 
address. In Real Mode, the segmentation unit shifts 
the selector left four bits and adds the result to the 
offset to form the linear address. While in Protected 
Mode every selector has a linear base address as- 
sociated with it. The linear base address is stored in 
one of two operating system tables (i.e. the Local 
Descriptor Table or Global Descriptor Table). The 
selector's linear base address is added to the offset 
to form the final linear address. 


Figure 2-11 shows the relationship between the vari- 
ous address spaces. 
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The main data structure 
used to organize 
memory 
is 
the segment. 
On the Intel386 
DX, segments 
are vari- 
able 
sized 
blocks 
of linear 
addresses 
which 
have 
certain 
attributes 
associated 
with 
them. 
There 
are 
two 
main 
types 
of segments: 
code 
and 
data, 
the 
segments 
are of variable 
size and can be as small 
as 1 byte or as large as 4 gigabytes 
(232 bytes). 


In order 
to provide 
compact 
instruction 
encoding, 
and 
increase 
processor 
performance, 
instructions 
do not need to explicitly 
specify which segment 
reg- 
ister is used. A default 
segment 
register 
is automati- 
cally 
chosen 
according 
to the 
rules 
of Table 
2-4 
(Segment 
Register 
Selection 
Rules). In general, data 
references 
use the selector 
contained 
in the DS reg- 
ister; Stack 
references 
use the SS register 
and In- 
struction 
fetches 
use the CS register. 
The contents 
of the Instruction 
Pointer provides 
the offset. Special 
segment 
override 
prefixes 
allow the explicit 
use of a 
given 
segment 
register, 
and 
override 
the 
implicit 
rules listed in Table 
2-4. The override 
prefixes 
also 
allow the use of the ES, FS and GS segment 
regis- 
ters. 


There 
are no restrictions 
regarding 
the overlapping 
of the base addresses 
of any segments. 
Thus, all 6 
segments 
could 
have the base address 
set to zero 
and create 
a system 
with a four gigabyte 
linear ad- 


dress space. This creates 
a system where the virtual 
address 
space 
is the 
same 
as the 
linear 
address 
space. 
Further 
details 
of 
segmentation 
are 
dis- 
cussed 
in section 
4.1. 


The Intel386 
DX has two distinct 
physical 
address 
spaces: 
Memory 
and I/O. Generally, 
peripherals 
are 
placed 
in I/O 
space 
although 
the Intel386 
DX also 


.supports 
memory-mapped 
peripherals. 
The 
I/O 
space 
consists 
of 64K bytes, 
it can be divided 
into 
64K 8-bit ports, 32K 16-bit ports, or 16K 32-bit ports, 
or any combination 
of ports 
which 
add 
up to less 
than 64K bytes. The 64K I/O 
address 
space 
refers 
to physical 
memory 
rather than linear address 
since 
I/O instructions 
do not go through 
the segmentation 
or paging hardware. 
The M/IO# 
pin acts as an addi- 
tional address 
line thus allowing the system designer 
to easily determine 
which address space the proces- 
sor is accessing. 


Type 
of 
I 
Implied (Default) 
Segment 
Override 
I 
Memory 
Reference 
Segment 
Use 
Prefixes 
Possible 


Code Fetch 
CS 
None 


Destination 
of PUSH, PUSHF, INT, 
SS 
None 
CALL, PUSHA Instructions 


Source of POP, POPA, POPF, 
SS 
None 
IRET, RET instructions 


Destination 
of STOS, MOVS, REP 
ES 
None 
STOS, REP MOVS Instructions 
(DI is Base Register) 


Other Data References, 
with 
Effective 
Address 
Using Base 
Register 
of: 
[EAX] 
DS 
DS,CS,SS,ES,FS,GS 
[EBX] 
DS 
DS,CS,SS,ES,FS,GS 
[ECX] 
DS 
DS,CS,SS,ES,FS,GS 


- 
[EDX] 
DS 
DS,CS,SS,ES,FS,GS 
[ESI] 
DS 
DS,CS,SS,ES,FS,GS 
[EDI] 
DS 
DS,CS,SS,ES,FS,GS 
[EBP] 
SS 
DS,CS,SS,ES,FS,GS 
[ESP] 
SS 
DS,CS,SS,ES,FS,GS 


The I/O ports are accessed via the IN and OUT I/O 
instructions, with the port address supplied as an 
immediate 8-bit constant in the instruction or in the 
OXregister. All 8- and 16-bit port addresses are zero 
extended on the upper address lines. The I/O in- 
structions cause the M/IOil' pin to be driven low. 


I/O port addresses OOF8Hthrough OOFFHare re- 
served for use by Intel. 


2.9.1 
Interrupts 
and Exceptions 


Interrupts and exceptions alter the normal program 
flow, in order to handle external events, to report 
errors or exceptional conditions. The difference be- 
tween interrupts and exceptions is that interrupts are 
used to handle asynchronous external events while 
exceptions handle instruction faults. Although a pro- 
gram can generate a software interrupt via an INT N 
instruction, the processor treats software interrupts 
as exceptions. 


Hardware interrupts occur as the result of an exter- 
nal event and are classified into two types: maskable 
or non-maskable. Interrupts are serviced after the 
execution of the current instruction. After the inter- 
rupt handler is finished servicing the interrupt, exe- 
cution proceeds with the instruction immediately af- 
ter the interrupted instruction. sections 2.9.3 and 
2.9.4 discuss the differences between Maskable and 
Non-Maskable interrupts. 


Exceptions are classified as faults, traps, or aborts 
depending on the way they are reported, and wheth- 
er or not restart of the instruction causing the excep- 
tion is supported. Faults are exceptions that are de- 
tected and serviced before 
the execution of the 
faulting instruction. A fault would occur in a virtual 
memory system, when the processor referenced a 
page or a segment which was not present. The oper- 
ating system would fetch the page or segment from 
disk, and then the Intel386 OX would restart the in- 
struction. Traps are exceptions that are reported im- 
mediately after 
the execution of the instruction 
which caused the problem. User defined interrupts 
are examples of traps. Aborts are exceptions which 
do not permit the precise location of the instruction 
causing the exception to be determined. Aborts are 
used to report severe errors, such as a hardware 
error, or illegal values in system tables. 


Thus, when an interrupt service routine has been 
completed, execution proceeds from the instruction 
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immediately following the interrupted instruction. On 
the other hand, the return address from an excep- 
tion fault routine will always point at the instruction 
causing the exception and include any leading in- 
struction prefixes. Table 2-5 summarizes the possi- 
ble interrupts for the Intel386 OX and shows where 
the return address points. 


The Intel386 OX has the ability to handle up to 256 
different interrupts/exceptions. In order to service 
the interrupts, a table with up to 256 interrupt vec- 
tors must be defined. The interrupt vectors are sim- 
ply pointers to the appropriate interrupt service rou- 
tine. In Real Mode (see section 3.1), the vectors are 
4 byte quantities, a Code Segment plus a 16-bit off- 
set; in Protected Mode, the interrupt vectors are 8 
byte quantities, which are put in an Interrupt Descrip- 
tor Table (see section 4.1). Of the 256 possible inter- 
rupts, 32 are reserved for use by Intel, the remaining 
224 are free to be used by the system designer. 


When an interrupt occurs the following actions hap- 
pen. First, the current program address and the 
Flags are saved on the stack to allow resumption of 
the interrupted program. Next. an 8-bit vector is sup- 
plied to the Intel386 OX which identifies the appro- 
priate entry in the interrupt table. The table contains 
the starting address of the interrupt service routine. 
Then, the user supplied interrupt service routine is 
executed. Finally. when an IRET instruction is exe- 
cuted the old processor state is restored and pro- 
gram execution resumes at the appropriate instruc- 
tion. 


The 8-bit interrupt vector is supplied to the Intel386 
OX in several different ways: exceptions supply the 
interrupt vector internally; software INT instructions 
contain or imply the vector; maskable hardware in- 
terrupts supply the 8-bit vector via the interrupt ac- 
knowledge bus sequence. Non-Maskable hardware 
interrupts are assigned to interrupt vector 2. 


Maskable interrupts are the most common way used 
by the Intel386 OX to respond to asynchronous ex- 
ternal hardware events. A hardware interrupt occurs 
when the INTR is pulled high and the Interrupt Flag 
bit (IF) is enabled. The processor only responds to 
interrupts between instructions, (REPeat String in- 
structions. have an "interrupt window", 
between 
memory moves, which allows interrupts during long 


Instruction 
Which 
Return Address 


Function 
Interrupt 
Can Cause 
Points to 
Type 
Number 
Exception 
Faulting 
Instruction 


Divide Error 
0 
DIV,IDIV 
YES 
FAULT 


Debug Exception 
1 
any instruction 
YES 
TRAP' 


NMllnterrupt 
2 
INT20r 
NMI 
NO 
NMI 


One By1e Interrupt 
3 
INT 
NO 
TRAP 


Interrupt 
on Overflow 
4 
INTO 
NO 
TRAP 


Array Bounds Check 
5 
BOUND 
YES 
FAULT 


Invalid OP-Code 
6 
Any Illegal Instruction 
YES 
FAULT 


Device Not Available 
7 
ESC, WAIT 
YES 
FAULT 


Double Fault 
8 
Any Instruction 
That Can 
ABORT 
Generate 
an Exception 


Coprocessor 
Segment 
Overrun 
9 
ESC 
NO 
ABORT 


InvalidTSS 
10 
JMP, CALL, IRET, INT 
YES 
FAULT 


Segment 
Not Present 
11 
Segment 
Register 
Instructions 
YES 
FAULT 


Stack Fault 
12 
Stack References 
YES 
FAULT 


General 
Protection 
Fault 
13 
Any Memory 
Reference 
YES 
FAULT 


Intel Reserved 
15 


Page Fault 
14 
Any Memory Access 
or Code Fetch 
YES 
FAULT 


Coprocessor 
Error 
16 
ESC,WAIT 
YES 
FAULT 


Intel Reserved 
17-31 


Two By1e Interrupt 
0-255 
INTn 
NO 
TRAP 


string moves). When an interrupt 
occurs the proces- 
sor reads an 8-bit vector 
supplied 
by the hardware 
which 
identifies 
the source 
of the interrupt, 
(one of 
224 user defined 
interrupts). 
The exact nature of the 
interrupt 
sequence 
is discussed 
in section 
5. 


The IF bit in the EFLAG 
registers 
is reset when 
an 
interrupt 
is being serviced. 
This effectively 
disables 
servicing 
additional 
interrupts 
during 
an 
interrupt 
service 
routine. However, 
the IF may be set explicitly 
by the interrupt 
handler, to allow the nesting of inter- 
rupts. 
When 
an 
IRET 
instruction 
is executed 
the 
original 
state of the IF is restored. 


Non-maskable 
interrupts 
provide a method of servic- 
ing very high priority 
interrupts. 
A common 
example 
of the use of a non-maskable 
interrupt 
(NMI) would 
be to activate 
a power failure routine. When the NMI 


input 
is pulled 
high it causes 
an interrupt 
with 
an 
internally 
supplied 
vector value of 2. Unlike a normal 
hardware 
interrupt, 
no interrupt 
acknowledgment 
se- 
quence 
is performed 
for an NMI. 


While executing 
the NMI servicing 
procedure, 
the In- 
tel386 
DX will not service 
further 
NMI requests, 
until 
an interrupt 
return 
(IRET) instruction 
is executed 
or 
the processor 
is reset. If NMI occurs 
while currently 
servicing 
an NMI, its presence 
will be saved for serv- 
icing after executing 
the first IRET instruction. 
The IF 
bit is cleared 
at the beginning 
of an NMI interrupt 
to 
inhibit further 
INTR interrupts. 


2.9.5 Software Interrupts 


A third type of interrupt/exception 
for the 
Intel386 
DX is the 
software 
interrupt. 
An 
INT n instruction 
causes 
the processor 
to execute 
the interrupt 
serv- 


ice routine 
pointed 
to by the nth vector 
in the inter- 
rupt table. 


A special case of the two byte software 
interrupt 
INT 
n is the one byte INT 3, or breakpoint 
interrupt. 
By 
inserting 
this one byte instruction 
in a program, 
the 
user can set breakpoints 
in his program 
as a debug- 
ging tool. 


A final type of software 
interrupt, 
is the single 
step 
interrupt. 
It is discussed 
in section 
2.12. 


2.9.6 Interrupt and Exception 
Priorities 


Interrupts 
are externally-generated 
events. 
Maska- 
ble Interrupts 
(on the INTR input) and Non-Maskable 
Interrupts 
(on the 
NMI input) 
are recognized 
at in- 
struction 
boundaries. 
When 
NMI 
and 
maskable 
INTR are both 
recognized 
at the same 
instruction 
boundary, 
the Intel386 
DX invokes 
the NMI service 
routine 
first. 
If, after 
the 
NMI 
service 
routine 
has 
been invoked, 
maskable 
interrupts 
are still enabled, 
then the Intel386 
DX will invoke 
the appropriate 
in- 
terrupt 
service 
routine. 


Table 
2-6a. Intel386TM ox Priority 
for 
Invoking 
Service 
Routines 
In Case of 
Simultaneous 
External 
Interrupts 


1. NMI 


2.INTR 


Exceptions 
are internally-generated 
events. 
Excep- 
tions 
are 
detected 
by the 
Intel386 
DX 
if, in the 
course 
of executing 
an instruction, 
the Intel386 
DX 
detects 
a problematic 
condition. 
The 
Intel386 
DX 
then immediately 
invokes 
the appropriate 
exception 
service 
routine. The state of the Intel386 
DX is such 
that the instruction 
causing 
the exception 
can be re- 
started. 
If the exception 
service 
routine 
has taken 
care of the problematic 
condition, 
the instruction 
will 
execute 
without 
causing 
the same exception. 


It is possible 
for a single instruction 
to generate 
sev- 
eral 
exceptions 
(for example, 
transferring 
a single 
operand 
could generate 
two page faults if the oper- 
and location 
spans two "not 
present" 
pages). 
How- 
ever, only one exception 
is generated 
upon each at- 
tempt 
to 
execute 
the 
instruction. 
Each 
exception 
service 
routine 
should 
correct 
its corresponding 
ex- 
ception, 
and restart 
the instruction. 
In this manner, 
exceptions 
are 
serviced 
until 
the 
instruction 
exe- 
cutes successfully. 


As the Intel386 
DX executes 
instructions, 
it follows 
a 
consistent 
cycle 
in 
checking 
for 
exceptions, 
as 
shown 
in 
Table 
2-6b. 
This 
cycle 
is 
repeated 


as each instruction 
is executed, 
and occurs 
in paral- 
lel with instruction 
decoding 
and execution. 


Table 
2-6b. Sequence 
of Exception 
Checking 


Consider 
the case of the Intel386 
DX having just 
completed 
an instruction. 
It then 
performs 
the 
following 
checks before reaching the point where 
the next instruction 
is completed: 


1. Check for Exception 
1 Traps from the instruc- 
tion just completed 
(single-step 
via Trap Flag, 
or Data 
Breakpoints 
set in the 
Debug 
Regis- 
ters). 


2. Check 
for Exception 
1 Faults 
in the 
next 
in- 
struction 
(Instruction 
Execution 
Breakpoint 
set 
in the 
Debug 
Registers 
for the 
next 
instruc- 
tion). 


3. Check for external 
NMI and INTR. 


4. Check for Segmentation 
Faults that prevented 
fetching 
the entire next instruction 
(exceptions 
11 or 13). 


5. Check for Page Faults that prevented 
fetching 
the entire next instruction 
(exception 
14). 


6. Check for Faults decoding 
the next instruction 
(exception 
6 if illegal opcode; 
exception 
6 if in 
Real 
Mode 
or in Virtual 
8086 
Mode 
and 
at- 
tempting 
to execute 
an instruction 
for Protect- 
ed Mode 
only 
(see 4.6.4); 
or exception 
13 if 
instruction 
is longer than 15 bytes, or privilege 
violation 
in Protected 
Mode (I.e. not at IOPL or 
at CPL=O). 


7. If WAIT 
opcode, 
check 
if TS= 
1 and 
MP= 
1 
(exception 
7 if both are 1). 


8. If ESCAPE 
opcode 
for numeric 
coprocessor, 
check if EM = 1 or TS = 1 (exception 
7 if either 
are 1). 


9. If WAIT 
opcode 
or ESCAPE 
opcode 
for 
nu- 
meric coprocessor, 
check 
ERROR# 
input sig- 
nal (exception 
16 if ERROR # input is assert- 
ed). 


10. Check in the following 
order for each memo- 
ry reference 
required 
by the instruction: 


a. Check 
for Segmentation 
Faults 
that 
pre- 
vent transferring 
the entire memory quanti- 
ty (exceptions 
11, 12, 13). 


b. Check 
for Page Faults that prevent 
trans- 
ferring 
the entire memory 
quantity 
(excep- 
tion 14). 


Note that the order stated 
supports 
the concept 
of the 
paging 
mechanism 
being 
"underneath" 
the segmentation 
mechanism. 
Therefore, 
for any 
given 
code 
or data 
reference 
in memory, 
seg- 
mentation 
exceptions 
are generated 
before 
pag- 
ing exceptions 
are generated. 


The Intel386 DX fully supports restarting all instruc- 
tions after faults. If an exception is detected in the 
instruction to be executed (exception categories 4 
through 10 in Table 2-6b), the Intel386 DX invokes 
the appropriate exception service routine. The In- 
tel386 DX is in a state that permits restart of the 
instruction, for all cases but those in Table 2-6c. 
Note that all such cases are easily avoided by prop- 
er design of the operating system. 


Table 2·6c. Conditions 
Preventing 
Instruction 
Restart 


A. An instruction causes a task switch to a task 
whose Task State Segment is partially 
"not 
present". (An entirely "not present" TSS is re- 
startable.) Partially present TSS's 
can be 
avoided either by keeping the TSS's of such 
tasks present in memory, or by aligning TSS 
segments to reside entirely within a single 4K 
page (for TSS segments of 4K bytes or less). 
B. A coprocessor operand wraps around the top 
of a 64K-byte segment or a 4G-byte segment, 
and spans three pages, and the page holding 
the middle portion of the operand is "not pres- 
ent." This condition can be avoided by starting 
at a page boundary 
any segments containing 
coprocessor operands if the segments are ap- 
proximately 64K-200 bytes or larger (Le. large 
enough for wraparound of the coprocessor 
operand to possibly occur). 


Note that these conditions are avoided by using 
the operating system designs mentioned in this 
table. 


A Double Fault (exception 8) results when the proc- 
essor attempts to invoke an exception service rou- 
tine for the segment exceptions (10, 11, 12 or 13), 
but in the process of doing so, detects an exception 
other 
than a Page Fault (exception 14). 


A Double Fault (exception 8) will also be generated 
when the processor attempts to invoke the Page 
Fault (exception 14) service routine, and detects an 
exception other than a second Page Fault. In any 
functional system, the entire Page Fault service rou- 
tine must remain "present" in memory. 


Double page faults however do not raise the double 
fault exception. If a second page fault occurs while 
the processor is attempting to enter the service rou- 
tine for the first time, then the processor will invoke 
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the page fault (exception 14) handler a second time, 
rather than the double fault (exception 8) handler. A 
subsequent fault, though, will lead to shutdown. 


When a Double Fault occurs, the Intel386 DX in- 
vokes the exception service routine for exception 8. 


When the processor is initialized or Reset the regis- 
ters have the values shown in Table 2-7. The In- 
tel386 DX will then start executing instructions near 
the top of physical memory, at location FFFFFFFOH. 
When the first InterSegment Jump or Call is execut- 
ed, address lines A20-31 will drop low for CS-rela- 
tive memory cycles, and the Intel386 DX will only 
execute instructions in the lower one megabyte of 
physical memory. This allows the system designer to 
use a ROM at the top of physical memory to initialize 
the system and take care of Resets. 


RESET forces the Intel386 DX to terminate all exe- 
cution and local bus activity. No instruction execu- 
tion or bus activity will occur as long as Reset is 
active. Between 350 and 450 CLK2 periods after 
Reset becomes inactive the Intel386 DX will start 
executing instructions at the top of physical memory. 


Flag Word 
Machine Status Word (CRO) 
Instruction Pointer 
Code Segment 
Data Segment 
Stack Segment 
Extra Segment (ES) 
Extra Segment (FS) 
Extra Segment (GS) 
DX register 


UUUU0002H Note 1 
UUUUUUUOH Note 2 
OOOOFFFOH 
FOOOHNote3 
OOOOH 
OOOOH 
OOOOH 
OOOOH 
OOOOH 
component and 
stepping ID Note 5 
undefined Note 4 


NOTES: 
1. EFLAG 
Register. 
The upper 
14 bits of the EFLAGS 
reg- 


ister are undefined, 
VM (Bit 17) and RF (BIT) 
16 are 0 as 
are all other 
defined 
flag bits. 


2. CRO: (Machine 
Status 
Word). 
All of the defined 
fields 
in 
the CRO are 0 (PG Bit 31, TS Bit 3, EM Bit 2, MP Bit 1, and 
PE Bit 0). 
3. The Code Segment 
Register 
(CS) will have its Base Ad- 


dress set to FFFFOOOOH and Limit set to OFFFFH. 
4. All undefined 
bits are Intel Reserved 
and should 
not be 
used. 
5. OX register 
always 
holds 
component 
and stepping 
iden- 


tifier (see 5.7). EAX register 
holds self-test 
signature 
if self- 


test was requested 
(see 5.6). 


The Intel386 OX has the capability to perform a self- 
test. The self-test checks the function of all of the 
Control ROM and most of the non-random logic of 
the part. Approximately one-half of the Intel386 OX 
can be tested during self-test. 


Self-Test is initiated on the Intel386 OX when the 
RESET pin transitions from HIGH to LOW, and the 
BUSY# pin is low. The self-test takes about 2"19 
clocks, or approximately 26 milliseconds with a 
20 MHz Intel386 OX. At the completion of self-test 
the processor performs reset and begins normal op- 
eration. The part has successfully passed self-test if 
the contents of the EAX register are zero (0). If the 
results of EAX are not zero then the self-test has 
detected a flaw in the part. 


The Intel386 OX provides a mechanism for testing 
the Translation Lookaside Buffer (TLB) if desired. 
This particular mechanism is unique to the Intel386 
OX and may not be continued in the same way in 
future processors. When testing the TLB paging 
must be turned off (PG = 0 in CRO)to enable the 
TLB testing hardware and avoid interference with 
the test data being written to the TLB. 


There are two TLB testing operations: 1) write en- 
tries into the TLB, and, 2) perform TLB lookups. Two 
Test Registers, shown in Figure 2-12, are provided 
for the purpose of testing. TR6 is the "test command 
register", and TR7 is the "test data register". The 
fields within these registers are defined below. 


c: This is the command bit. For a write into TR6 to 
cause an immediate write into the TLB entry, write a 
o to this bit. For a write into TR6 to cause an immedi- 
ate TLB lookup, write a 1 to this bit. 


Linear Address: This is the tag field of the TLB. On 
a TLB write, a TLB entry is allocated to this linear 
address and the rest of that TLB entry is set per the 
value of TR7 and the value just written into TR6. On 
a TLB lookup, the TLB is interrogated per this value 
and if one and only one TLB entry matches, the rest 
of the fields of TR6 and TR7 are set from the match- 
ing TLB entry. 


Physical 
Address: This is the data field of the TLB. 


On a write to the TLB, the TLB entry allocated to the 
linear address in TR6 is set to this value. On a TLB 
lookup, the data field (physical address) from the 
TLB is read out to here. 


PL: On a TLB write, PL= 1 causes the REP field of 
TR7 to select which of four associative blocks of the 
TLB is to be written, but PL=0 allows the internal 
pointer in the paging unit to select which TLB block 
is written. On a TLB lookup, the PL bit indicates 
whether the lookup was a hit (PL gets set to 1) or a 
miss (PL gets reset to 0). 


V: The valid bit for this TLB entry. All valid bits can 
also be cleared by writing to CR3. 


D, D#: The dirty bit for/from the TLB entry. 


For 0, U and W, both the attribute and its comple- 
ment are provided as tag bits, to permit the option of 
a "don't care" on TLB lookups. The meaning of 
these pairs of bits is given in the following table: 


X 
X# 
Effect During 
Value of Bit 
TLB Lookup 
X after TLB Write 


0 
0 
Miss All 
Bit X Becomes Undefined 
0 
1 
Match if X = 0 
Bit X Becomes 0 
1 
0 
Match if X = 1 
Bit X Becomes 1 
1 
1 
Match all 
Bit X Becomes Undefined 


For writing a TLB entry: 
1. Write TR7 for the desired physical address, PL 
and REP values. 


2. Write TR6 with the appropriate linear address, 
etc. (be sure to write C = 0 for "write" 
com- 
mand). 


For looking up (reading) a TLB entry: 
1. Write TR6 with the appropriate linear address (be 
sure to write C= 1 for "lookup" command). 
2. Read TR7 and TR6. If the PL bit in TR7 indicates 
a hit, then the other values reveal the TLB con- 
tents. If PL indicates a miss, then the other values 
in TR7 and TR6 are indeterminate. 


The Intel386 OX provides several features which 
simplify the debugging process. The three catego- 
ries of on-chip debugging aids are: 
1) the code execution breakpoint opcode (OCCH), 
2) the single-step capability provided by the TF bit in 
the flag register, and 
3) the code and data breakpoint capability provided 
by the Debug Registers DRO-3,DR6, and DR7. 


•• 
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31 
12 11 
0 


LINEAR ADDRESS 
V 
0 
0 
u 
u w w 
0 
010 
0 
C 
II 
II 
II 


PHYSICALADDRESS 
0 
0 
0 
0 
0 
0 
0 
P 
REP 
0 
0 
L 


NOTE:0indicates Intel reserved: Do not define; SEE SECTION 2.3.10 


A single-byte-opcode breakpoint instruction is avail- 
able for use by software debuggers. The breakpoint 
opcode is OCCh,and generates an exception 3 trap 
when executed. In typical use, a debugger program 
can "plant" the breakpoint instruction at all desired 
code execution breakpoints. The single-byte break- 
point opcode is an alias for the two-byte general 
software interrupt instruction, INT n, where n= 3. 
The only difference between INT 3 (OCCh)and INT n 
is that INT 3 is never IOPL-sensitive but INT n is 
IOPL-sensitive in Protected Mode and Virtual 8086 
Mode. 


2.12.2 
Single-Step 
Trap 


If the single-step flag (TF, bit 8) in the EFLAG regis- 
ter is found to be set at the end of an instruction, a 
single-step exception occurs. The single-step ex- 
ception is auto vectored to exception number 1. Pre- 
cisely, exception 1 occurs as a trap after the instruc- 
tion following the instruction which set TF. In typical 
practice, a debugger sets the TF bit of a flag register 
image on the debugger's stack. It then typically 
transfers control to the user program and loads the 
flag image with a signal instruction, the IRET instruc- 
tion. The single-step trap occurs after executing one 
instruction of the user program. 


Since the exception 1 occurs as a trap (that is, it 
occurs after the instruction has already executed), 
the CS:EIP pushed onto the debugger's stack points 
to the next unexecuted instruction of the program 
being debugged. An exception 1 handler, merely by 
ending with an IRET instruction, can therefore effi- 
ciently support single-stepping through a user pro- 
gram. 


The Debug Registers are an advanced debugging 
feature of the Intel386 OX. They allow data access 
breakpoints as well as code execution breakpoints. 
Since the breakpoints are indicated by on-chip regis- 
ters, an instruction execution breakpoint can be 


placed in ROM code or in code shared by several 
tasks, neither of which can be supported by the INT3 
breakpoint opcode. 


The Intel386 OX contains six Debug Registers, pro- 
viding the ability to specify up to four distinct break- 
points addresses, breakpoint control options, and 
read breakpoint status. Initially after reset, break- 
points are in the disabled state. Therefore, no break- 
points will occur unless the debug registers are pro- 
grammed. Breakpoints set up in the Debug Regis- 
ters are autovectored to exception number 1. 


2.12.3.1 LINEAR 
ADDRESS 
BREAKPOINT 
REGISTERS 
(DRO-DR3) 


Up to four breakpoint addresses can be specified by 
writing into Debug Registers DRO-DR3, shown in 
Figure 2-13. The breakpoint addresses specified are 
32-bit linear addresses. Intel386 OX hardware con- 
tinuously compares the linear breakpoint addresses 
in DRO-DR3 with the linear addresses generated by 
executing software (a linear address is the result of 
computing the effective address and adding the 
32-bit segment base address). Note that if paging is 
not enabled the linear address equals the physical 
address. If paging is enabled, the linear address is 
translated to a physical 32-bit address by the on- 
chip paging unit. Regardless of whether paging is 
enabled or not, however, the breakpoint registers 
hold linear addresses. 


2.12.3.2 DEBUG 
CONTROL 
REGISTER 
(DR?) 


A Debug Control Register, DR? shown in Figure 
2-13, allows several debug control functions such as 
enabling the breakpoints and setting up other con- 
trol options for the breakpoints. The fields within the 
Debug Control Register, DR?, are as follows: 


LENi (breakpoint length specification bits) 


A 2-bit LEN field exists for each of the four break- 
points. LEN specifies the length of the associated 
breakpoint field. The choices for data breakpoints 
are: 1 byte, 2 bytes, and 4 bytes. Instruction execu- 
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Figure 2·13. Debug Registers 


tion breakpoints must have a length of 1 (LENi = 
00). Encoding of the LENi field is as follows: 


Usage of Least 
LENi 
Breakpoint 
Significant Bits in 
Encoding 
Field Width 
Breakpoint Address 
Register i, (I= 0 - 3) 
00 
1 byte 
All 32-bits used to 
specify a single-byte 
breakpoint field. 


01 
2 bytes 
A1-A31 used to 
specify a two-byte, 
word-aligned 
breakpoint field. AOin 
Breakpoint Address 
Register is not used. 


10 
Undefined- 
do not use 
this encoding 
11 
4 bytes 
A2-A31 used to 
specify a four-byte, 
dword-aligned 
breakpoint field. AO 
and A1 in Breakpoint 
Address Register are 
not used. 


The LENi field controls the size of breakpoint field i 
by controlling whether all low-order linear address 
bits in the breakpoint address register are used to 
detect the breakpoint event. Therefore, all break- 
point fields are aligned; 2-byte breakpoint fields be- 
gin on Word boundaries, and 4-byte breakpoint 
fields begin on Dword boundaries. 


The following is an example of various size break- 
point fields. Assume the breakpoint linear address in 
DR2 is 00000005H. In that situation, the following 
illustration indicates the region of the breakpoint 
field for lengths of 1, 2, or 4 bytes. 


DR2= 00000005H; 
LEN2 = OOB 


1 


31 


1=_lbkPt,,~I=_O I:::::: 


DR2=00000005H; 
LEN2 = 01B 
31 
0 


00000008H 


- 
bkpt fld2 - 
00000004H 


OOOOOOOOH 


DR2= 00000005H; 
31 
LEN2 = 11B 
o 


00000008H 


00000004H 


OOOOOOOOH 


A 2-bit RW field exists for each of the four break- 
points. The 2-bit RW field specifies the type of usage 
which must occur in order to activate the associated 
breakpoint. 


RW 
Usage 
Encoding 
Causing 
Breakpoint 


00 
Instruction execution only 
01 
Data writes only 
10 
Undefined-do 
not use this encoding 
11 
Data reads and writes only 


RW encoding 00 is used to set up an instruction 
execution breakpoint. RW encodings 01 or 11 are 
used to set up write-only or read/write data break- 
points. 


Note that Instruction 
execution 
breakpoints 
are 
taken 
as 
faults 
(Le. before the instruction exe- 
cutes), but data 
breakpoints 
are taken 
as traps 
(Le. after the data transfer takes place). 


Using LENi and RWi to Set Data Breakpoint i 


A data breakpoint can be set up by writing the linear 
address into DRi (i = 0-3). For data breakpoints, 
RWi can = 01 (write-only) or 11 (write/read). LEN 
can = 00,01, or 11. 


If a data access entirely or partly falls within the data 
breakpoint field, the data breakpoint condition has 
occurred, and if the breakpoint is enabled, an excep- 
tion 1 trap will occur. 


Using LENi and RWi to Set Instruction Execution 
Breakpoint i 


An instruction execution breakpoint can be set up by 
writing address of the beginning of the instruction 
(including prefixes if any) into DRi (i = 0-3). 
RWi 
must = 00 and LEN must = 00 for instruction exe- 
cution breakpoints. 


If the instruction beginning at the breakpoint address 
is about to be executed, the instruction execution 
breakpoint condition has occurred, and if the break- 
point is enabled, an exception 1 fault will occur be- 
fore the instruction is executed. 


Note that an instruction execution breakpoint ad- 
dress must be equal to the beginning 
byte address 
of an instruction (including prefixes) in order for the 
instruction execution breakpoint to occur. 


The Debug Registers can only be accessed in Real 
Mode or at privilege level 0 in Protected Mode. The 


GO bit, when set, provides extra protection against 
any Debug Register access even in Real Mode or at 
privilege level 0 in Protected Mode. This additional 
protection feature is provided to guarantee that a 
software debugger (or ICETM-386)can have full con- 
trol over the Debug Register resources when re- 
quired. The GO bit, when set, causes an exception 1 
fault if an instruction attempts to read or write any 
Debug Register. The GO bit is then automatically 
cleared when the exception 1 handler is invoked, 
allowing the exception 1 handler free access to the 
debug registers. 


GE and LE (Exact data breakpoint match, global and 
local) 


If either GE or LE is set, any data breakpoint trap will 
be reported exactly after completion of the instruc- 
tion that caused the operand transfer. Exact report- 
ing is provided by forcing the Intel386 OX execution 
unit to wait for completion of data operand transfers 
before beginning execution of the next instruction. 


If exact data breakpoint match is not selected, data 
breakpoints may not be reported until several in- 
structions later or may not be reported at all. When 
enabling a data breakpoint, it is therefore recom- 
mended to enable the exact data breakpoint match. 


When the Intel386 OX performs a task switch, the 
LE bit is cleared. Thus, the LE bit supports fast task 
switching out of tasks, that have enabled the exact 
data breakpoint match for their task-local break- 
points. The LE bit is cleared by the processor during 
a task switCh,to avoid having exact data breakpoint 
match enabled in the new task. Note that exact data 
breakpoint match must be re-enabled under soft- 
ware control. 


The Intel386 OX GE bit is unaffected during a task 
switch. The GE bit supports exact data breakpOint 
match that is to remain enabled during all tasks exe- 
cuting in the system. 


Note that instruction 
execution 
breakpoints are al- 
ways reported exactly, whether or not exact data 
breakpoint match is selected. 


Gi and Li (breakpoint enable, global and local) 


If either Gi or Li is set then the associated breakpoint 
(as defined by the linear address in DRi, the length 
in LENi and the usage criteria in RWi) is enabled. If 
either Gi or Li is set, and the Intel386 OXdetects the 
ith breakpoint condition, then the exception 1 han- 
dier is invoked. 


When the Intel386 OX performs a task switch to a 
new Task State Segment (TSS), all Li bits are 
cleared. Thus, the Li bits support fast task switching 
out of tasks that use some task-local breakpoint 
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registers. 
The 
Li bits are cleared 
by the processor 
during a task switch, to avoid spurious 
exceptions 
in 
the new task. Note that the breakpoints 
must be re- 
enabled 
under software 
control. 


All Intel386 
OX Gi bits are unaffected 
during a task 
switch. 
The Gi bits support 
breakpoints 
that are ac- 
tive in all tasks executing 
in the system. 


A Debug Status Register, 
OR6 shown in Figure 2-13, 
allows 
the exception 
1 handler 
to easily 
determine 
why it was 
invoked. 
Note 
the exception 
1 handler 
can be invoked 
as a result of one of several 
events: 


1) ORO Breakpoint 
fault/trap. 


2) OR1 Breakpoint 
fault/trap. 


3) OR2 Breakpoint 
fault/trap. 


4) OR3 Breakpoint 
fault/trap. 


5) Single-step 
(TF) trap. 


6) Task switch trap. 


7) Fault 
due 
to 
attempted 
debug 
register 
access 
when GO=1. 


The Debug Status 
Register 
contains 
single-bit 
flags 
for each of the possible 
events invoking exception 
1. 
Note below that some of these events are faults (ex- 
ception 
taken 
before 
the 
instruction 
is executed), 
while 
other 
events 
are traps 
(exception 
taken 
after 
the debug events 
occurred). 


The flags in OR6 are set by the hardware 
but never 
cleared 
by hardware. 
Exception 
1 handler 
software 
should 
clear 
OR6 before 
returning 
to the user pro- 
gram 
to 
avoid 
future 
confusion 
in identifying 
the 
source 
of exception 
1. 


The fields 
within 
the 
Debug 
Status 
Register, 
OR6, 
are as follows: 


Four breakpoint 
indicator 
flags, BO-B3, 
correspond 
one-to-one 
with 
the 
breakpoint 
registers 
in ORO- 
OR3. A flag Bi is set when the condition 
described 
by ORi, LENi, and RWi occurs. 


If Gi or Li is set, and if the ith breakpoint 
is detected, 


the 
processor 
will invoke 
the exception 
1 handler. 


The exception 
is handled 
as a fault if an instruction 
execution 
breakpoint 
occurred, 
or as a trap if a data 
breakpoint 
occurred. 


IMPORTANT 
NOTE: A flag Bi is set whenever 
the 
hardware 
detects 
a match 
condition 
on 
enabled 
breakpoint 
i. Whenever 
a match 
is detected 
on at 
least one enabled 
breakpoint 
i, the hardware 
imme- 


diately 
sets 
all Bi bits corresponding 
to breakpoint 
conditions 
matching 
at that instant, whether 
enabled 
or not. Therefore, 
the exception 
1 handler 
may see 
that multiple 
Bi bits are set, but only set Bi bits corre- 
sponding 
to enabled 
breakpoints 
(Li or Gi set) are 
true indications 
of why the exception 
1 handler 
was 
invoked. 


BO (debug 
fault 
due to attempted 
register 
access 
when GO bit set) 


This bit is set if the exception 
1 handler was invoked 
• 
due to an instruction 
attempting 
to read or write to 
the debug registers 
when GO bit was set. If such an 
event 
occurs, 
then 
the 
GO 
bit 
is 
automatically 
cleared 
when 
the 
exception 
1 handler 
is invoked, 


allowing 
handler 
access 
to the debug registers. 


This bit is set if the exception 
1 handler was invoked 
due to the TF bit in the flag register 
being 
set (for 
single-stepping). 
See section 
2.12.2. 


BT (debug trap due to task switch) 


This bit is set if the exception 
1 handler was invoked 
due to a task 
switch 
occurring 
to a task 
having 
an 
Intel386 
OX TSS 
with 
the 
T bit set. 
(See 
Figure 
4-15a). 
Note the task switch 
into the new task oc- 
curs normally, 
but before 
the first instruction 
of the 
task is executed, 
the exception 
1 handler 
is invoked. 


With respect 
to the task switch operation, 
the opera- 
tion is considered 
to be a trap. 


2.12.3.4 
USE OF RESUME 
FLAG (RF) IN FLAG 
REGISTER 


The 
Resume 
Flag (RF) 
in the 
flag word 
can 
sup- 


press an instruction 
execution 
breakpoint 
when the 
exception 
1 handler 
returns 
to a user program 
at a 
user address 
which 
is also an instruction 
execution 
breakpoint. 
See section 
2.3.3. 


When the processor 
is reset or powered 
up it is ini- 
tialized in Real Mode. Real Mode has the same base 
architecture 
as the 8086, 
but allows 
access 
to the 
32-bit 
register 
set of the Intel386 
OX. The address- 
ing mechanism, 
memory 
size, interrupt 
handling, 
are 
all identical 
to the Real Mode on the 80286. 


Intel386™ 
OX MICROPROCESSOR 
.-n+_I 
'e-~ 


All of the Intel386 DX instructions are available in 
Real Mode (except those instructions listed in 4.6.4). 
The default operand size in Real Mode is 16-bits, 
just like the 8086. In order to use the 32-bit registers 
and addressing modes, override prefixes must be 
used. In addition, the segment size on the Intel386 
DX in Real Mode is 64K bytes so 32-bit effective 
addresses must have a value less the OOOOFFFFH. 
The primary purpose of Real Mode is to set up the 
processor for Protected Mode Operation. 


The LOCK prefix on the Intel386 DX, even in Real 
Mode, is more restrictive than on the 80286. This is 
due to the addition of paging on the Intel386 DX in 
Protected Mode and Virtual 8086 Mode. Paging 
makes it impossible to guarantee that repeated 
string instructions can be LOCKed. The Intel386 DX 
can't require that all pages holding the string be 
physically present in memory. Hence, a Page Fault 
(exception 14) might have to be taken during the 
repeated string instruction. Therefore the LOCK pre- 
fix can't be supported during repeated string instruc- 
tions. 


These are the only instruction forms where the 
LOCK prefix is legal on the Intel386 DX: 


Opcode 
Operands 
(Dest, Source) 


BIT Test and 
Mem, Reg/immed 
SET/RESET /COMPLEMENT 
XCHG 
Reg, Mem 
XCHG 
Mem, Reg 
ADD, OR, ADC, SBB, 
Mem, Reg/immed 
AND, SUB, XOR 
NOT, NEG, INC, DEC 
Mem 


An exception 6 will be generated if a LOCK prefix is 
placed before any instruction form or opcode not 
listed above. The LOCK prefix allows indivisible 


read/modify/write 
operations on memory operands 
using the instructions above. For example, even the 
ADD Reg, Mem is not LOCKable, because the Mem 
operand is not the destination (and therefore no 
memory read/modify/operation is being performed). 


Since, on the Intel386 DX, repeated string instruc- 
tions are not LOCKable, it is not possible to LOCK 
the bus for a long period of time. Therefore, the 
LOCK prefix is not IOPL-sensitive on the Intel386 
DX. The LOCK prefix can be used at any privilege 
level, but only on the instruction forms listed above. 


In Real Mode the maximum memory size is limited to 
1 megabyte. Thus, only address lines A2- A19 are 
active. (Exception, the high address lines A20-A31 
are high during CS-relative memory cycles until an 
intersegment jump or call is executed (see section 
2.10)). 


Since paging is not allowed in Real Mode the linear 
addresses are the same as physical addresses. 
Physical addresses are formed in Real Mode by 
adding the contents of the appropriate segment reg- 
ister which is shifted left by four bits to an effective 
address. This addition results in a physical address 
from OOOOOOOOH 
to 0010FFEFH. This is compatible 
with 80286 Real Mode. Since segment registers are 
shifted left by 4 bits this implies that Real Mode seg- 
ments always start on 16 byte boundaries. 


All segments in Real Mode are exactly 64K bytes 
long, and may be read, written, or executed. The 
Inte'I386DX will generate an exception 13 if a data 
operand or instruction fetch occurs past the end of a 
segment. (Le. if an operand has an offset greater 
than FFFFH, for example a word with a low byte at 
FFFFH and the high byte at OOOOH.) 


Segments may be overlapped in Real Mode. Thus, if 
a particular segment does not use all 64K bytes an- 
other segment can be overlayed on top of the un- 
used portion of the previous segment. This allows 
the programmer to minimize the amount of physical 
memory needed for a program. 


There are two fixed areas in memory which are re- 
served in Real address mode: system initialization 
area and the interrupt table area. Locations OOOOOH 
through 003FFH are reserved for interrupt vectors. 
Each one of the 256 possible interrupts has a 4-byte 
jump vector reserved for it. Locations FFFFFFFOH 
through FFFFFFFFH are reserved for system initiali- 
zation. 


Many of the exceptions shown in Table 2-5 and dis- 
cussed in section 2.9 are not applicable to Real 
Mode operation, in particular exceptions 10, 11, 14, 
will not happen in Real Mode. Other exceptions 
have slightly different meanings in Real Mode; Table 
3-1 identifies these exceptions. 


The HLT instruction stops program execution and 
prevents the processor from using the local bus until 
restarted. Either NMI, INTR with interrupts enabled 
(IF= 1), or RESET will force the Intel386 OX out of 
halt. If interrupted, the saved CS:IP will point to the 
nex1instruction after the HLT. 


Shutdown will occur when a severe error is detected 
that prevents further processing. In Real Mode, 
shutdown can occur under two conditions: 


An interrupt or an exception occur (Exceptions 8 
or 13) and the interrupt vector is larger than the 


Interrupt Descriptor Table (i.e. There is not an in- 
terrupt handler for the interrupt). 


A CALL, INT or PUSH instruction attempts to wrap 
around the stack segment when SP is not even. 
(e.g. pushing a value on the stack when SP = 
0001 resulting in a stack segment greater than 
FFFFH) 


An NMI input can bring the processor out of shut- 
down if the Interrupt Descriptor Table limit is large 
enough to contain the NMI interrupt vector (at least 
0017H) and the stack has enough room to contain • 
the vector and flag information (i.e. SP is greater 
than 0005H). Otherwise shutdown can only be exit- 
ed via the RESET input. 


4. PROTECTED 
MODE 
ARCHITECTURE 


The complete capabilities of the Intel386 OX are un- 
locked when the processor operates in Protected 
Virtual Address Mode (Protected Mode). Protected 
Mode vastly increases the linear address space to 
four gigabytes (232bytes) and allows the running of 
virtual memory programs of almost unlimited size 
(64 terabytes or 246 bytes). In addition Protected 
Mode allows the Intel386 OXto run all of the existing 
8086 and 80286 software, while providing a sophisti- 
cated memory management and a hardware-assist- 
ed protection mechanism. Protected Mode allows 
the use of additional instructions especially opti- 
mized for supporting multitasking operating systems. 
The base architecture of the Intel386 OX remains 
the same, the registers, instructions, and addressing 
modes described in the previous sections are re- 
tained. The main difference 
between 
Protected 
Mode, and Real Mode from a programmer's view is 
the increased address space, and a different ad- 
dressing mechanism. 


Function 
Interrupt 
Related 
Return 
Number 
Instructions 
Address 
Location 


Interrupt table limit too small 
8 
INT Vector is not 
Before 
within table limit 
Instruction 


CS, OS, ES, FS, GS 
13 
Word memory reference 
Before 
Segment overrun exception 
beyond offset = FFFFH. 
Instruction 
An attempt to execute 
past the end of CS segment. 


SS Segment overrun exception 
12 
Stack Reference 
Before 
beyond offset = FFFFH 
Instruction 


Like Real Mode, 
Protected 
Mode uses two compo- 
nents to form the logical address, 
a 16-bit selector 
is 
used to determine 
the linear base address 
of a seg- 
ment, the base address 
is added to a 32-bit effective· 


address 
to form 
a 32-bit 
linear address. 
The linear 
address 
is then 
either 
used 
as the 32-bit 
physical 
address, 
or if paging 
is enabled 
the paging 
mecha- 
nism 
maps 
the 
32-bit 
linear 
address 
into 
a 32-bit 
physical 
address. 


The difference 
between 
the two modes 
lies in calcu- 
lating the base address. 
In Protected 
Mode the se- 
lector 
is used to specify 
an index into an operating 


ACCESS 
RIGHTS 


L1loliT 


BASE ADDRESS 


system 
defined 
table 
(see 
Figure 
4-1). 
The 
table 
contains 
the 
32·bit 
base 
address 
of a given 
seg- 
ment. The physical 
address 
is formed 
by adding the 
base address 
obtained 
from the table to the offset. 


Paging provides 
an additional 
memory 
management 
mechanism 
which operates 
only in Protected 
Mode. 
Paging provides 
a means of managing 
the very large 
segments 
of the Intel386 
OX. As such, paging oper- 
ates beneath 
segmentation. 
The paging mechanism 
translates 
the protected 
linear address which comes 
from the segmentation 
unit into a physical 
address. 
Figure 4-2 shows the complete 
Intel386 
OX address- 
ing mechanism 
with paging enabled. 
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4.3.1 
Segmentation 
Introduction 


Segmentation is one method of memory manage- 
ment. Segmentation provides the basis for protec- 
tion. Segments are used to encapsulate regions of 
memory which have common attributes. For exam- 
ple, all of the code of a given program could be con- 
tained in a segment, or an operating system table 
may reside in a segment. All information about a 
segment is stored in an 8 byte data structure called 
a descriptor. All of the descriptors in a system are 
contained in tables recognized by hardware. 


4.3.2 
Terminology 


The following terms are used throughout the discus- 
sion of descriptors, privilege levels and protection: 


PL: Privilege Level-one 
of the four hierarchical 
privilege levels. Level 0 is the most privileged' level 
and level 3 is the least privileged. More privileged 
levels are numerically smaller than less privileged 
levels, 


RPL: Requestor Privilege Level-The 
privilege level 
of the original supplier of the selector. RPL is deter- 
mined by the least two significant bits of a selector. 


DPL: Descriptor Privilege Level-This 
is the least 
privileged level at which a task may access that de- 
scriptor (and the segment associated with that de- 
scriptor). Descriptor Privilege Level is determined by 
bits 6:5 in the Access Right Byte of a descriptor. 


CPL: Current Privilege Level-The 
privilege level at 
which a task is currently executing, which equals the 
privilege level of the code segment being executed. 
CPL can also be determined by examining the low- 
est 2 bits of the CS register, except for conforming 
code segments. 


EPL: Effective Privilege Level-The 
effective privi- 
lege level is the least privileged of the RPL and DPL. 
Since smaller privilege level values indicate greater 
privilege, EPL is the numerical maximum of RPL and 
DPL. 


Task: One instance of the execution of a program. 
Tasks are also referred to as processes. 


4.3.3.1 
DESCRIPTOR 
TABLES 
INTRODUCTION 


The descriptor tables define all of the segments 
which are used in an Intel386 DX system. There are 
three types of tables on the Intel386 DX which hold 
descriptors: the Global Descriptor Table, Local De- 
scriptor Table, and the Interrupt Descriptor Table. All 
of the tables are variable length memory arrays. 
They can range in size between 8 bytes and 64K 
bytes. Each table can hold up to 8192 8 byte de- • 
scriptors. The upper 13 bits of a selector are used as 
an index into the descriptor table. The tables have 
registers associated with them which hold the 32-bit 
linear base address, and the 16-bit limit of each ta- 
ble. 


Each of the tables has a register associated with it 
the GDTR, LDTR, and the IDTR (see Figure 4-3). 
The LGDT, LLDT, and L1DTinstructions, load the 
base and limit of the Global, Local, and Interrupt De- 
scriptor Tables, respectively, into the appropriate 
register. The SGDT, SLDT, and SIDT instructions 
store the base and limit values. These tables are 
manipulated by the operating system. Therefore, the 
load descriptor table instructions are privileged in- 
structions. 


4.3.3.2 GLOBAL 
DESCRIPTOR 
TABLE 


The Global Descriptor Table (GDT) contains de- 
scriptors which are possibly available to all of the 
tasks in a system. The GDT can contain any type of 
segment descriptor except for descriptors which are 
used .for servicing interrupts (Le. interrupt and trap 
descnptors). Every Intel386 DX system contains a 
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PROGRA~ 
INVISIBLE 
AUTO~ATICALLY 
LOAOED 
FRO~ 
LOT DESCRIPTOR 
• 


GOT. Generally the GOT contains code and data 
segments used by the operating systems and task 
state segments, and descriptors for the LOTs in a 
system. 


The first slot of the Global Descriptor Table corre- 
sponds to the null selector and is not used. The null 
selector defines a null pointer value. 


LOTs contain descriptors which are associated with 
a given task. Generally, operating systems are de- 
signed so that each task has a separate LOT. The 
LOT may contain only code, data, stack, task gate, 
and call gate descriptors. LOTs provide a mecha- 
nism for isolating a given task's code and data seg- 
ments from the rest of the operating system, while 
the GOT contains descriptors for segments which 
are common to all tasks. A segment cannot be ac- 
cessed by a task if its segment descriptor does not 
exist in either the current LOT or the GOT. This pro- 
vides both isolation and protection for a task's seg- 
ments, while still allowing global data to be shared 
among tasks. 


Unlike the 6 byte GOT or lOT registers which contain 
a base address and limit, the visible portion of the 
LOT register contains only a 16-bit selector. This se- 
lector refers to a Local Descriptor Table descriptor in 
the GOT. 


The third table needed for Intel386 OX systems is 
the Interrupt Descriptor Table. (See Figure 4-4.) The 
lOT contains the descriptors which point to the loca- 
tion of up to 256 interrupt service routines. The lOT 


intelQP 


may contain only task gates, interrupt gates, and 
trap gates. The lOT should be at least 256 bytes in 
size in order to hold the descriptors for the 32 Intel 
Reserved Interrupts. Every interrupt used by a sys- 
tem must have an entry in the lOT. The lOT entries 
are referenced via INT instructions, external inter- 
rupt vectors, and exceptions. (See 2.9 Interrupts). 


JNTERRUl'T 
DUCAIPTOA 
TAaLi 
(lOT) 
GATEFOA 
INTERRUPT '1 


GATEFOA 
INTERRUPT #0 lid 


Figure 4-4. Interrupt Descriptor 
Table Register Use 


4.3.4 Descriptors 


4.3.4.1 DESCRIPTOR ATTRIBUTE BITS 


The object to which the segment selector points to 
is called a descriptor. Descriptors are eight byte 
quantities which contain attributes about a given re- 
gion of linear address space (Le. a segment). These 
attributes include the 32-bit base linear address of 
the segment, the 20-bit length and granularity of the 
segment, the protection level, read, write or execute 
privileges, the default size of the operands (16-bit or 


o 
BYTE 


ADDRESS 


o 
SEGMENT 
BASE 15 ... 
0 
SEGMENT 
LIMIT 15 ... 
0 


BASE 31 ... 
24 
G 
D 
0 
AVL 
LIMIT 
P 
DPL 
S 
TYPE 
A 
BASE 


19 ... 
16 
I 
I 
I 
23 ... 
16 


BASE 
BaseAddressof the segment 
LIMIT 
The lengthof the segment 
P 
PresentBit 
1~ Present 
0~ Not Present 
DPL 
DescriptorPrivilegeLevel0-3 
S 
SegmentDescriptor 
0= SystemDescriptor 
1~ Codeor DataSegmentDescriptor 
TYPE 
Typeof Segment 
A 
AccessedBit 
G 
GranularityBit 
1= Segmentlengthis pagegranular 
0= Segmentlengthis by1egranular 
D 
DefaultOperationSize(recognizedin code segmentdescriptorsonly) 
1~32-bi1segment 
0~16-bit segment 
o 
Bit mustbe zero (0)for compatibilitywith futureprocessors 
AVL 
Availablefield for useror OS 


NOTE: 
In a maximum-size 
segment 
(ie. a segment 
with G = 1 and segment 
limit 19...0 = FFFFFH), 
the lowest 
12 bits of the 
segment 
base should 
be zero (ie. segment 
base 11 ...000 = OOOH). 


- --_ .._--- 


information 
about'a 
segment 
is contained 
in 12 bits 
in the segment 
descriptor. 
Figure 4-5 shows the gen- 


eral format 
of a descriptor. 
All segments 
on the In- 
tel386 OX have three attribute 
fields in common: 
the 


P bit, the DPL bit, and the S bit. The Present 
P bit is 
1 if the 
segment 
is loaded 
in physical 
memory, 
if 
P = 0 then any attempt 
to access this segment 
caus- 
es a not present 
exception 
(exception 
11). The De- 
scriptor 
Privilege 
Level DPL is a two-bit 
field which 
specifies 
the protection 
level 0-3 
associated 
with a 
segment. 


ment descriptor 
determines 
if a given segment 
is a 


system segment 
or a code or data segment. 
If the S 


bit is 1 then 
the segment 
is either 
a code 
or data 


segment, 
if it is 0 then the segment 
is a system 
seg- 


ment. 


4.3.4.2 Intel386TM 
DX CODE, 
DATA 
DESCRIPTORS 
(S= 1) 


The 
Intel386 
OX has two 
main 
categories 
of seg- 
ments 
system 
segments 
and non-system 
segments 


Figure 4-6 shows 
the general 
format 
of a code and 


data descriptor 
and Table 4-1 illustrates 
how the bits 


in the Access 
Rights 
Byte are interpreted. 


SEGMENT 
BASE 15 ... 
0 
SEGMENT 
LIMIT 15 ... 
0 


LIMIT 
ACCESS 
BASE 
BASE 31 ... 
24 
G 
DIB 
0 
AVL 
19 ... 
16 
RIGHTS 
23 ... 
16 
BYTE 


DIB 
1~ Default Instructions Attributes are 32-Bits 
o ~ Default Instruction Attributes are 16-Bits 
AVL 
Available field for user or OS 


Granularity Bit 
1~ Segment length is page granular 
0= Segment length is byte granular 
Bit must be zero (0) for compatibility with future processors 


NOTE: 
In a maximum-size segment (ie. a segment with G= 1 and segment limit 19...0 = FFFFFH), the lowest 12 bits of the 
segment base should be zero (ie. segment base 11...000=000H). 


Figure 4·6. Segment 
Descriptors 


Table 4·1. Access 
Rights Byte Definition 
for Code and Data Descriptions 


Type 
Field 
Definition 


Bit 
Name 
Function 
Position 


7 
Present (P) 
P = 1 
Segment is mapped into physical memory. 


P=O 
No mapping to physical memory exits, base and limit are not 
used. 


6-5 
Descriptor Privilege 
Segment privilege attribute used in privilege tests. 


Level (DPL) 
4 
Segment Descrip- 
S = 1 
Code or Data (includes stacks) segment descriptor 
tor (S) 
S=O 
System Segment Descriptor or Gate Descriptor 


3 
Executable (E) 
E=O 
Descriptor type is data segment: 


} 


If 


2 
Expansion Direc- 
EDO 
Expand up segment, offsets must be :s; limit. 
Data 
tion(ED) 
ED = 1 
Expand down segment, offsets must be > limit. 
Segment 


1 
Writeable (W) 
W= 
0 
Data segment may not be written into. 
(S = 1, 


W = 1 
Data segment may be written into. 
E = 0) 


3 
Executable (E) 
E = 1 
Descriptor type is code segment: 


} 


If 


2 
Conforming (C) 
C=1 
Code segment may only be executed when 
Code 


CPL ;;.,DPL and CPL remains unchanged. 
Segment 


1 
Readable (R) 
R=O 
Code segment may not be read. 
(S = 1, 


R=1 
Code segment may be read. 
E = 1) 


0 
Accessed (A) 
A=O 
Segment has not been accessed. 


A = 1 
Segment selector has been loaded into segment register or 
used by selector test instructions. 


Code 
and 
data 
segments 
have 
several 
descriptor 
fields in common. 
The accessed 
A bit is set whenev- 
er the processor 
accesses 
a descriptor. 
The A bit is 
used by operating 
systems 
to keep usage statistics 
on a given 
segment. 
The 
G bit, or granularity 
bit, 


specifies 
if a segment 
length 
is byte-granular 
or 
page-granular. 
Intel386 
DX segments 
can 
be one 
megabyte 
long with byte granularity 
(G = 0) or four 
gigabytes 
with 
page 
granularity 
(G = 1), 
(Le., 220 
pages each page is 4K bytes in length). 
The granu- 
larity is totally 
unrelated 
to paging. 
An Intel386 
DX 
system 
can consist 
of segments 
with byte granulari- 
ty, and 
page 
granularity, 
whether 
or not paging 
is 
enabled. 


The executable 
E bit tells if a segment 
is a code or 
data segment. 
A code segment 
(E = 1, S = 1) may be 
execute-only 
or execute/read 
as determined 
by the 
Read 
R bit. 
Code 
segments 
are 
execute 
only 
if 
R = 0, and 
execute/read 
if R = 1. Code 
segments 
may never be written 
into. 


NOTE: 
Code segments 
may be modified 
via aliases. 
Alias- 
es are writeable 
data 
segments 
which 
occupy 
the 
same 
range 
of linear 
address 
space 
as the 
code 
segment. 


The D bit indicates 
the default 
length 
for operands 
and effective 
addresses. 
If D= 1 then 
32-bit 
oper- 
ands and 32-bit addressing 
modes 
are assumed. 
If 
D = 0 then 
16-bit 
operands 
and 
16-bit 
addressing 
modes 
are assumed. 
Therefore 
all existing 
80286 
code segments 
will execute 
on the Intel386 
DX as- 
suming the D bit is set O. 


Another 
attribute 
of code segments 
is determined 
by 
the conforming 
C bit. Conforming 
segments, 
C = 1, 
can be executed 
and shared 
by programs 
at differ- 
ent privilege 
levels. 
(See section 
4.4 Protection.) 
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SEGMENT 
BASE 15 ... 
0 


LIMIT 
19 ... 
16 


Type 
o 
1 
2 
3 
4 
5 
6 
7 


Defines 


Invalid 
Available 
80286 
TSS 
LOT 
Busy 80286 
TSS 
80286 
Call Gate 
Task 
Gale 
(for 80286 
or Inle1386T" 
OX Task) 
80286 
Interrupt 
Gate 
80286 
Trap 
Gale 
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Segments 
identified 
as data segments 
(E = 0, S = 1) 
are used 
for two 
types 
of Intel386 
DX segments: 
stack 
and data segments. 
The expansion 
direction 
(ED) bit specifies 
if a segment 
expands 
downward 
(stack) or upward (data). If a segment 
is a stack seg- 
ment all offsets 
must be greater 
than th~ segment 
limit. On a data 
segment 
all offsets 
must 
be less 
than or equal to the limit. In other words, 
stack seg- 
ments start at the base linear address 
plus the maxi- 
mum segment 
limit and grow down to the base linear 
address 
plus the limit. On the other 
hand, data seg- 
ments start at the base linear address and expand to 
the base linear address 
plus limit. 


The write 
W bit controls 
the ability 
to write 
into a 
segment. 
Data segments 
are read-only 
if W = O. The 
stack segment 
must have W = 1. 


The B bit controls 
the size of the stack pointer 
regis- 


ter. If B = 1, then PUSHes, 
POPs, and CALLs all use 
the 32-bit ESP register 
for stack references 
and as- 
sume an upper 
limit of FFFFFFFFH. 
If B = 0, stack 
instructions 
all use the 
16-bit 
SP register 
and 
as- 
sume an upper limit of FFFFH. 


System 
segments 
describe 
information 
about 
oper- 
ating 
system 
tables, 
tasks, 
and 
gates. 
Figure 
4-7 
shows 
the 
general 
format 
of system 
segment 
de- 
scriptors, 
and the various types of system segments. 


Intel386 
DX 
system 
descriptors 
contain 
a 
32-bit 
base 
linear 
address 
and 
a 
20-bit 
segment 
limit. 


80286 
system 
descriptors 
have 
a 24-bit 
base 
ad- 
dress and a 16-bit segment 
limit. 80286 
system 
de- 
scriptors 
are identified 
by the upper 16 bits being all 
zero. 


BASE 
23 ... 
16 


Type 
8 
9 
A 
B 
C 
o 
E 
F 


Defines 


Invalid 
Available 
Inte1386T" 
OX TSS 
Undefined 
(Intel 
Reserved) 
Busy 
Inlel386TM ox TSS 
Inle1386T" 
ox Call Gate 
Undefined 
(Intel 
Reserved) 
Inle1386T" 
ox Interrupl 
Gale 
Inle1386T" 
OX Trap 
Gale 


NOTE: 
In a maximum-size 
segment 
(ie. a segment 
with G = 1 and segment 
limit 19 ...0 = FFFFFH), 
the lowest 
12 bits of the 
segment 
base should 
be zero (ie. segment 
base 
11...000 = OOOH). 


4.3.4.4 LDT DESCRIPTORS 
(S=O, TYPE = 2) 


LOT descriptors (S= 0 TYPE= 2) contain informa- 
tion about Local Descriptor Tables. LOTs contain a 
table of segment descriptors, unique to a particular 
task. Since the instruction to load the LDTR is only 
available at privilege level 0, the DPL field is ignored. 
LOT descriptors are only allowed in the Global De- 
scriptor TablE!(GOT). 


4.3.4.5 TSS DESCRIPTORS 
(S = 0, 
TYPE = 1,3,9, 
B) 


A Task State Segment (TSS) descriptor contains in- 
formation about the location, size, and privilege level 
of a Task State Segment (TSS). A TSS in turn is a 
special fixed format segment which contains all the 
state information for a task and a linkage field to 
permit nesting tasks. The TYPE field is used to indi- 
cate whether the task is currently BUSY (Le. on a 
chain of active tasks) or the TSS is available. The 
TYPE field also indicates if the segment contains a 
80286 or an Intel386 OX TSS. The Task Register 
(TR) contains the selector which points to the cur- 
rent Task State Segment. 


4.3.4.6 GATE DESCRIPTORS 
(S=O, 
TYPE=4-7, 
C, F) 


Gates are used to control access to entry points 
within the target code segment. The various types of 


gate descriptors are call gates, task gates, Inter- 
rupt gates, and trap gates. Gates provide a level of 
indirection between the source and destination of 
the control transfer. This indirection allows the proc- 
essor to automatically perform protection checks. It 
also allows system designers to control entry points 
to the operating system. Call gates are used to 
change privilege levels (see section 4.4 Protection), 
task gates are used to perform a task switch, and 
interrupt and trap gates are used to specify interrupt 
service routines. 


Figure 4-8 shows the format of the four types of gate • 
descriptors. Call gates are primarily used to transfer 
program control to a more privileged level. The call 
gate descriptor consists of three fields: the access 
byte, a long pointer (selector and offset) which 
points to the start of a routine and a word count 
which specifies how many parameters are to be cop- 
ied from the caller's stack to the stack of the called 
routine. The word count field is only used by call 
gates when there is a change in the privilege level, 
other types of gates ignore the word count field. 


Interrupt and trap gates use the destination selector 
and destination offset fields of the gate descriptor as 
a pointer to the start of the interrupt or trap handler 
routines. The difference between interrupt gates and 
trap gates is that the interrupt gate disables inter- 
rupts (resets the IF bit) while the trap gate does not. 


SELECTOR 
OFFSET 15 ... 0 


WORD 
OFFSET 31 ... 16 
P 
DPL 
0 
TYPE 
0 
0 
0 
COUNT 
, 
4 ... 0 


GateDeacrlptorFlelda 
Name 
Value 
Deacrlptlon 
Type 
4 
80286call gate 
5 
Task gate (for 80286 or Intel386TMDXtask) 
6 
80286 interruptgate 
7 
80286trap gate 
C 
Intel386™ DXcall gate 
E 
Intel386™DX interruptgate 
F 
Intel386TMDXtrap gate 
P 
0 
Descriptorcontentsare not valid 
1 
Descriptorcontentsare valid 


DPL-Ieast privilegedlevelat whicha task mayaccessthe gate.WORDCOUNT0-31-the 
numberof parametersto copyfrom caller's stack 


to the called procedure'sstack.The parametersare 32-bitquantitiesfor Intel386TMDX gates,and 16-bitquantitiesfor 80286gates. 


DESTINATION 
16-bit 
Selectorto the target code segment 
SELECTOR 
selector 
or 
Selectorto the target task state segmentfor task gate 


offset 
Entrypoint withinthe target code segment 
16-bit80286 
32-bit Intel386™DX 


Task 
gates 
are 
used 
to switch 
tasks. 
Task 
gates 
may only refer to a task state segment 
(see section 
4.4.6 Task Switching) 
therefore 
only the destination 
selector 
portion 
of a task 
gate 
descriptor 
is used, 
and the destination 
offset 
is ignored. 


Exception 
13 is generated 
when a destination 
selec- 
tor does not refer to a correct 
descriptor 
type, Le., a 
code 
segment 
for an interrupt, 
trap or call gate, 
a 
TSS for a task gate. 


The access 
byte format 
is the same for all gate de- 
scriptors. 
P = 1 indicates 
that the gate contents 
are 
valid. 
P = 0 indicates 
the contents 
are not valid and 
causes 
exception 
11 if referenced. 
DPL is the de- 
scriptor 
privilege 
level and specifies 
when 
this de- 
scriptor 
may be used by a task (see section 
4.4 Pro- 
tection). 
The S field, bit 4 of the access 
rights byte, 
must 
be 0 to indicate 
a system 
control 
descriptor. 


The type field specifies 
the descriptor 
type as indi- 
cated 
in Figure 4-8. 


4.3.4.7 
DIFFERENCES 
BETWEEN 
Intel386TM 
OX 
AND 
80286 
DESCRIPTORS 


In order 
to provide 
operating 
system 
compatibility 
between 
the 
80286 
and 
Intel386 
OX, the 
Intel386 
OX supports 
all of the 80286 
segment 
descriptors. 


Figure 
4-9 shows 
the general 
format 
of an 80286 
system segment 
descriptor. 
The only differences 
be- 
tween 80286 and Intel386 
OX descriptor 
formats 
are 
that the values 
of the type fields, 
and the limit and 
base address 
fields have been expanded 
for the In- 


tel386 
OX. The 80286 
system 
segment 
descriptors 
contained 
a 24-bit 
base 
address 
and 
16-bit 
limit, 


while 
the 
Intel386 
OX system 
segment 
descriptors 
have a 32-bit base address, 
a 20-bit limit field, and a 
granularity 
bit. 


By supporting 
80286 
system 
segments 
the Intel386 
OX is able to execute 
80286 
application 
programs 
on an Intel386 
OX operating 
system. This is possible 
because 
the 
processor 
automatically 
understands 
which 
descriptors 
are 80286-style 
descriptors 
and 
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SEGMENT 
BASE 15 ... 
0 


Intel Reserved 
Set to 0 


BASE 
LIMIT 
P 


Base Address 
of the segment 
The 
length 
of the segment 
Present 
Bit 
1 = Present 
0 = Not Present 


which 
descriptors 
are Intel386 
OX-style descriptors. 


In particular, 
if the upper word of a descriptor 
is zero, 


then that descriptor 
is a 80286-style 
descriptor. 


The only other differences 
between 
80286-style 
de- 


scriptors 
and Intel386 
OX descriptors 
is the interpre- 
tation of the word count field of call gates and the B 
bit. The 
word 
count 
field 
specifies 
the 
number 
of 
16-bit 
quantities 
to copy 
for 80286 
call gates 
and 
32-bit quantities 
for Intel386 
OX call gates. The B bit 
controls 
the size of PUSHes when using a call gate; 


if B =0 PUSHes are 16 bits, if B = 1 PUSHes 
are 32 
bits. 


A selector 
in Protected 
Mode has three fields: Local 
or Global 
Descriptor 
Table 
Indicator 
(TI), Descriptor 
Entry Index (Index), 
and Requestor 
(the selector's) 
Privilege 
Level (RPL) as shown 
in Figure 4-10. The 
TI bits select 
one 
of two 
memory-based 
tables 
of 
descriptors 
(the Global Descriptor 
Table or the Local 
Descriptor 
Table). 
The Index selects 
one of 8K de- 


scriptors 
in the 
appropriate 
descriptor 
table. 
The 
RPL bits allow 
high speed 
testing 
of the selector's 
privilege 
attributes. 


In addition 
to the selector 
value, every segment 
reg- 
ister has a segment 
descriptor 
cache 
register 
asso- 
ciated 
with it. Whenever 
a segment 
register's 
con- 


tents are changed, 
the 8-byte descriptor 
associated 
with that 
selector 
is automatically 
loaded 
(cached) 


on the chip. Once loaded, 
all references 
to that seg- 
ment use the cached 
descriptor 
information 
instead 
of reaccessing 
the descriptor. 
The contents 
of the 
descriptor 
cache 
are not visible to the programmer. 


Since 
descriptor 
caches 
only change 
when 
a seg- 
ment 
register 
is changed, 
programs 
which 
modify 
the 
descriptor 
tables 
must 
reload 
the 
appropriate 
segment 
registers 
after 
changing 
a 
descriptor's 
value. 


o 


BASE 
+4 
23 ... 16 


DPL 
S 
TYPE 


Descriptor 
Privilege 
Level 
0-3 
System 
Descriptor 
0 = System 
1= User 
Type 
of Segment 


6 


5 
• 
:5PEl;.9~J>:rOf{ 


2 


LOCAL 
DESCRIPTOR 
TABLE 


N 


DESCRIPTOR 
NUt.4BER 


6 


5 
• 
:5 


2 


NULL 


GLOBAL 
DESCRIPTOR 
TABLE 
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4.3.4.10 
SEGMENT 
DESCRIPTOR 
REGISTER 
SETTINGS 


For compatiblity 
with the 8086 architecture, 
the base 
is set to sixteen times the current 
selector 
value, the 
limit is fixed 
at OOOOFFFFH, and the attributes 
are 
fixed so as to indicate 
the segment 
is present 
and 
fully 
usable. 
In 
Real 
Address 
Mode, 
the 
internal 


"privilege 
level" 
is always fixed to the highest 
level, 


level 0, so I/O and other privileged 
opcodes 
may be 
executed. 


The contents 
of the segment 
descriptor 
cache vary 
depending 
on the mode the Intel386 
OX is operating 
in. When operating 
in Real Address 
Mode, the seg- 
ment base, limit, and other attributes 
within the seg- 
ment cache registers 
are defined 
as shown in Figure 
4-11. 


32 - 
BIT BASE 


(UPDATED 
DURING 
SELECTOR 
LOAD 
INTO SEGMENT 
REGISTEfl) 


CONfORMING 
PRIVILEGE 
---------------------., 


STACK 
SIZE 
-------------------., 
EXECUTABLE 
-------------------., 
WRITEABLE 
------------------., 
READABLE 
-----------------., 


EXPANSION 
DIRECTION ----------------1 
GRANULARITY 
1 
ACCESSED 
1 


~:~~~~~E_L~E~ 
~A-~-~-_-_-_-_-_-_-_-_-_-_-_-~-I_-M-I!-_-_-_-}.-J 
__ 
_ 
__ 


32 - 
BIT LIMIT 


(fiXED) 


OTHER 
ATIRIBUTES 


(fiXED) 


CS 
'6X 
CURRENT 
CS SELECTOR" 
OOOOffffH 
Y 
0 
Y 
B 
U 
Y 
Y 
Y 
- 
N 


SS 
'6X 
CURRENT 
SS SELECTOR 
OOOOffffH 
Y 
0 
Y 
B 
U 
Y 
Y 
N 
W 
- 


OS 
16X 
CURRENT 
OS SELECTOR 
OOOOffffH 
Y 
0 
Y 
B 
U 
Y 
Y 
N - - 


ES 
'6X 
CURRENT 
ES SELECTOR 
OOOOffffH 
Y 
0 
Y 
B 
U 
Y 
Y 
N - - 
fS 
'6X 
CURRENT 
fS 
SELECTOR 
ooaOffffH 
y 
0 
y 
B 
U 
Y 
Y 
N - - 


GS 
'6X 
CURRENT 
GS SELECTOR 
OOOOffffH 
y 
0 
y 
B 
U 
Y 
Y 
N - - 


•Except the 32-bit CS base is initialized to FFFFFOOOHafter reset until first intersegment control transfer (e.g. intersegment CALL, or 
intersegment JMP, or INT). (See Figure 4-13 Example.) 
Key: 
Y 
= yes 
N 
~ 
no 
o 
~ privilege level 0 
1 
= privilege level 1 
2 
~ privilege level 2 
3 
= privilege level 3 
U 
~ expand up 


o 
= expand down 
B 
= byte granularity 
P 
~ page granularity 
W 
~ push/pop 16-bit words 
F 
= push/pop 32-bit dwords 
- 
~ does not apply to that segment cache register 


Figure 4-11. Segment 
Descriptor 
Caches for Real Address 
Mode 
(Segment 
limit 
and Attributes 
are Fixed) 


When operating in Protected Mode, the segment 
base, limit, and other attributes within the segment 
cache registers are defined as shown in Figure 4-12. 
In Protected Mode, each of these fields are defined 


according to the contents of the segment descriptor 
indexed by the selector value loaded into the seg- 
ment register. 


SEG~ENT 


32 - BIT BASE 


(UPDATEDDURING 
SELECTORLOADINTO 
SEG~ENTREGISTER) 


CONFOR~INGPRIVILEGE---------------------, 
STACKSIZE-----------------------, 
EXECUTABLE----------------------......, 
WRITEABLE---------------------, 
READABLE----------------------, 
EXPANSIONDIRECTION----------------- 
1 


GRANULARITY 
1 
ACCESSED 
1 


~:~V~~~~E_L~~E~-~-~-S..r-_-_-_-_-_-_-_-_-_-_-_-:-I~-I_-T-_-_-_-_-_-_-~-J 
__ 
_ 
__ 
__ 
_ 


DESCRIPTORCACHEREGISTERCONTENTS 


32 - BIT L1~IT 
OTHERATTRIBUTES 


(UPDATEDDURING 
(UPDATEDDURING 
SELECTORLOADINTO 
SELECTORLOADINTO 
SEG~ENTREGISTER) 
SEG~ENTREGISTER) 


CS 
BASEPERSEGDESCR 
L1~ITPERSEGDESCR 
P 
d 
d 
d 
d 
d 
N Y 
- 
d 


SS 
BASEPERSEGDESCR 
L1~ITPERSEGDESCR 
P 
d 
d 
d 
d 
r w 
N d - 
OS 
BASEPERSEGDESCR 
L1~ITPERSEGDESCR 
P 
d 
d 
d 
d 
d 
d 
N 


ES 
BASEPERSEGDESCR 
L1~ITPERSEGDESCR 
P 
d 
d 
d 
d 
d 
d 
N 


FS 
BASEPERSEGDESCR 
L1~ITPERSEGDESCR 
P 
d 
d 
d 
d 
d 
d 
N 


GS 
BASEPERSEGDESCR 
LI~IT PERSEGDESCR 
P 
d 
d 
d 
d 
d 
d 
N 


Key: 
Y ~ fixed yes 
N ~ fixed no 
d = per segment descriptor 
p ~ per segment descriptor; descriptor must indicate "present" to avoid exception 11 
(exception 12 in case of 58) 
r ~ per segment descriptor, but descriptor must indicate "readable" to avoid exception 13 
(special case for SS) 
w = per segment descriptor, but descriptor must indicate "writable" to avoid exception 13 
(special case for SS) 
- ~ does not apply to that segment cache register 


When operating in a Virtual 8086 Mode within the 
Protected Mode, the segment base, limit, and other 
attributes within the segment cache registers are de- 
fined as shown in Figure 4-13. For compatibility with 
the 8086 architecture, the base is set to sixteen 
times the current selector value, the limit is fixed at 


OOOOFFFFH,and the attributes are fixed so as to 
indicate the segment is present and fully usable. The 
virtual program executes at lowest privilege level, 
level 3, to allow trapping of all IOPL-sensitive in- 
structions and level-O-onlyinstructions. 


32 - 
BIT BASE 
32 - 
BIT LIMIT 
OTHER 
ATIRIBUTES 


(UPDATED 
DURING 
SELECTOR 
(FIXED) 
(FIXED) 


LOAD 
INTO 
SEGMENT 
REGISTER) 


CONFORMING 
PRIVILEGE 
----------------------, 


STACK 
SIZE 
-------------------., 
EXECUTABLE 
------------------., 
WRITEABLE 
------------------, 
READABLE 
-----------------., 


EXPANSION 
DIRECTION ----------------1 
GRANULARITY 
1 
ACCESSED 
1 


~:~V~~~~E_L~~E~ 
B~-:-E_-_-_-_-_-_-_-_-_-_-_-_-~-IM-_I-:-_-_-_-t-J 
_ _ 
_ 
__ 


CS 
16X 
CURRENT 
CS SELECTOR 
OOOOFFFFH 
Y 
3 
Y 
B 
U 
Y 
Y 
Y 
- 
N 


SS 
16X 
CURRENT 
SS SELECTOR 
OOOOFFFFH 
Y 
3 
Y 
B 
U 
Y 
Y 
N 
W 
- 


DS 
16X 
CURRENT 
DS SELECTOR 
OOOOFFFFH 
Y 
3 
Y 
B 
U 
Y 
Y 
N - - 


ES 
16X 
CURRENT 
ES SELECTOR 
OOOOFFFFH 
Y 
3 
Y 
B 
U 
Y 
Y 
N - - 


FS 
16X 
CURRENT 
FS SELECTOR 
OOOOFFFFH 
Y 
3 
Y 
B 
U 
Y 
Y 
N 
- 
- 


GS 
16X 
CURRENT 
GS SELECTOR 
OOOOFFFFH 
Y 
3 
Y 
B 
U 
Y 
Y 
N - - 


Key: 
Y 
= yes 
N 
= 
no 
o 
= privilege 
level 
0 
1 
= privilege 
level 
1 
2 
= privilege 
level 
2 
3 
= privilege 
level 
3 
U 
= expand 
up 


o 
= expand 
down 


B 
= byte granularity 


P 
= page 
granularity 
W 
= 
push/pop 
16-bit 
words 


F 
= push/pop 
32-bit 
dwords 


- 
= does 
not apply 
to that 
segment 
cache 
register 


Figure 4·13. Segment 
Descriptor 
Caches for Virtual 
8086 Mode within 
Protected 
Mode 


(Segment 
Limit and Attributes 
are Fixed) 
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Figure 4-14. Four-Level Hlerachlcal Protection 


The Intel386 DX has four levels of protection which 
are optimized to support the needs of a multi-tasking 
operating system to isolate and protect user pro- 
grams from each other and the operating system. 
The privilege levels control the use of privileged in- 
structions, I/O instructions, and access to segments 
and segment descriptors. Unlike traditional micro- 
processor-based systems where this protection is 
achieved only through the use of complex external 
hardware and software the Intel386 DX provides the 
protection as part of its integrated Memory Manage- 
ment Unit. The Intel386 DX offers an additional type 
of protection on a page basis, when paging is en- 
abled (See section 4.5.3 Page Level Protection). 


The four-level hierarchical privilege system is illus- 
trated in Figure 4-14. It is an extension of the user/ 
supervisor privilege mode commonly used by mini- 
computers and, in fact, the user/supervisor mode is 
fully supported by the Intel386 DX paging mecha- 
nism. The privilege levels (PL) are numbered 0 
through 3. Level 0 is the most privileged or trusted 
level. 


4.4.2 Rules of Privilege 


The Intel386 DX controls access to both data and 
procedures between levels of a task, according to 
the following rules. 


• Data stored in a segment with privilege level p can 
be accessed only by code executing at a privilege 
level at least as privileged as p. 


• A code segment/procedure with privilege level p 


can only be called by a task executing at the same 
or a lesser privilege level than p. 


At any point in time, a task. on the Intel386 DX al- 
ways executes at one of the four privilege levels. 
The Current Privilege Level (CPL) specifies the 
task's privilege level. A task's CPL may only be 
changed by control transfers through gate descrip- 
tors to a code segment with a different privilege lev- 
el. (See section 4.4.4 Privilege 
Level Transfers) 


Thus, an application program running at PL = 3 may 
call an operating system routine at PL = 1 (via a 
gate) which would cause the task's CPL to be set to 
1 until the operating system routine was finished. 


The privilege level of a selector is specified by the 
RPL field. The RPL is the two least significant bits of 
the selector. The selector's RPL is only used to es- 
tablish a less trusted privilege level than the current 
privilege level for the use of a segment. This level is 
called the task's effective privilege level (EPL). The 
EPL is defined as being the least privileged (I.e. nu- 
merically larger) level of a task's CPL and a selec- 
tor's RPL. Thus, if selector's RPL = 0 then the CPL 
always specifies the privilege level for making an ac- 
cess using the selector. On the other hand if RPL = 
3 then a selector can only access segments at level 
3 regardless of the task's CPL. The RPL is most 
commonly used to verify that pointers passed to an 
operating system procedure do not access data that 
is of higher privilege than the procedure that origi- 
nated the pointer. Since the originator of a selector 
can specify any RPL value, the Adjust RPL (ARPL) 
instruction is provided to force the RPL bits to the 
originator's CPL. 


4.4.3.3 I/O PRIVILEGE AND I/O PERMISSION 
BITMAP 


The I/O privilege level (IOPL, a 2-bit field in the 
EFLAG register) defines the least privileged level at 
which I/O instructions can be unconditionally per- 
formed. I/O instructions can be unconditionally per- 
formed when CPL :S: 10PL.(The I/O instructions are 
IN, OUT, INS, OUTS, REP INS, and REP OUTS.) 
When CPL > 10PL,and the current task is associat- 
ed with a 286 TSS, attempted I/O instructions cause 
an exception 13 fault. When CPL > 10PL, and the 
current task is associated with an Intel386 DX TSS, 
the I/O Permission Bitmap (part of an Intel386 DX 
TSS) is consulted on whether I/O to the port is al- 
lowed, or an exception 13 fault is to be generated 


instead. 
For diagrams 
of the I/O Permission 
Bitmap, 
refer to Figures 
4-15a 
and 4-15b. 
For further 
infor- 
mation on how the I/O Permission 
Bitmap is used in 
Protected 
Mode 
or in Virtual 
8086 
Mode, 
refer 
to 
section 
4.6.4 Protection 
and I/O Permission 
Bitmap. 


The I/O 
privilege 
level (IOPL) also affects 
whether 


several 
other instructions 
can be executed 
or cause 
an exception 
13 fault instead. These instructions 
are 


called 
"IOPL-sensitive" 
instructions 
and 
they 
are 


CLI and STI. (Note that the LOCK prefix is not 10PL- 
sensitive 
on the Intel386 
OX.) 


The 10PL also affects 
whether 
the IF (interrupts 
en- 
able flag) bit can be changed 
by loading a value into 


the EFLAGS 
register. 
When 
CPL ~ 10PL, then the 
IF bit can be changed 
by loading 
a new value into 


the EFLAGS 
register. 
When CPL > 10PL. the IF bit 
cannot 
be changed 
by a new value POP'ed 
into (or 


otherwise 
loaded 
into) the EFLAGS 
register; 
the IF 


bit merely 
remains 
unchanged 
and no exception 
is 
generated. 


Instruction 
Operands 
Function 


ARPL 
Selector, 
Adjust Requested 
Privi- 


Register 
lege Level: adjusts the 
RPL of the selector 
to the 
numeric maximum 
of 
current selector 
RPL value 
and the RPL value in the 
register. Set zero flag if 
selector 
RPL was 
changed., 


VERR 
Selector 
VERify for Read: sets the 
zero flag if the segment 
referred to by the selector 
can be read. 


VERW 
Selector 
VERify for Write: sets the 
zero flag if the segment 
referred to by the selector 
can be written. 


LSL 
Register. 
Load Segment 
Limit: reads 
Selector 
the segment 
limit into the 
register if privilege 
rules 
and descriptor 
type allow. 
Set zero fl~g if successful. 


LAR 
Register. 
Load Access 
Rights: reads 
Selector 
the descriptor 
access 
rights byte into the register 
if privilege 
rules allow. Set 
zero flag if successful. 


The 
Intel386 
OX provides 
several 
instructions 
to 


speed 
pointer 
testing 
and help maintain 
system 
in- 


tegrity 
by verifying 
that the selector 
value 
refers 
to 


an appropriate 
segment. 
Table 
4-2 summarizes 
the 


selector 
validation 
procedures 
available 
for the 
In- 


tel386 
OX. 


This pointer 
verification 
prevents 
the common 
prob- 


lem of an application 
at PL = 3 calling 
a operating 


systems 
routine 
at PL = 0 and passing 
the operat- 


ing system 
routine a "bad" 
pointer 
which corrupts 
a 


data structure 
belonging 
to the operating 
system. 
If 


the operating 
system routine uses the ARPL instruc- 


tion to ensure 
that the RPL of the selector 
has no 


greater 
privilege 
than 
that 
of the 
caller, 
then 
this 


problem 
can be avoided. 


There are basically 
two types of segment 
accesses: 


those 
involving 
code 
segments 
such 
as 
control 


transfers, 
and those involving 
data accesses. 
Oeter- 


mining the ability of a task to access 
a segment 
in- 


volves 
the type of segment 
to be accessed, 
the in- 


struction 
used, the type of descriptor 
used and CPL. 


RPL, and OPL as described 
above. 


Any time an instruction 
loads data segment 
registers 


(OS, ES, FS, GS) the Intel386 
OX makes protection 


validation 
checks. 
Selectors 
loaded 
in the 
OS, ES, 


FS, GS registers 
must refer only to data segments 
or 


readable 
code segments. 
The data access 
rules are 


specified 
in section 
4.2.2 
Rules 
of Privilege. 
The 


only exception 
to those rules is readable 
conforming 


code segments 
which can be accessed 
at any privi- 


lege level. 


Finally the privilege validation 
checks are performed. 


The CPL is compared 
to the EPL and if the EPL is 


more privileged 
than the CPL an exception 
13 (gen- 


eral protection 
fault) is generated. 


The rules regarding 
the stack 
segment 
are slightly 


different 
than 
those 
involving 
data 
segments. 
In- 


structions 
that load selectors 
into SS must refer to 


data 
segment 
descriptors 
for 
writeable 
data 
seg- 


ments. 
The OPL and RPL must equal 
the CPL. All 


other 
descriptor 
types 
or a privilege 
level violation 


will cause 
exception 
13. A stack 
not present 
fault 


causes 
exception 
12. Note that an exception 
11 is 


used for a not-present 
code or data segment. 


Inter-segment 
control 
transfers 
occur when a selec- 


tor is loaded 
in the CS register. 
For a typical 
system 


most of these transfers 
are simply the result of a call 


Control 
Transfer 
Types 
Operation 
Types 
Descriptor 
Descriptor 
Referenced 
Table 


Intersegment within the same privilege level 
JMP, CALL, RET, IRET* 
Code Segment 
GOT/LOT 


Intersegment to the same or higher privilege level 
CALL 
Call Gate 
GOT/LOT 
Interrupt within task may change CPL 
Interrupt Instruction, 
Trap or 
lOT 
Exception, External 
Interrupt 
Interrupt 
Gate 


Intersegment to a lower privilege level 
RET,IRET* 
Code Segment 
GOT/LOT 
(changes task CPL) 


CALL, JMP 
Task State 
GOT 
Segment 


Task Switch 
CALL, JMP 
Task Gate 
GOT/LOT 


IRET** 
Task Gate 
lOT 
Interrupt Instruction, 
Exception, External 
Interrupt 


or a jump to another routine. There are five types of 
control transfers which are summarized in Table 4-3. 
Many of these transfers result in a privilege level 
transfer. Changing privilege levels is done only via 
control transfers, by using gates, task switches, and 
interrupt or trap gates. 


Control transfers can only occur if the operation 
which loaded the selector references the correct de- 
scriptor type. Any violation of these descriptor usage 
rules will cause an exception 13 (e.g. JMP through a 
call gate, or IRET from a normal subroutine call). 


In order to provide further system security, all control 
transfers are also subject to the privilege rules. 


The privilege 
rules require 
that: 
- 
Privilege level transitions can only occur via 
gates. 
- 
JMPs can be made to a non-conforming code 
segment with the same privilege or to a conform- 
ing code segment with greater or equal privilege. 
- 
CALLs can be made to a non-conforming code 
segment with the same privilege or via a gate to a 
more privileged level. 


- 
Interrupts handled within the task obey the same 
privilege rules as CALLs. 
- 
Conforming Code segments are accessible by 
privilege levels which are the same or less privi- 
leged than the conforming-code segment's OPL. 


- 
Both the requested privilege level (RPL) in the 
selector pointing to the gate and the task's CPL 


must be of equal or greater privilege than the 
gate's OPL. 


- 
The code segment selected in the gate must be 
the same or more privileged than the task's CPL. 


- 
Return instructions that do not switch tasks can 
only return control to a code segment with same 
or less privilege. 
- 
Task switches can be performed by a CALL, 
JMP, or INT which references either a task gate 
or task state segment who's OPL is less privi- 
leged or the same privilege as the old task's CPL. 


Any control transfer that changes CPL within a task 
causes a change of stacks as a result of the privi- 
lege level change. The initial values of SS:ESP for 
privilege levels 0, 1, and 2 are retained in the task 
state segment (see section 4.4.6 Task Switching). 
Ouring a JMP or CALL control transfer, the new 
stack pointer is loaded into the SS and ESP regis- 
ters and the previous stack pointer is pushed onto 
the new stack. 


When RETurning to the original privilege level, use 
of the lower-privileged stack is restored as part of 
the RET or IRET instruction operation. For subrou- 
tine calls that pass parameters on the stack and 
cross privilege levels, a fixed number of words (as 
specified in the gate's word count field) are copied 
from the previous stack to the current stack. The 
inter-segment RET instruction with a stack adjust- 
ment value will correctly restore the previous stack 
pointer upon return. 
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Figure 4·15b. Sample I/O Permission 
Bit Map 


(all of the registers, address space, and a link to the 
previous task), loads a new execution state, per- • 
forms protection checks, and commences execution 
in the new task, in about 17 microseconds. Like 
transfer of control via gates, the task switch opera- 
tion is invoked by executing an inter-segment JMP 
or CALL instruction which refers to a Task State 
Segment (TSS),or a task gate descriptor in the GOT 
or LOT. An INT n instruction, exception, trap, or ex- 
ternal interrupt may also invoke the task switch op- 
eration if there is a task gate descriptor in the asso- 
ciated lOT descriptor slot. 


Gates provide protected, indirect CALLs. One of the 
major uses of gates is to provide a secure method of 
privilege transfers within a task. Since the operating 
system defines all of the gates in a system, it can 
ensure that all gates only allow entry into a few trust- 
ed procedutes (such as those which allocate memo- 
ry, or perform I/O). 


Gate descriptors follow the data access rules of priv- 
ilege; that is, gates can be accessed by a task if the 
EPL, is equal to or more privileged than the gate 
descriptor's OPL. Gates follow the control transfer 
rules of privilege and therefore may only transfer 
control to a more privileged level. 


Call Gates are accessed via a CALL instruction and 
are syntactically identical to calling a normal subrou- 
tine. When an inter-level Intel386 OXcall gate is ac- 
tivated, the following actions occur. 


1. Load CS:EIP from gate check for validity 
2. SS is pushed zero-extended to 32 bits 
3. ESP is pushed 
4. Copy Word Count 32-bit parameters from the 
old stack to the new stack 
5. Push Return address on stack 


The procedure is identical for 80286 Call gates, ex- 
cept that 16-bit parameters are copied and 16-bit 
registers are pushed. 


Interrupt Gates and Trap gates work in a similar 
fashion as the call gates, except there is no copying 
of parameters. The only difference between Trap 
and Interrupt gates is that control transfers through 
an Interrupt gate disable further interrupts (Le.the IF 
bit is set to 0), and Trap gates leave the interrupt 
status unchanged. 


4.4.6 
Task SWitching 


A very important attribute of any multi-tasking/multi- 
user operating systems is its ability to rapidly switch 
between tasks or processes. The Intel386 OXdirect- 
ly supports this operation by providing a task switch 
instruction in hardware. The Intel386 OX task switch 
operation saves the entire state of the machine 


The TSS descriptor points to a segment (see Figure 
4-15) containing the entire Intel386 OX execution 
state while a task gate descriptor contains a TSS 
selector. The Intel386 OX supports both 80286 and 
Intel386 OX style TSSs. Figure 4-16 shows a 80286 
TSS. The limit of an Intel386 OXTSS must be great- 
er than 0064H (002BH for a 80286 TSS), and can be 
as large as 4 Gigabytes. In the additional TSS 
space, the operating system is free to store addition- 
al information such as the reason the task is inac- 
tive, time the task has spent running, and open files 
belong to the task. 


Each task must have a TSS associated with it. The 
current TSS is identified by a special register in the 
Intel386 OX called the Task State Segment Register 
(TR). This register contains a selector referring to 
the task state segment descriptor that defines the 
current TSS. A hidden base and limit register associ- 
ated with TR are loaded whenever TR is loaded with 
a new selector. Returning from a task is accom- 
plished by the IRET instruction. When IRET is exe- 
cuted, control is returned to the task which was in- 
terrupted. The current executing task's 
state is 
saved in the TSS and the old task state is restored 
from its TSS. 


Several bits in the flag register and machine status 
word (CRO) give information about the state of a 
task which are useful to the operating system. The 
Nested Task (NT) (bit 14 in EFLAGS) controls the 
function of the IRET instruction. If NT = 0, the IRET 
instruction performs the regular return; when NT = 
1, IRET performs a task switch operation back to the 
previous task. The NT bit is set or reset in the follow- 
ing fashion: 
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Figure 4-16. 80286 TSS 


When a CALL or INT instruction initiates a task 
switch. the new TSS will be marked busy and the 
back link field of the new TSS set to the old TSS 
selector. The NT bit of the new task is set by CALL 
or INT initiated task switches. An interrupt that does 
not cause a task switch will clear NT. (The NT bit will 
be restored after execution of the interrupt handler) 
NT may also be set or cleared by POPF or IRET 
instructions. 


The Intel386 OXtask state segment is marked busy 
by changing the descriptor type field from TYPE 9H 
to TY~E BH. An 80286 TSS is marked busy by 
changing the descriptor type field from TYPE 1 to 
TYPE 3. Use of a selector that references a busy 
task state segment causes an exception 13. 


The Virtual Mode (VM) bit 17 is used to indicate if a 
ta.sk.is a virtual 8086 task. If VM = 1, then the tasks 
will use the Real Mode addressing mechanism. The 
virtual 8086 environment is only entered and exited 
via a task switch (see section 4.6 Virtual Mode). 


The coprocessor's state is not automatically saved 
when a task switch occurs, because the incoming 
task 
may not 
use the 
coprocessor. 
The Task 
Switched (TS) Bit (bit 3 in the CRO)helps deal with 
the coprocessor's state in a multi-tasking environ- 


ment. Whenever the Intel386 OX switches tasks, it 
sets the TS bit. The Intel386 OXdetects the first use 
of a processor extension instruction after a task 
switch and causes the processor extension not 
available exception 7. The exception handler for ex- 
ception 7 may then decide whether to save the state 
of the coprocessor. A processor extension not pres- 
ent exception (7) will occur when attempting to exe- 
cute 
an ESC or WAIT instruction 
if the Task 


Switched and Monitor coprocessor extension bits 
are both set (i.e. TS = 1 and MP = 1). 


The T bit in the Intel386 OX TSS indicates that the 
processor should generate a debug exception when 
switching to a task. If T = 1 then upon entry to a 
new task a debug exception 1 will be generated. 


4.4.7 
Initialization 
and Transition 
to 
Protected 
Mode 


Since the Intel386 OX begins executing in Real 
~.O.d~immediately after RESET it is necessary to 
Initialize the system tables and registers with the ap- 
propriate values. 


The GOTand lOT registers must refer to a valid GOT 
and lOT. The lOT should be at least 256 bytes long, 
and GOT must contain descriptors for the initial 
code, and data segments. Figure 4-17 shows the 
tables and Figure 4-18 the descriptors needed for a 
simple Protected Mode Intel386 OX system. It has a 
single. code and single data/stack 
segment each 


four gigabytes long and a single privilege level PL = 
O. 


The actual method of enabling Protected Mode is to 
load CROwith the PE bit set, via the MOV CRO R/M 
instruction. This puts the Intel386 OX in Protected 
Mode. 


After enabling Protected Mode, the next instruction 
should execute an intersegment JMP to load the CS 
r~gister a~d flush the instruction decode queue. The 
final step IS to load all of the data segment registers 
with the initial selector values. 


An alternate approach to entering Protected Mode 
whi~h is especial~yappropriate for multi-tasking op- 
erating systems, IS to use the built in task-switch to 
load all of the registers. In this case the GOT would 
contain two TSS descriptors in addition to the code 
and data descriptors needed for the first task. The 
first JMP instruction in Protected Mode would jump 
to the TSS causing a task switch and loading all of 
the registers with the values stored in the TSS. The 
Task State Segment Register should be initialized to 
point to a valid TSS descriptor since a task switch 
saves the state of the current task in a task state 
segment. 
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4.4.8 
Tools for Building Protected 
Systems 


In order to simplify 
the design 
of a protected 
multi- 


tasking 
system, 
Intel 
provides 
a tool 
which 
allows 


the system designer 
an easy method 
of constructing 


the 
data 
structures 
needed 
for a Protected 
Mode 


Intel386 
OX system. This tool is the builder BLD-386. 
BLD-386 
lets the operating 
system 
writer specify all 
of the segment 
descriptors 
discussed 
in the previous 


sections 
(LOTs, lOTs, GDTs, Gates, and TSSs) in a 


high-level 
language. 


Paging is another 
type of memory 
management 
use- 
ful for 
virtual 
memory 
multitasking 
operating 
sys- 
tems. 
Unlike 
segmentation 
which 
modularizes 
pro- 
grams 
and 
data 
into 
variable 
length 
segments, 


paging 
divides 
programs 
into multiple 
uniform 
size 
pages. 
Pages bear no direct 
relation 
to the logical 


• 


structure of a program. While segment selectors can 
be considered the logical "name" 
of a program 


module or data structure, a page most likely corre- 
sponds to only a portion of a module or data struc- 
ture. 


By taking advantage of the locality of reference dis- 
played by most programs, only a small number of 
pages from each active task need be in memory at 
anyone moment. 


The Intel386 OX uses two levels of tables to trans- 
late the linear address (from the segmentation unit) 
into a physical address. There are three compo- 
nents to the paging mechanism of the Intel386 OX: 
the page directory, the page tables, and the page 
itself (page frame). All memory-resident elements of 
the Intel386 OX paging mechanism are the same 
size, namely, 4K bytes. A uniform size for all of the 
elements simplifies memory allocation and realloca- 
tion schemes, since there is no problem with memo- 
ry fragmentation. Figure 4-19 shows how the paging 
mechanism works. 


CR2 is the Page Fault Linear Address register. It 
holds the 32-bit linear address which caused the last 
page fault detected. 


CR3 is the Page Directory Physical Base Address 
Register. It contains the physical starting address of 
the Page Directory. The lower 12 bits of CR3 are 
always zero to ensure that the Page Directory is al- 
ways page aligned. Loading it via a MOV CR3, reg 
instruction causes the Page Table Entry cache to be 
flushed, as will a task switch through a TSS which 
changes 
the value of CRO.(See 4.5.4 Translation 


Lookaslde 
Buffer). 


The Page Directory is 4K bytes long and allows up to 
1024 Page Directory Entries. Each Page Directory 
Entry contains the address of the next level of ta- 
bles, the Page Tables and information about the 
page table. The contents of a Page Directory Entry 
are shown in Figure 4-20. The upper 10 bits of the 
linear address (A22-A31) are used as an index to 
select the correct Page Directory Entry. 
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Figure 4-21. Page Table Entry (Points to Page) 


The (User/Supervisor) U/S bit 2 and the (Read/ 
Write) R/W bit 1 are used to provide protection attri- 
butes for individual pages. 
Each Page Table is 4K bytes and holds up to 1024 
Page Table Entries. Page Table Entries contain the 
starting address of the page frame and statistical 
information about the page (see Figure 4-21). Ad- 
dress bits A12-A21 are used as an index to select 
one of the 1024 Page Table Entries. The 20 upper- 
bit page frame address is concatenated with the 
lower 12 bits of the linear address to form the physi- 
cal address. Page tables can be shared between 
tasks and swapped to disks. 


4.5.2.5 PAGE DIRECTORY/TABLE ENTRIES 


The lower 12 bits of the Page Table Entries and 
Page Directory Entries contain statistical information 
about pages and page tables respectively. The P 
(Present) bit 0 indicates if a Page Directory or Page 
Table entry can be used in address translation. If 
P = 1 the entry can be used for address translation' 
if P = 0 the entry can not be used for translation: 
Note that the present bit of the page table entry that 
points to the page where code is currently being ex- 
ecuted should always be set. Code that marks its 
own page not present should not be written. All of 
the other bits are available for use by the software. 
For example the remaining 31 bits could be used to 
indicate where on the disk the page is stored. 


The A (Accessed) bit 5, is set by the Intel386 DX for 
both types of entries before a read or write access 
occurs to an address covered by the entry. The D 
(Dirty) bit 6 is set to 1 before a write to an address 
covered by that page table entry occurs. The D bit is 
undefined for Page Directory Entries. When the P, A 
and D bits are updated by the Intel386 DX, the proc- 
essor generates a Read-Modify-Write cycle which 
locks the bus and prevents conflicts with other proc- 
essors 
or perpherials. Software which 
modifies 


these bits should use the LOCK prefix to ensure the 
integrity of the page tables in multi-master systems. 


The 3 bits marked OS Reserved in Figure 4-20 and 
Figure 4-21 (bits 9-11) are software definable. OSs 
are free to use these bits for whatever purpose they 
Wish. An example use of the OS Reserved 
bits 
woul? be to store information about page aging. By 
keeping ,rack of how long a page has been in mem- 
ory since being accessed, an operating system can 
implement a page replacement algorithm like Least 
Recently Used. 


4.5.3 Page Level Protection 
• 
(R/W, U/S Bits) 


The Intel386 DX provides a set of protection attri- 
butes for paging systems. The paging mechanism 
distinguishes between two levels of protection: User 
which corresponds to level 3 of the segmentation 
based protection, and supervisor which encompass- 
es all of the other protection levels (0, 1, 2). Pro- 
grams executing at Level 0, 1 or 2 bypass the page 
protection, although segmentation based protection 
is still enforced by the hardware. 


The 
U/S 
and 
R/W 
bits are 
used to 
provide 
User/Supervisor and Read/Write protection for indi- 
vidual pages or for all pages covered by a Page Ta- 
ble Directory Entry. The U/S and R/W bits in the first 
level Page Directory Table apply to all pages de- 
scribed by the page table pointed to by that directory 
entry. The U/S and R/W bits in the second level 
Page Table Entry apply only to the page described 
by that entry. The U/S and R/W bits for a given 
page are obtained by taking the most restrictive of 
the U/S and R/W from the Page Directory Table 
Entries and the Page Table Entries and using these 
bits to address the page. 


Example: If the U/S and R/W bits for the Page Di- 
rectory entry were 10 and the U/S and R/W bits for 
the Page Table Entry were 01, the access rights for 
the page would be 01, the numerically smaller of the 
two. Table 4-4 shows the affect of the U/S and R/W 
bits on accessing memory. 


U/S 
R/W 
Permitted 
Permitted Access 
Level 3 
Levels 0, 1, or 2 


0 
0 
None 
Read/Write 
0 
1 
None 
Read/Write 
1 
0 
Read-Only 
Read/Write 
1 
1 
Read/Write 
Read/Write 


However a given segment can be easily made read- 
only for level 0, 1, or 2 via the use of segmented 
protection mechanisms. (Section 4.4 Protection). 


The 
Intel386 
DX paging 
hardware 
is designed 
to 
support 
demand 
paged 
virtual 
memory 
systems. 
However, 
performance 
would 
degrade 
substantially 
if the processor 
was required to access two levels of 
tables 
for 
every 
memory 
reference. 
To 
solve 
this 
problem, 
the Intel386 
DX keeps a cache of the most 
recently 
accessed 
pages, 
this 
cache 
is called 
the 
Translation 
Lookaside 
Buffer 
(TLB). 
The 
TLB 
is a 
four-way 
set associative 
32-entry 
page table cache. 
It automatically 
keeps 
the 
most 
commonly 
used 
Page Table 
Entries 
in the processor. 
The 32-entry 
TLB coupled 
with a 4K page size, results 
in cover- 
age of 128K bytes of memory 
addresses. 
For many 
common 
multi-tasking 
systems, 
the TLB will have a 
hit rate of about 
98%. 
This means 
that the proces- 
sor will only have to access the two-level 
page struc- 
ture on 2% 
of all memory 
references. 
Figure 
4-22 
illustrates 
how the TLB 
complements 
the 
Intel386 
DX's paging 
mechanism. 
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The paging hardware 
operates 
in the following 
fash- 
ion. The paging 
unit hardware 
receives 
a 32-bit 
lin- 
ear address 
from the segmentation 
unit. The upper 
20 linear address 
bits are compared 
with all 32 en- 
tries in the TLB to determine 
if there 
is a match. 
If 
there is a match (Le. a TLB hit), then the 32-bit phys- 
ical address 
is calculated 
and will be placed 
on the 
address 
bus. 


However, 
if the page table 
entry is not in the TLB, 
the Intel386 
DX will read the appropriate 
Page Direc- 
tory Entry. If P = 1 on the Page Directory 
Entry indi- 
cating 
that 
the 
page 
table 
is in memory, 
then 
the 
Intel386 
DX will read the appropriate 
Page Table En- 


try and set the Access 
bit. If P = 1 on the 
Page 
Table 
Entry indicating 
that 
the page is in memory, 


the Intel386 
DX will update the Access 
and Dirty bits 
as needed and fetch the operand. 
The upper 20 bits 
of the linear address, 
read from the page table, will 
be stored in the TLB for future accesses. 
However, 
if 
P = 0 for either 
the 
Page 
Directory 
Entry 
or the 
Page Table Entry, then the processor 
will generate 
a 
page fault, an Exception 
14. 


The processor 
will also generate 
an exception 
14, 


page 
fault, 
if the 
memory 
reference 
violated 
the 
page protection 
attributes 
(Le. U/S or A/W) 
(e.g. try- 
ing to write to a read-only 
page). CA2 will hold the 
linear address which caused the page fault. If a sec- 
ond 
page 
fault 
occurs, 
while 
the 
processor 
is at- 
tempting 
to enter 
the 
service 
routine 
for the 
first, 
then the processor 
will invoke the page fault (excep- 
tion 14) handler 
a second 
time, rather than the dou- 
ble fault (exception 
8) handler. Since Exception 
14 is 
classified 
as a fault, CS: EIP will point to the instruc- 


tion causing 
the 
page fault. 
The 
16-bit 
error 
code 
pushed as part of the page fault handler 
will contain 
status 
bits 
which 
indicate 
the 
cause 
of the 
page 
fault. 


The 16-bit error code is used by the operating 
sys- 
tem to determine 
how to handle 
the page fault Fig- 
ure 4-23A 
shows 
the format 
of the page-fault 
error 
code and the interpretation 
of the bits. 


NOTE: 
Even though 
the bits in the error code 
(U/S, 
W/A, 


and P) have similar 
names 
as the bits in the Page 
Directory/Table 
Entries, the interpretation 
of the er- 
ror 
code 
bits 
is different. 
Figure 
4-23B 
indicates 
what type of access 
caused 
the page fault. 
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U 
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U 
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U/S: 
The 
UlS 
bit 
indicates 
whether 
the 
access 
causing 
the fault occurred 
when the processor 
was 
executing 
in User Mode (U/S 
= 1) or in Supervisor 
mode (UiS 
= 0) 


W/R: 
The 
W/A 
bit indicates 
whether 
the 
access 
causing 
the fault was a Aead (W /A 
= 0) or a Write 
(W/A 
= 1) 


P: The 
P bit indicates 
whether 
a page 
fault 
was 
caused by a not-present 
page (P = 0), or by a page 
level protection 
violation 
(P = 1) 


U/S 
W/R 
Access Type 


0 
0 
Supervisor' Read 
0 
1 
Supervisor Write 
1 
0 
User Read 
1 
1 
User Write 


'Descriptor table access will fault with U/S = 0, even if the program 
is executing at level 3. 
Figure 4-238. 
Type of Access 
Causing Page Fault 


4.5.6 
Operating 
System 
Responsibilities 


The Intel386 OX takes care of the page address 
translation process, relieving the burden from an op- 
erating system in a demand-paged system. The op- 
erating system is responsible for setting up the initial 
page tables, and handling any page faults. The oper- 
ating system also is required to invalidate (Le.flush) 
the TLB when any changes are made to any of the 
page table entries. The operating system must re- 
load CR3 to cause the TLB to be flushed. 


Setting up the tables is simply a matter of loading 
CR3 with the address of the Page Directory, and 
allocating space for the Page Directory and the 
Page Tables. The primary responsibili~ of th~ oper- 
ating system is to implement a swapping policy and 
handle all of the page faults. 


A final concern of the operating system is to ensure 
that the TLB cache matches the information in the 
paging tables. In particular, any time the operating 
system sets the P present bit of page table entry to 
zero, the TLB must be flushed. Operating syste~s 
may want to take advantage of the fact that CR3 IS 
stored as part of a TSS, to give every task or group 
of tasks its own set of page tables. 


4.6.1 
Executing 8086 Programs 


The Intel386 OX allows the execution of 8086 appli- 
cation programs in both Real Mode and in the Virtual 
8086 Mode (Virtual Mode). Of the two methods, Vir- 
tual 8086 Mode offers the system designer the most 
flexibility. The Virtual 8086 Mode allows the execu- 
tion of 8086 applications, while still allowing the sys- 
tem designer to take full advantage of the Intel386 
OX protection mechanism. In particular, the Intel386 
OX allows the simultaneous execution of 8086 oper- 
ating systems and its applications, and an Intel386 
OX operating system and both 80286 and Intel386 


OX applications. Thus, in a multi-user Intel386 OX 
computer, one person could be running an MS-DOS 
spreadsheet, another person using MS-DOS, and a 
third person could be running multiple Unix utilities 
and applications. Each person in this scenario would 
believe that he had the computer completely to him- 
self. Figure 4-24 illustrates this concept. 


4.6.2 
Virtual 8086 Mode Addressing 
Mechanism 


One of the major differences between Intel386 OX • 
Real and Protected modes is how the segment se- 
lectors are interpreted. When the processor is exe- 
cuting in Virtual 8086 Mode the segment registers 
are used in an identical fashion to Real Mode. The 
contents of the segment register is shifted left 4 bits 
and added to the offset to form the segment base 
linear address. 


The Intel386 OX allows the operating system to 
specify which programs use the 8086 style address 
mechanism, and which programs use Protected 
Mode addressing, on a per task basis. Through the 
use of paging, the one megabyte address space of 
the Virtual Mode task can be mapped to anywhere in 
the 4 gigabyte linear address space of the Intel386 
OX. Like Real Mode, Virtual Mode effective address- 
es (Le., segment offsets) that exceed 64K byte will 
cause an exception 13. However, these restrictions 
should not prove to be important, because most 
tasks running in Virtual 8086 Mode will simply be 
existing 8086 application programs. 


4.6.3 
Paging In Virtual Mode 


The paging hardware allows the concurrent running 
of multiple Virtual Mode tasks, and provides protec- 
tion and operating system isolation. Although it is 
not strictly necessary to have the paging hardware 
enabled to run Virtual Mode tasks, it is needed in 
order to run multiple Virtual Mode tasks or to relo- 
cate the address space of a Virtual Mode task to 
physical address space greater than one megabyte. 


The paging hardware allows the 20-bit linear ad- 
dress produced by a Virtual Mode program to be 
divided into up to 256 pages. Each one of the pages 
can be located anywhere within the maximum 4 giga- 
byte physical address space of the Intel386 OX. In 
addition, since CR3 (the Page Directory Base Regis- 
ter) is loaded by a task switch, each Virtual Mode 
task can use a different mapping scheme to map 
pages to different physical locations. Finally, the 
paging hardware allows the sharing of the 8086 op- 
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erating 
system code between 
multiple 
8086 applica- 
tions. Figure 4-24 shows how the Intel386 OX paging 
hardware 
enables 
multiple 8086 programs 
to run un- 
der a virtual memory 
demand 
paged system. 


4.6.4 
Protection 
and 1/0 Permission 
Bitmap 


All Virtual 8086 Mode programs 
execute 
at privilege 
level 3, the level of least privilege. 
As such, Virtual 
8086 Mode programs 
are subject to all of the protec- 
tion checks 
defined 
in Protected 
Mode. (This is dif- 
ferent 
from 
Real Mode which 
implicitly 
is executing 
at privilege 
level 0, the level of greatest 
privilege.) 
Thus, an attempt 
to execute 
a privileged 
instruction 
when 
in Virtual 
8086 Mode will cause an exception 
13 fault. 


The following 
are privileged 
instructions, 
which 
may 
be executed 
only at Privilege 
Level O. Therefore, 
at- 
tempting 
to 
execute 
these 
instructions 
in Virtual 
8086 Mode (or anytime 
CPL > 0) causes 
an excep- 
tion 13 fault: 


LIDT; 
LGOT; 
MOV ORn,reg; 
MOV TRn, reg; 
MOV reg,ORn; 
MOV reg, 
TRn; 


LMSW; 
CLTS; 
HLT; 


Several 
instructions, 
particularly 
those 
applying 
to 
the 
multitasking 
model 
and 
protection 
model, 
are 
available 
only 
in 
Protected 
Mode. 
Therefore, 
at- 


tempting 
to 
execute 
the 
following 
instructions 
in 
Real Mode 
or in Virtual 
8086 
Mode 
generates 
an 
exception 
6 fault: 


LTR; 
LLOT; 
LAR; 
LSL; 
ARPL. 


STR; 
SLOT; 
VERR; 
VERW; 


The instructions 
which are IOPL-sensitive 
in Protect- 
ed Mode are: 


IN; 
OUT; 
INS; 
OUTS; 
REP 
INS; 
REP OUTS; 


STI ; 
CLI 


In Virtual 
8086 
Mode, 
a slightly 
different 
set of in- 
structions 
are made 10PL-sensitive. 
The following 
in- 
structions 
are 10PL-sensitive 
in Virtual 8086 Mode: 


lNT 
n; 
STl; 
PUSHF; 
eLl; 
POPF; 
lRET 


The PUSHF, POPF, and IRET instructions 
are 10PL- 
sensitive 
in Virtual 
8086 
Mode 
only. This provision 
allows the IF flag (interrupt 
enable flag) to be virtual- 
ized to the Virtual 
8086 
Mode 
program. 
The INT n 
software 
interrupt 
instruction 
is also 
10PL-sensitive 
in Virtual 8086 Mode. Note, however, 
that the INT 3 
(opcode 
OCCH), INTO, and BOUND 
instructions 
are 
not 10PL-sensitive 
in Virtual 8086 mode (they aren't 
10PL sensitive 
in Protected 
Mode either). 


Note that the I/O instructions 
(IN, OUT, INS, OUTS, 


REP INS, and REP OUTS) are not 10PL-sensitive 
in 
Virtual 
8086 mode. 
Rather, 
the I/O 
instructions 
be- 
come automatically 
sensitive 
to the I/O Permission 
Bitmap 
contained 
in the 
Intel386 
OX Task 
State 
Segment. 
The I/O Permission 
Bitmap, automatically 
used 
by the 
Intel386 
DX in Virtual 
8086 
Mode, 
is 


illustrated 
by Figures 4.15a and 4-15b. 


The I/O 
Permission 
Bitmap 
can be viewed 
as a 0- 
64 Kbit bit string, which 
begins 
in memory 
at offset 
BiLMap_Offset 
in the 
current 
TSS. 
BiLMap_ 
Offset 
must be ::;; DFFFH 
so the entire bit map and 
the 
byte 
FFH which 
follows 
the bit map are all at 
offsets 
::;; FFFFH 
from 
the 
TSS 
base. 
The 
16-bit 
pointer 
BiLMap_Offset 
(15:0) is found in the word 
beginning 
at offset 
66H (102 decimal) 
from the TSS 
base, as shown 
in Figure 4-15a. 


Each bit in the I/O 
Permission 
Bitmap 
corresponds 
to a single byte-wide 
I/O port, as illustrated 
in Figure 
4-15a. 
If a bit is 0, I/O 
to the corresponding 
byte- 
wide 
port 
can occur 
without 
generating 
an excep- 


tion. Otherwise 
the I/O instruction 
causes an excep- 


tion 13 fault. Since every byte-wide 
I/O port must be 
protectable, 
all bits corresponding 
to a word-wide 
or 
dword-wide 
port 
must 
be 
0 for 
the 
word-wide 
or 
dword-wide 
I/O to be permitted. 
If all the referenced 
bits are 0, the I/O will be allowed. 
If any referenced 
bits are 1, the attempted 
I/O will cause an exception 
13 fault. 


Due to the use of a pointer 
to the base of the I/O 
Permission 
Bitmap, the bitmap 
may be located 
any- 
where within the TSS, or may be ignored completely 
by pointing 
the BiLMap_Offset 
(15:0) beyond 
the 
limit of the TSS segment. 
In the same manner, 
only 
a small portion 
of the 64K I/O space 
need have an 
associated 
map 
bit, by adjusting 
the 
TSS 
limit to 
truncate 
the bitmap. This eliminates 
the commitment 
of 8K of memory 
when 
a complete 
bitmap. is not 
required, 
while 
allowing 
the 
fully 
general 
case 
if 
desired. 


EXAMPLE 
OF 
BITMAP 
FOR 
I/O 
PORTS 
0-255: 


Setting 
the 
TSS 
limit to 
{biLMap_Offset 
+ 
31 
+ 1"1 
[** see note below) 
will allow a 32-byte 
bit- 
map for the 
I/O 
ports 
#0-255, 
plus 
a terminator 
byte of all1's 
[** see note below). 
This allows 
the 
I/O bitmap to control 
I/O Permission 
to I/O port 0- 
255 while causing 
an exception 
13 fault on attempt- 
ed I/O to any I/O port 80256 through 
65,565. 


**IMPORTANT 
IMPLEMENTATION 
NOTE: Beyond 
the last byte of I/O 
mapping 
information 
in the I/O 
Permission 
Bitmap must be a byte containing 
all 1'so 
The 
byte of all 1's must 
be within 
the 
limit of the 
Intel386 
DX TSS segment 
(see Figure 4-15a). 


In order 
to fully support 
the emulation 
of an 8086 
machine, 
interrupts 
in Virtual 
8086 
Mode 
are han- 
dled 
in a unique 
fashion. 
When 
running 
in Virtual 
Mode 
all interrupts 
and exceptions 
involve 
a privi- 
lege change 
back to the host Intel386 
DX operating 
system. 
The 
Intel386 
DX operating 
system 
deter- 
mines if the interrupt 
comes from a Protected 
Mode 
application 
or from a Virtual Mode program 
by exam- 
ining the VM bit in the EFLAGS 
image stored on the 
stack. 


When a Virtual Mode program 
is interrupted 
and ex- 
ecution 
passes to the interrupt 
routine at level 0, the 
VM bit is cleared. 
However, 
the VM bit is still set in 
the EFLAG 
image on the stack. 


The 
Intel386 
DX operating 
system 
in turn 
handles 
the exception 
or interrupt 
and then returns control 
to 
the 8086 
program. 
The 
Intel386 
DX operating 
sys- 


tem 
may choose 
to let the 8086 
operating 
system 
handle the interrupt 
or it may emulate the function 
of 
the interrupt 
handler. 
For example, 
many 8086 oper- 
ating system calls are accessed 
by PUSHing param- 
eters on the stack, and then executing 
an INT n in- 
struction. 
If the 10PL is set to 0 then alllNT 
n instruc- 
tions 
will be intercepted 
by the Intel386 
DX Micro- 
processor 
operating 
system. 
The Intel386 
DX oper- 
ating system 
could emulate 
the 8086 operating 
sys- 
tem's 
call. Figure 4-25 shows 
how the Intel386 
DX 
operating 
system 
could intercept 
an 8086 operating 
system's 
call to "Open 
a File". 


An Intel386 
DX operating 
system 
can provide 
a Vir- 


tual 8086 Environment 
which is totally transparent 
to 
the 
application 
software 
via intercepting 
and 
then 
emulating 
8086 operating 
system's 
calls, and inter- 


cepting 
IN and OUT instructions. 


4.6.6 
Entering and Leaving Virtual 
8086 Mode 


Virtual 8086 mode is entered by executing an IRET 
instruction (at CPL=0), or Task Switch (at any CPL) 
to an Intel386 OXtask whose Intel386 OXTSS has a 
F~GS 
image containing a 1 in the VM bit position 
while the processor is executing in Protected Mode. 
That is, one way to enter Virtual 8086 mode is to 
switch to a task with an Intel386 OX TSS that has a 
.1in the VM bit in the EFLAGS image. The other way 
IS to execute a 32-blt IRET instruction at privilege 
level 0, where the stack has a 1 in the VM bit in the 
EFLAGS image. POPF does not affect the VM bit 
even if the processor is in Protected Mode or level 0' 
and so cannot be used to enter Virtual 8086 Mode: 
PUSHF always pushes a 0 in the VM bit, even if the 
processor is in Virtual 8086 Mode, so that a program 
cannot tell if it is executing in REAL mode, or in Vir- 
tual 8086 mode. 


The VM bit can be set by executing an IRET instruc- 
tion only at privilege level 0, or by any instruction or 
Interrupt which causes a task switch in Protected 
Mode (with VM = 1 in the new FLAGS image), and 
c~n be cleared only by an interrupt or exception in 
Virtual 8086 Mode. IRET and POPF instructions exe- 
cuted in REAL mode or Virtual 8086 mode will not 
change the value in the VM bit. 


The transition out of virtual 8086 mode to Intel386 
OX protected mode occurs only on receipt of an in- 
terrupt or exception (such as due to a sensitive in- 
struction). In Virtual 8086 mode, all interrupts and 
exceptions vector through the protected mode lOT, 
and enter an interrupt handler in protected Intel386 
OX mode. That is, as part of interrupt processing 
the VM bit is cleared. 
' 


Because the matching IRET must occur from level 0 
if an Interrupt or Trap Gate is used to field an inter~ 
rupt or exception out of Virtual 8086 mode, the Gate 
must perform an inter-level interrupt only to level O. 
Interrupt or Trap Gates through conforming seg- 
ments, or through segments with OPL> 0, will raise a 
GP fault with the CS selector as the error code. 


4.6.6.1 
TASK 
SWITCHES 
TO/FROM 
VIRTUAL 
8086 MODE 


Tasks which can execute in virtual 8086 mode must 
be described by a TSS with the new Intel386 OX 
format (TYPE 9 or 11 descriptor). 


A task switch out of virtual 8086 mode will operate 
exactly the same as any other task switch out of a 
t~~k with an l~teI38~ OXTSS. All of the programmer 
vIsible state, Including the FLAGS register with the 
VM bit set to 1, is stored in the TSS. The segment 


registers in the TSS will contain 8086 segment base 
values rather than selectors. 


A task switch into a task described by an Intel386 
OXTSS will have an additional check to determine if 
the incoming task should be resumed in virtual 8086 
mode. Tasks described by 80286 format TSSs can- 
not be resumed in virtual 8086 mode, so no check is 
required there (the FLAGS image in 80286 format 
TSS has only the low order 16 FLAGS bits). Before 
loading the segment register images from an In- 
tel386 OXTSS, the FLAGS image is loaded, so that 
the segment registers are loaded from the TSS im- 
age as 8086 segment base values. The task is now 
ready to resume in virtual 8086 execution mode. 


4.6.6.2 TRANSITIONS 
THROUGH 
TRAP 
AND 
INTERRUPT 
GATES, 
AND IRET 


A task switch is one way to enter or exit virtual 8086 
mode. The other method is to exit through a Trap or 
Interrupt gate, as part of handling an interrupt, and 
to enter as part of executing an IRET instruction. 
The transition out must use an Intel386 OX Trap 
Gate (Type 14), or Intel386 OX Interrupt Gate (Type 
15), which must point to a non-conforming level 0 
segment (OPL= 0) in order to permit the trap han- 
dier to IRET back to the Virtual 8086 program. The 
Gate must point to a non-conforming level 0 seg- 
ment to perform a level switch to level 0 so.that the 
matching IRET can change the VM bit. Intel386 OX 
gates must be used, since 80286 gates save only 
the low 16 bits of the FLAGS register, so that the VM 
bit will not be saved on transitions through the 
80286 gates. Also, the 16-bit IRET (presumably) 
used to terminate the 80286 interrupt handler will 
pop only the lower 16 bits from FLAGS, and will not 
affect the VM bit. The action taken for an Intel386 
OXTrap or Interrupt gate if an interrupt occurs while 
the task is executing in virtual 8086 mode is given by 
the following sequence. 
(1) Save the FLAGS register in a temp to push later. 


Turn off the VM and TF bits, and if the interrupt is 
serviced by an Interrupt Gate, turn off IF also. 


(2) Interrupt and Trap gates must perform a level 
switch from 3 (where the VM86 program exe- 
cutes) to level 0 (so IRET can return). This pro- 
cess involves a stack switch to the stack given in 
the TSS for privilege level O. Save the Virtual 
8086 Mode SS and ESP registers to push in a 
later step. The segment register load of SS will 
b~ done as a Protected Mode segment load, 
since the VM bit was turned off above. 
(3) Push the 8086 segment register values onto the 
new stack, in the order: GS, FS, OS, ES. These 
are pushed as 32-bit quantities, with undefined 
values in the upper 16 bits. Then load these 4 
registers with null selectors (0). 


8086 
Application 
makes 
"Open 
File Call" 
--+ 
causes 


General 
Protection 
Fault 
(Arrow 
# 1) 
Virtual 
8086 
Monitor 
intercepts 
call. Calls 
Intel386™ 
OX as (Arrow 
# 2) 
Intel386™ 
OX as opens 
file returns 
control 
to 8086 as (Arrow 
#3) 
8086 as returns 
control 
to application. 
(Arrow 
#4) 
Transparent 
to Application 


(4) Push the 
old 8086 
stack 
pointer 
onto 
the 
new 
stack by pushing the SS register 
(as 32-bits, high 
bits undefined), 
then pushing the 32-bit ESP reg- 


ister saved above. 


(5) Push the 32-bit FLAGS 
register 
saved in step 1. 


(6) Push the 
old 8086 
instruction 
pointer 
onto 
the 


new stack by pushing the CS register (as 32-bits, 
high bits undefined), 
then pushing 
the 32-bit EIP 
register. 


(7) Load up the new CS:EIP value from the interrupt 
gate, and begin execution 
of the interrupt 
routine 


in protected 
Intel386 
OX mode. 


The transition 
out of virtual 
8086 
mode 
performs 
a 


level change 
and stack switch, 
in addition 
to chang- 


ing back 
to protected 
mode. 
In addition, 
all of the 
8086 
segment 
register 
images 
are 
stored 
on the 


stack 
(behind 
the SS:ESP 
image), 
and then loaded 
with null (0) selectors 
before 
entering 
the interrupt 


handler. 
This will permit 
the handler 
to safely 
save 
and 
restore 
the 
OS, ES, FS, and 
GS registers 
as 
80286 
selectors. 
This 
is needed 
so that 
interrupt 
handlers 
which 
don't 
care 
about 
the 
mode 
of the 


interrupted 
program 
can use the same 
prolog 
and 


epilog code for state saving (i.e. push all registers 
in 
prolog, pop all in epilog) regardless 
of whether 
or not 


a "native" 
mode or Virtual 8086 mode program 
was 


interrupted. 
Restoring 
null selectors 
to these 
regis- 
ters before executing 
the IRET will not cause a trap 


in the interrupt 
handler. 
Interrupt 
routines 
which 
ex- 


pect values 
in the segment 
registers, 
or return val- 
ues in segment 
registers 
will have to obtain/return 


values 
from the 8086 
register 
images 
pushed 
onto 


the new stack. They will need to know the mode of 
the interrupted 
program 
in order 
to know where 
to 


find/return 
segment 
registers, 
and also to know how 


to interpret 
segment 
register 
values. 


The IRET instruction 
will perform 
the inverse 
of the 


above 
sequence. 
Only the extended 
Intel386 
OXs 


IRET 
instruction 
(operand 
size = 32) can 
be used, 


and must be executed 
at level a to change 
the VM 


bit to 1. 


(1) If the NT bit in the FLAGs register 
is on, an inter- 


task 
return 
is performed. 
The 
current 
state 
is 


stored in the current TSS, and the link field in the 
current 
TSS is used 
to locate 
the TSS for the 


interrupted 
task which 
is to be resumed. 


Otherwise, 
continue 
with the following 
sequence. 


(2) Read the FLAGS image from SS:8[ESP] 
into the 


FLAGS register. 
This will set VM to the value ac- 


tive in the interrupted 
routine. 


(3) Pop 
off 
the 
instruction 
pointer 
CS:EIP. 
EIP is 


popped 
first, then a 32-bit word is popped 
which 


contains 
the 
CS value 
in the 
lower 
16 bits. 
If 


VM = 0, this 
CS 
load 
is done 
as 
a protected 


mode segment 
load. If VM = 1, this will be done 


as an 8086 segment 
load. 


(4) Increment 
the ESP register 
by 4 to bypass 
the 


FLAGS 
image which was "popped" 
in step 1. 


(5) If VM = 1, load 
segment 
registers 
ES, OS, FS, 


and 
GS from 
memory 
locations 
SS:[ESP+8], 


SS: [ESP + 12], 
SS: [ESP + 16], 
and 


SS:[ESP+20], 
respectively, 
where 
the new val- 


• 


ue of ESP stored in step 4 is used. Since VM= 1, 
these are done as 8086 segment register loads. 
Else if VM =0, check that the selectors in ES, 
OS, FS, and GS are valid in the interrupted rou- 
tine. Null out invalid selectors to trap if an at- 
tempt is made to access through them. 
(6) If (RPL(CS) > 
CPL), pop the stack pointer 
SS:ESP from the stack. The ESP register is 
popped first, followed by 32-bits containing 55 in 
the lower 16 bits. If VM =0, 55 is loaded as a 
protected mode segment register load. If VM= 1, 
an 8086 segment register load is used. 
(7) Resume execution of the interrupted routine. The 
VM bit in the FLAGS register (restored from the 
interrupt routine's stack image in step 1) deter- 
mines whether the processor resumes the inter- 
rupted routine in Protected mode of Virtual 8086 
mode. 


The Intel386 OX features a straightforward function- 
al interface to the external hardware. The Intel386 
OX has separate, parallel buses for data and ad- 
dress. The data bus is 32-bits in width, and bidirec- 
tional. The address bus outputs 32-bit address val- 
ues in the most directly usable form for the high- 
speed local bus: 4 individual byte enable signals, 
and the 30 upper-order bits as a binary value. The 
data and address buses are interpreted and con- 
trolled with their associated control signals. 


A dynamic data bus sizing feature allows the proc- 
essor to handle a mix of 32- and 16-bit external bus- 
es on a cycle-by-cycle basis (see 5.3.4 Data Bus 
Sizing). If 16-bit bus size is selected, the Intel386 
OX automatically makes any adjustment needed, 
even performing another 16-bit bus cycle to com- 
plete the transfer if that is necessary. 8-bit peripheral 
devices may be connected to 32-bit or 16-bit buses 
with no loss of performance. A new address pipe- 
lining option is provided and applies to 32-bit and 
16·bit buses for substantially improved memory utili- 
zation, especially for the most heavily used memory 
resources. 


The address plpellnlng option, when selected, typ- 
ically allows a given memory interface to operate 
with one less wait state than would otherwise be 
required (see 5.4.2 Address Plpellnlng). The pipe- 
lined bus is also well suited to interleaved memory 
designs. When address pipelining is requested by 
the external hardware, the Intel386 OX will output 
the address and bus cycle definition of the next bus 
cycle (if it is internally available) even while waiting 
for the current cycle to be acknowledged. 


Non-pipelined address timing, however, is ideal for 
external cache designs, since the cache memory will 
typically be fast enough to allow non-pipelined cy- 
cles. For maximum design flexibility, the address 
pipelining option is selectable on a cycle-by-cycle 
basis. 


The processor's bus cycle is the basic mechanism 
for information transfer, either from system to proc- 
essor, or from processor to system. Intel386 OX bus 
cycles perform data transfer in a minimum of only 
two clock periods. On a 32-bit data bus, the maxi- 
mum Intel386 OX transfer bandwidth at 20 MHz is 
therefore 40 MBytes/sec, at 25 MHz bandwidth, is 
50 Mbytes/sec, 
and at 33 
MHz bandwidth, 
is 
66 Mbytes/sec. Any bus cycle will be extended for 
more than two clock periods, however, if external 
hardware withholds acknowledgement of the cycle. 
At the appropriate time, acknowledgement is sig- 
nalled by asserting the Intel386 OX READY# input. 


The Intel386 OX can relinquish control of its local 
buses to allow mastership by other devices, such as 
direct memory access channels. When relinquished, 
HLOA is the only output pin driven by the Intel386 
OX providing near-complete isolation of the proces- 
sor from its system. The near-complete isolation 
characteristic is ideal when driving the system from 
test equipment, and in fault-tolerant applications. 


Functional data covered in this chapter describes 
the processor's hardware interface. First, the set of 
signals available at the processor pins is described 
(see 5.2 Signal Description). Following that are the 
signal waveforms occurring during bus cycles (see 
5.3 Bus Transfer Mechanism, 5.4 Bus Functional 
Description 
and 5.5 Other 
Functional 
Descrip- 
tions). 


Ahead is a brief description of the Intel386 OX input 
and output signals arranged by functional groups. 
Note the # symbol at the end of a signal name indi- 
cates the active, or asserted, state occurs when the 
signal is at a low voltage. When no # is present after 
the signal name, the signal is asserted when at the 
high voltage level. 


Example signal: M/lO# - 
High voltage indicates 
Memory selected 
- 
Low 
voltage 
indicates 
I/O selected 


CLK2 
• 
ADDRESS 
BUS 
11[3. 
. 


A 
• 


BU· 


1 
DA.TA. BUS 
BEt_ 
, 
lEO- 


ADS· 
W/R. 


NA. 
Intel3811W 
DX 
O/C. 
ISII- 
W'croproceaur 
w/lO. 


READY. 
LOCK- 


NOLO 
PEREQ 


HLDA 
BUSY· 


ERROR- 


INTI • 
Vcc 
_ NWI 


RESET 
ONO 


intelQP 


2X 
CLOCK{ 


32-IlIT{ 
00-03 
DATA 


BUS[ 
CONTROl 


BUS{ 
ARBITRATION 


INTERRUPTS 
{ 


A2-A31 1 


32-BIT 


) 


BYTE 
ADDRESS 
[NABlES 


) BUS CYCLE 
OEnNITION 


} CDPRCCESsoa 
SIGNALLING 


) 
POWER 
CONNECTIONS 


PROCESSOR 
CLOCK 


PERIOD 


ClK2 
PERIOD 
CLK2 PERIOD 
t 
1 
f 2 


PROCESsoa 
CLOCK 
PERIOD 


CLK2 PERIOD 
CLK2 PERIOD 
f 
1 
f 2 


INTERNAL 
Int.1386T 
•• DX [ 


WICROPROCESSOR 
CLOCK 
(HALF 
THE fREQUENCY 
or 
CLK2) 
15 n. WIN} 33 "Hz 
(33 
WH, 
WAX) 
13a1N 
OX CPU 


40 n. WIN}25 
.,Hz 
I 
(25 WHz WAX) 
1381rw 
ox CPO 


50 n••• '"}20 "Hz 
(20.,Hz 
WAX) 
13asN 
ox CPU 


The signal descriptions sometimes refer to AC tim- 
ing parameters, such as "t25 Reset Setup Time" and 
"t26 Reset Hold Time." The values of these parame- 
ters can be found in Tables 7-4 and 7-5. 


CLK2 provides the fundamental timing for the In- 
tel386 OX. It is divided by two internally to generate 
the internal processor clock used for instruction exe- 
cution. The internal clock is comprised of two phas- 
es, "phase one" and "phase two." Each CLK2 peri- 
od is a phase of the internal clock. Figure 5-2 illus- 
trates the relationship. If desired, the phase of the 
internal processor clock can be synchronized to a 
known phase by ensuring the RESET signal falling 
edge meets its applicable setup and hold times, t25 
and t26' 


These three-state bidirectional signals provide the 
general purpose data path between the Intel386 OX 


and other devices. Data bus inputs and outputs indi- 
cate "1" when HIGH. The data bus can transfer data 
on 32- and 16-bit buses using a data bus sizing fea- 
ture controlled by the 8S16# 
input. See section 
5.2.6 Bus Contol. 
Data bus reads require that read 
data setup and hold times t21 and t22 be met for 
correct operation. In addition, the Intel386 OX re- 
quires that all data bus pins be at a valid logic state 
(high or low) at the end of each read cycle, when 
READY# is asserted. During any write operation 
(and during halt cycles and shutdown cycles), the 
Intel386 OX always drives all 32 signals of the data 
bus even if the current bus size is 16-bits. 


5.2.4 
Address Bus (BEO# through 
BE3#, 
A2 through A31) 


These three-state outputs provide physical memory 
addresses or I/O port addresses. The address bus 
is capable of addressing 4 gigabytes of physical 
memory space (OOOOOOOOH 
through FFFFFFFFH), 
and 64 kilobytes of I/O address space (OOOOOOOOH 
through 
OOOOFFFFH)for 
programmed 
I/O. 
I/O 


transfers 
automatically 
generated 
for Intel386 
DX-to- 
coprocessor 
communication 
use 
1/0 
addresses 
800000F8H 
through 
800000FFH, 
so A31 
HIGH 
in 
conjunction 
with M/IO# 
LOW allows simple genera- 
tion of the coprocessor 
select 
signal. 


The Byte Enable outputs, 
BEO# -BE3#, 
directly 
in- 
dicate 
which 
bytes 
of the 
32-bit 
data 
bus are 
in- 
volved 
with the current transfer. 
This is most conve- 
nient for external 
hardware. 


BEO# 
applies 
to DO-D7 
BE1 # applies 
to D8-D15 
BE2# 
applies 
to D16-D23 
BE3# 
applies to D24-D31 


The number 
of Byte Enables 
asserted 
indicates 
the 
physical 
size of the operand 
being transferred 
(1, 2, 
3, or 4 bytes). Refer to section 
5.3.6 Operand 
Align- 
ment. 


5.2.5 
Bus Cycle Definition Signals 
(W/R#, 
D/C#, 
MIIO#, LOCK#) 


These three-state 
outputs 
define the type of bus cy- 
cle being performed. 
W IR # distinguishes 
between 
write and read cycles. 
D/C# 
distinguishes 
between 
data 
and 
control 
cycles. 
M/IO# 
distinguishes 
be- 
tween 
memory 
and 
I/O 
cycles. 
LOCK# 
distin- 
guishes 
between 
locked 
and unlocked 
bus cycles. 


The primary 
bus cycle definition 
signals 
are W IR # , 


D/C# 
and M/IO#, 
since these are the signals driv- 


en valid 
as the 
ADS # 
(Address 
Status 
output) 
is 
driven 
asserted. 
The 
LOCK # 
is driven 
valid at the 
same 
time 
as the 
first 
locked 
bus 
cycle 
begins, 
which due to address 
pipelining, 
could be later than 
ADS# 
is driven asserted. 
See 5.4.3.4 Pipelined 
Ad· 
dress. 
The LOCK # is negated 
when the READY # 


input 
terminates 
the 
last 
bus 
cycle 
which 
was 
locked. 


When 
a memory 
write cycle or I/O write cycle 
is in 
progress, 
and the operand 
being transferred 
occu- 
pies only 
the upper 
16 bits of the data bus (D16- 
D31), duplicate 
data is simultaneously 
presented 
on 
the 
corresponding 
lower 
16-bits 
of 
the 
data 
bus 
(DO-D15). 
This duplication 
is performed 
for optimum 
write 
performance 
on 16-bit 
buses. 
The 
pattern 
of 
write 
data duplication 
is a function 
of the Byte En- 
ables asserted 
during the write cycle. Table 5-1 lists 
the write data present 
on DO-D31, 
as a function 
of 
the asserted 
Byte Enable outputs 
BEO # -BE3 #. 


Table 
5·1. Write 
Oata Ouplication 
as a Function 
of BEO# -BE3# 


Exact bus cycle definitions, 
as a function 
of WI R # , 


D/C#, 
and M/IO#, 
are given in Table 5-2. Note one 
combination 
of W/R#, 
D/C# 
and M/lO# 
is never 
given when ADS# 
is asserted 
(however, 
that combi- 
nation, which 
is listed as "does 
not occur," 
may oc- 


cur during idle bus states when ADS# 
is not assert- 


ed). If M/lO#, 
D/C#, 
and W/R# 
are qualified 
by 
ADS# 
asserted, 
then 
a decoding 
scheme 
may be 
simplified 
by using this definition 
of the 
"does 
not 


occur" 
combination. 


Intel386™ 
OX Byte Enables 
. 
Intel386™ 
OX Write 
Oata 
Automatic 


BE3# 
BE2# 
BEH 
BEO# 
024-031 
016-023 
08-015 
00-07 
Ouplication? 


High 
High 
High 
Low 
undef 
undef 
undef 
A 
No 
High 
High 
Low 
High 
undef 
undef 
B 
undef 
No 
High 
Low 
High 
High 
undef 
C 
undef 
C 
Yes 
Low 
High 
High 
High 
D 
undef 
D 
undef 
Yes 


High 
High 
Low 
Low 
undef 
undef 
B 
A 
No 
High 
Low 
Low 
High 
undef 
C 
B 
undef 
No 
Low 
Low 
High 
High 
D 
C 
D 
C 
Yes 


High 
Low 
Low 
Low 
undef 
C 
B 
A 
No 
Low 
Low 
Low 
High 
D 
C 
B 
undef 
No 


Low 
Low 
Low 
Low 
D 
C 
B 
A 
No 


Key: 


D = logical write data d24-d31 
C = logical write data d16-d23 
B = logical write data d8-d15 
A = logical write data dO-d7 
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M/IO# 
D/C# 
W/R# 
Bus Cycle 
Type 
Locked? 


Low 
Low 
Low 
INTERRUPT 
ACKNOWLEDGE 
Yes 


Low 
Low 
High 
does not occur 


Low 
High 
Low 
1/0 DATA READ 
No 


Low 
High 
High 
110 DATA WRITE 
No 


High 
Low 
Low 
MEMORY 
CODE READ 
No 


High 
Low 
High 
HALT: 
SHUTDOWN: 
No 
Address = 2 
Address = 0 


(BEO# 
High 
(BEO# 
Low 
BE1 # 
High 
BE1 # 
High 
BE2# 
Low 
BE2# 
High 
BE3# 
High 
BE3# 
High 
A2-A31 
Low) 
A2 
A31 Low) 


High 
High 
Low 
MEMORY 
DATA READ 
Some Cycles 


High 
High 
High 
MEMORY 
DATA WRITE 
Some Cycles 


5.2.6 Bus Control 
Signals (ADS # , 
READY#, 
NA#, BS16#) 


The following 
signals allow the processor 
to indicate 
when a bus cycle has begun, and allow other system 
h~rdware 
to 
control 
address 
pipelining, 
data 
bus 
width and bus cycle termination. 


5.2.6.2 
ADDRESS 
STATUS 
(ADS #) 


This three-state 
output 
indicates 
that a valid bus cy- 
cle definition, 
and address 
(W/R#, 
D/C#, 
M/IO#, 
BEO#-BE3#, 
and A2-A31) 
is being 
driven 
at the 
Intel386 
DX pins. It is asserted 
during 
T1 and T2P 
bus states (see 5.4.3.2 Non-plpellned 
Address 
and 
5.4.3.4 Plpellned 
Address 
for additional 
information 
on bus states). 


5.2.6.3 
TRANSFER 
ACKNOWLEDGE 
(READY #) 


This 
input 
indicates 
the 
current 
bus cycle 
is com- 
plete, 
and 
the 
active 
bytes 
indicated 
by 
BEO#- 
BE3# 
and B516# 
are accepted 
or provided. 
When 
READY # is sampled 
asserted 
during a read cycle or 
interrupt 
acknowledge 
cycle, the Intel386 DX latches 
the 
input 
data 
and 
terminates 
the 
cycle. 
When 
READY # is sampled 
asserted 
during a write cycle, 


the processor 
terminates 
the bus cycle. 


READY # is ignored 
on the first bus state of all bus 
cycles, 
and sampled 
each bus state thereafter 
until 
asserted. 
READY # must eventually 
be asserted 
to 
~cknowledge 
every bus cycle, including 
Halt Indica- 
tion and Shutdown 
Indication 
bus cycles. 
When be- 
ing sampled, 
READY 
must always 
meet 
setup 
and 


hold times t19 and t20 for correct 
operation. 
5ee all 


sections 
of 5.4 Bus Functional 
Description. 


5.2.6.4 
NEXT ADDRESS 
REQUEST 
(NA#) 


!hi~ 
is used to request 
address 
pipelining. 
This input 


Indicates 
the system 
is prepared 
to accept 
new val- 


ues of BEO#-BE3#, 
A2-A31, 
W/R#, 
D/C# 
and 
M/lO# 
from the Intel386 
DX even if the end of the 
current 
cycle 
is 
not 
being 
acknowledged 
on 
READY #. 
If this 
input 
is asserted 
when 
sampled, 


the next address is driven onto the bus, provided 
the 
next bus request 
is already 
pending 
internally. 
See 
5.4.2 
Address 
Pipelining 
and 
5.4.3 
Read 
and 
Write 
Cycles. 
NA# 
must 
always 
meet 
setup 
and 
hold times, t15 and t16, for correct 
operation. 


5.2.6.5 
BUS SIZE 
16 (BS16#) 


The BS16# 
feature 
allows the Intel386 
DX to direct- 


ly connect 
to 32-bit and 16-bit data buses. Asserting 
this 
input 
constrains 
the 
current 
bus cycle 
to use 
only the lower-order 
half (DO-D15) 
of the data bus 
corresponding 
to 
BEO# 
and 
BE1 #. 
Asserting 
B516# 
has no additional 
effect 
if only BEO# and/or 


BE~ # are asserted 
in the current 
cycle. 
However, 


dUring bus cycles 
asserting 
BE2# 
or BE3#, 
assert- 


ing B516# 
will automatically 
cause the Intel386 
DX 


to make adjustments 
for correct 
transfer 
of the up- 


per bytes(s) 
using 
only 
physical 
data 
signals 
DO- 
D15. 


If the operand 
spans 
both 
halves 
of the 
data 
bus 
and BS16# 
is asserted, 
the Intel386 
DX will auto- 


matically 
perform 
another 
16-bit bus cycle. 
B516# 
must always 
meet setup and hold times t17 and t18 
for correct 
operation. 


Intel386 OX I/O cycles are automatically generated 
for coprocessor communication. Since the Intel386 
OX must transfer 32-bit quantities between itself and 
the Intel387 OX, BS16# must not be asserted dur- 
ing Intel387 OX communication cycles. 


5.2.7 Bus Arbitration Signals 
(HOLD, HLDA) 


This section describes the mechanism by which the 
processor relinquishes control of its local buses 
when requested by another bus master device. See 
5.5.1 Entering and Exiting Hold Acknowledge 
for 
additional information. 


This input indicates some device other than the In- 
tel386 OX requires bus mastership. 


HOLD must remain asserted as long as any other 
device is a local bus master. HOLD is not recognized 
while RESET is asserted. If RESET is asserted while 
HOLD is asserted, RESET has priority and places 
the bus into an idle state, rather than the hold ac- 
knowledge (high impedance) state. 


HOLD is level-sensitive and is a synchronous input. 
HOLD signals must always meet setup and hold 
times t23 and t24 for correct operation. 


5.2.7.3 BUS HOLD ACKNOWLEDGE (HLDA) 


Assertion of this output indicates the Intel386 OX 
has relinquished control of its local bus in response 
to HOLD asserted, and is in the bus Hold Acknowl- 
edge state. 


The Hold Acknowledge state offers near-complete 
signal isolation. In the Hold Acknowledge state, 
HLOA is the only signal being driven by the Intel386 
OX. The other output signals or bidirectional signals 
(00-031, 
BEO#-BE3#, 
A2-A31, 
W/R#, 
O/C#, 
M/IO#, 
LOCK# and AOS#) are in a high-imped- 
ance state so the requesting bus master may control 
them. Pullup resistors may be desired on several sig- 
nals to avoid spurious activity when no bus master is 
driving them. See 7.2.3 Resistor 
Recommenda- 
tions. Also, one rising edge occuring on the NMI 
input during Hold Acknowledge is remembered, for 
processing after the HOLD input is negated. 


In addition to the normal usage of Hold Acknowl- 
edge with OMA controllers or master peripherals, 


the near-complete isolation has particular attractive- 
ness during system test when test equipment drives 
the system, and in hardware-fault-tolerant applica- 
tions. 


5.2.8 Coprocessor Interface Signals 
(PEREQ, BUSY #, ERROR #) 


In the following sections are descriptions of signals 
dedicated to the numeric coprocessor interface. In 
addition to the data bus, address bus, and bus cycle 
definition signals, these following signals control 
communication between the Intel386 OX and its In- 
tel387 OX processor extension. 


When asserted, this input signal indicates a coproc- 
essor request for a data operand to be transferred 
to/from memory by the Intel386 OX. In response, 
the Intel386 OX transfers information between the 
coprocessor and memory. Because the Intel386 OX 
has internally stored the coprocessor opcode being 
executed, it performs .the requested data transfer 
with the correct direction and memory address. 


PEREQ is level-sensitive and is allowed to be asyn- 
chronous to the CLK2 signal. 


When asserted, this input indicates the coprocessor 
is still executing an instruction, and is not yet able to 
accept another. When the Intel386 OX encounters 
any coprocessor instruction which operates on the 
numeric stack (e.g. load, pop, or arithmetic opera- 
tion), or the WAIT instruction, this input is first auto- 
matically sampled until it is seen to be negated. ThiS 
sampling of the BUSY# input prevents overrunning 
the execution of a previous coprocessor instruction. 


The FNINIT and FNCLEX coprocessor instructions 
are allowed to execute even if BUSY# is asserted, 
since these instructions are used for coprocessor 
initialization and exception-clearing. 


BUSY# is level-sensitive and is allowed to be asyn- 
chronous to the CLK2 signal. 


BUSY# serves an additional function. If BUSY# is 
sampled LOW at the falling edge of RESET, the In- 
tel386 OX performs an internal self-test (see 5.5.3 
Bus Activity 
During 
and 
Following 
Reset). 
If 
BUSY# is sampled HIGH, no self-test is performed. 


5.2.8.4 COPROCESSOR ERROR (ERROR#) 


This input signal indicates that the previous coproc- 
essor instruction generated a coprocessor error of a 
type not masked by the coprocessor's control regis- 
ter. This input is automatically sampled by the In- 
tel386 OX when a coprocessor instruction is en- 
countered, and if asserted, the Intel386 OX gener- 
ates exception 16 to access the error-handling soft- 
ware. 


Several coprocessor instructions, generally those 
which clear the numeric error flags in the coproces- 
sor or save coprocessor state, do execute without 
the Intel386 OX generating exception 16 even if ER- 
ROR# is asserted. These instructions are FNINIT, 
FNCLEX, FSTSW, FSTSWAX, FSTCW, FSTENV, 
FSAVE, FESTENV and FESAVE. 


ERROR# 
is level-sensitive and is allowed to be 
asynchronous to the CLK2 signal. 


5.2.9 Interrupt Signals (INTR, NMI, 
RESET) 


5.2.9.1 INTRODUCTION 


The following descriptions cover inputs that can in- 
terrupt or suspend execution of the processor's cur- 
rent instruction stream. 


5.2.9.2 MASKABLE INTERRUPT REQUEST(INTR) 


When asserted, this input indicates a request for in- 
terrupt service, which can be masked by the Intel386 
OX Flag Register IF bit. When the Intel386 OX re- 
sponds to the INTR input, it performs two interrupt 
acknowledge bus cycles, and at the end of the sec- 
ond, latches an 8-bit interrupt vector on 00-07 
to 
identify the source of the interrupt. 


INTR is level-sensitive and is allowed to be asyn- 
chronous to the CLK2 signal. To assure recognition 
of an INTR request, INTR should remain asserted 
until the first interrupt acknowledge bus cycle be- 
gins. 


5.2.9.3 NON-MASKABLE INTERRUPT REQUEST 
(NMI) 


This input indicates a request for interrupt service, 
which cannot be masked by software. The non- 


maskable interrupt request is always processed ac- 
cording to the pointer or gate in slot 2 of the interrupt 
table. Because of the fixed NMI slot assignment, no 
interrupt acknowledge cycles are perfomed when 
processing NMI. 


NMI is rising edge-sensitive and is allowed to be 
asynchronous to the CLK2 signal. To assure recog- 
nition of NMI, it must be negated for at least eight 
CLK2 periods, and then be asserted for at least 
eight CLK2 periods. 


Once NMI processing has begun, no additional 
NMl's are processed until after the next IRET in- 
struction, which is typically the end of the NMI serv- 
ice routine. If NMI is re-asserted prior to that time, 
however, one rising edge on NMI will be remem- 
bered for processing after executing the next IRET 
instruction. 


5.2.9.4 RESET (RESET) 


This input signal suspends any operation in progress 
and places the Intel386 OX in a known reset state. 
The Intel386 OX is reset by asserting RESET for 15 
or more CLK2 periods (80 or more CLK2 periods 
before requesting self test). When RESET is assert- 
ed, all other input pins are ignored, and all other bus 
pins are driven to an idle bus state as shown in Ta- 
ble 5-3. If RESET and HOLD are both asserted at a 
point in time, RESET takes priority even if the In- 
tel386 OX was in a Hold Acknowledge state prior to 
RESET asserted. 


RESET is level-sensitive and must be synchronous 
to the CLK2 signal. If desired, the phase of the inter- 
nal processor clock, and the entire Intel386 OXstate 
can be completely synchronized to external circuitry 
by ensuring the RESET signal falling edge meets its 
applicable setup and hold times, t25 and t26. 


Table 5-3. Pin State (Bus Idle) During Reset 
Pin Name 
Signal Level During Reset 
ADS# 
High 
DO-D31 
HighImpedance 
BEO#-BE3# 
Low 
A2-A31 
High 
W/R# 
Low 
D/C# 
High 
M/IO# 
Low 
LOCK# 
High 
HLDA 
Low 


5.2.10 Signal Summary 


Table 5-4 summarizes the characteristics of all Intel386 OX signals. 


Table 5·4. Intel386TM OX Signal Summary 


Input 
Output 
Signal Name 
Signal Function 
Active 
Input! 
Synch or 
High Impedance 
State 
Output 
Asynch 
toCLK2 
During HLDA? 


CLK2 
Clock 
- 
I 
- 
- 


00-031 
Data Bus 
High 
I/O 
S 
Yes 


BEO#-BE3# 
Byte Enables 
Low 
0 
- 
Yes 


A2-A31 
Address Bus 
High 
0 
- 
Yes 


W/R# 
Write-Read Indication 
High 
0 
- 
Yes 


D/C# 
Data-Control Indication 
High 
0 
- 
Yes 


M/IO# 
Memory-I/O Indication 
High 
0 
- 
Yes 


LOCK# 
Bus Lock Indication 
Low 
0 
- 
Yes 


ADS# 
Address Status 
Low 
0 
- 
Yes 


NA# 
Next Address Request 
Low 
I 
S 
- 


BS16# 
Bus Size 16 
Low 
I 
S 
- 


READY# 
Transfer Acknowledge 
Low 
I 
S 
- 


HOLD 
Bus Hold Request 
High 
I 
S 
- 


HLDA 
Bus Hold Acknowledge 
High 
0 
- 
No 


PEREO 
Coprocessor Request 
High 
I 
A 
- 


BUSY# 
Coprocessor Busy 
Low 
I 
A 
- 


ERROR# 
Coprocessor Error 
Low 
I 
A 
- 


INTR 
Maskable Interrupt Request 
High 
I 
A 
- 


NMI 
Non-Maskable Intrpt Request 
High 
I 
A 
- 


RESET 
Reset 
High 
I 
S 
- 


All data transfers occur as a result of one or more 
bus cycles. Logical data operands of byte, word and 
double-word lengths may be transferred without re- 
strictions on physical address alignment. Any byte 
boundary may be used, although two or even three 
physical bus cycles are performed as required for 
unaligned operand transfers. See 5.3.4 Dynamic 
Data Bus Sizing and 5.3.6 Operand Alignment. 


The Intel386 OX address signals are designed to 
simplify external system hardware. Higher-order ad- 
dress bits are provided by A2-A31. Lower-order ad- 
dress in the form of BEO#-BE3# 
directly provides 
linear selects for the four bytes of the 32-bit data 
bus. Physical operand size information is thereby im- 
plicitly provided each bus cycle in the most usable 
form. 


Byte Enable outputs BEO#-BE3# 
are asserted 
when their associated data bus bytes are involved 
with the present bus cycle, as listed in Table 5-5. 
During a bus cycle, any possible pattern of contigu- 
ous, asserted Byte Enable outputs can occur, but 
never patterns having a negated Byte Enable sepa- 
rating two or three asserted Enables. 


Address 
bits AO and A 1 of the physical 
operand's 
base 
address 
can be created 
when 
necessary 
(for 


instance, 
for MUL TIBUS I or MUL TIBUS II interface), 


as a function 
of the lowest-order 
asserted 
Byte En- 
able. This is shown 
by Table 
5-6. Logic to generate 
AO and A 1 is given by Figure 5-3. 


Table 
5-5. Byte 
Enables 
and Associated 
Data and Operand 
Bytes 


Byte 
Enable 
Signal 
Associated 
Data Bus Signals 


BEOil' 
00-07 
(byte Q-Ieast 
significant) 


BE1# 
08-015 
(byte 1) 


BE2# 
016-023 
(byte 2) 


BE3i1' 
024-031 
(byte 3-most 
significant) 


L 
H 


L 
x 
H 
L 
L 
L 
Ii 
L 
x 
L 
H 
L 
L 
X 
L 
H 


x 
x 
H 
x 
L 


L 
H 
L 


L 
H 


L 
x 
L 
H 
L 
L 
L 
x 
L 
H 
H 
L 
L 
x 
H 
H 


x 
x 
H 
x 
L 


L 
H 
L 


Table 
5-6. Generating 
AO-A31 
from 
BEO#-BE3# 
and A2-A31 


Intel386TM 
OX Address 
Signals 


A31 
......... 
A2 
BE3i1' 
BE2# 
BE 1# 
BEDiI' 


Physical 
Base 


Address 


A31 
......... 
A2 
A1 
AO 


A31 
......... 
A2 
0 
0 
X 
X 
X 
Low 


A31 
......... 
A2 
0 
1 
X 
X 
Low 
High 


A31 
......... 
A2 
1 
0 
X 
Low 
High 
High 


A31 
. .. .... . . A2 
1 
1 
Low 
High 
High 
High 


BEO# 
~ 
BE3#~ 


BEO# 


BE2# 


Each 
bus cycle 
is composed 
of at least 
two 
bus 


states. 
Each bus state requires 
one processor 
clock 


period. 
Additional 
bus states 
added 
to a single bus 


cycle are called wait states. See 5.4 Bus Functional 
Description. 


Since 
a bus cycle 
requires 
a minimum 
of two 
bus 


states 
(equal to two processor 
clock 
periods), 
data 


can 
be transferred 
between 
external 
devices 
and 


the 
Intel386 
OX at a maximum 
rate of one 4-byte 
Oword every two processor 
clock periods, for a max- 
imum 
bus bandwidth 
of 66 megabytes/second 
(In- 
tel386 
OX operating 
at 33 
MHz 
processor 
clock 


rate). 


Bus cycles 
may access 
physical 
memory 
space 
or 


I/O space. Peripheral 
devices 
in the system 
may ei- 


ther 
be memory-mapped, 
or I/O-mapped, 
or both. 


As shown in Figure 5-4, physical 
memory 
addresses 
range from OOOOOOOOHto FFFFFFFFH 
(4 gigabytes) 


and I/O addresses 
from OOOOOOOOHto OOOOFFFFH 
(64 kilobytes) 
for programmed 
I/O. Note the I/O ad- 


dresses 
used 
by the automatic 
I/O 
cycles 
for co- 


processor 
communication 
are 
800000F8H 
to 


800000FFH, 
beyond 
the 
address 
range 
of 
pro- 


grammed 
I/O, to allow easy generation 
of a coproc- 


essor 
chip select 
signal 
using the A31 and M/IO# 


signals. 
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NOTE: 
Since A31 is HIGH during automatic communication with coprocessor, A31 HIGH and M/IO# 
LOW can be used to 
easily generate a coprocessor select signal. 


5.3.3 
Memory and 1/0 Organization 


The Intel386 OX datapath to memory and I/O 
spaces can be 32 bits wide or 16 bits wide. When 
32-bits wide, memory and I/O spaces are organized 
naturally as arrays of physical 32-bit Owords. Each 
memory or I/O Oword has four individually address- 
able by1esat consecutive by1eaddresses. The low- 
est-addressed by1eis associated with data signals 
00-07; 
the highest-addressed by1ewith 024-031. 


The 
Intel386 OX includes a bus control 
input, 


B816#, that also allows direct connection to 16-bit 
memory or I/O spaces organized as a sequence of 
16-bit words. Cycles to 32-bit and 16-bit memory or 
I/O devices may occur in any sequence, since the 
B816# 
control is sampled during each bus cycle. 


8ee 5.3.4 Dynamic Data Bus Sizing. The By1eEn- 
able signals, BEO#-BE3#, 
allow by1e granularity 


when addressing any memory or I/O 
structure, 
whether 32 or 16 bits wide. 


5.3.4 
Dynamic Data Bus Sizing 


Oynamic data bus sizing is a feature allowing direct 
processor connection to 32-bit or 16-bit data buses 
for memory or I/O. A single processor may connect 
to both size buses. Transfers to or from 32- or 16-bit 
ports are supported by dynamically determining the 
bus width during each bus cycle. Ouring each bus 
cycle an address decoding circuit or the slave de- 


vice itself may assert B816# for 16-bit ports, or ne- 
gate B516# for 32-bit ports. 


With B816# asserted, the processor automatically 
converts operand transfers larger than 16 bits, or 
misaligned 16-bit transfers, into two or three trans- 
fers as required. All operand transfers physically oc- 
cur on 00-015 
when B816# 
is asserted. There- 


fore, 16-bit memories or I/O devices only connect 
on data signals 00-015. 
No extra transceivers are 


required. 


Asserting B816# 
only affects the processor when 


BE2# and/or BE3# are asserted during the current 
cycle. If only 00-015 
are involved with the transfer, 


asserting B816# 
has no affect since the transfer 


can proceed normally over a 16-bit bus whether 
B816# is asserted or not. In other words, asserting 
B816# has no effect when only the lower half of the 
bus is involved with the current cycle. 


There are two types of situations where the proces- 
sor is affected by asserting B816#, depending on 
which By1eEnables are asserted during the current 
bus cycle: 


Upper Half Only: 


Only BE2# and/or BE3# asserted. 


Upper and Lower Half: 


At least BE1#, BE2# asserted (and perhaps 
also BEO# and/or BE3#). 
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Effect of asserting B516# during "upper half only" 
read cycles: 
Asserting B516# during "upper half only" reads 
causes the Intel386 OX to read data on the lower 
16 bits of the data bus and ignore data on the 
upper 16 bits of the data bus. Data that would 
have been read from 016-031 
(as indicated by 
BE2# and BE3#) will instead be read from 00- 
015 respectively. 


Effect of asserting B516# during "upper half only" 
write cycles: 
Asserting B516# during "upper half only" writes 
does not affect the Intel386 OX.When only BE2# 
and/or BE3# are asserted during a write cycle 
the Intel386 OX always duplicates data signals 
016-031 
onto 00-015 
(see Table 5-1). There- 
fore, no further Intel386 OX action is required to 
perform these writes on 32-bit or 16-bit buses. 


Effect of asserting B516# during "upper and lower 
half" read cycles: 
Asserting B516# 
during "upper and lower half" 
reads causes the processor to perform two 16-bit 
read cycles for complete physical operand trans- 
fer. Bytes 0 and 1 (as indicated by BEO# and 
BE1#) are read on the first cycle using 00-015. 
Bytes 2 and 3 (as indicated by BE2# and BE3#) 
are read during the second cycle, again using 
00-015.016-031 
are ignored during both 16-bit 
cycles. BEO# and BE1# are always negated dur- 
ing the second 16-bit cycle (5ee Figure 5-14, cy- 
cles 2 and 28). 


Effect of asserting B516# during "upper and lower 
half" write cycles: 
Asserting B516# 
during "upper and lower half" 


writes causes the Intel386 OX to perform two 
16-bit write cycles for complete physical operand 
transfer. All bytes are available the first write cycle 
allowing external hardware to receive Bytes 0 and 
1 (as indicated by BEO# and BE1#) using 00- 
015. On the second cycle the Intel386 OX dupli- 
cates Bytes 2 and 3 on 00-015 
and Bytes 2 and 
3 (as indicated by BE2# and BE3#) are written 
using 00-015. 
BEO# and BE1# are always neg- 
ated during the second 16-bit cycle. B516# must 
be asserted during the second 16-bit cycle. 5ee 
Figure 5-14, cycles 1 and 18. 


5.3.5 Interfacing with 32· and 16·Blt 
Memories 


In 32-bit-wide physical memories such as Figure 5-5, 
each physical Oword begins at a byte address that is 
a multiple of 4. A2-A31 are directly used as a Oword 
select and BEO#-BE3# 
as byte selects. B516# is 
negated for all bus cycles involving the 32-bit array. 


When 16-bit-wide physical arrays are included in the 
system, as in Figure 5-6, each 16-bit physical word 
begins at a address that is a multiple of 2. Note the 
address is decoded, to assert B516# 
only during 
bus cycles involving the 16-bit array. (If desiring to 


32 
OAT,\ BUS (00-031) 


Inlol386TIoI 
32-BIT 
OX CPU 
ADDRESS BUS (BEOlll-BE3ll1,,\2-,\31) 
MEMORY 


lBS16ll1 


,\DDRESS BUS 


(BEOlll-BE3ll1, ,\2-,\31) 


use 
pipelined 
address 
with 
16-bit 
memories 
then 
BEO#-BE3# 
and W/R# 
are also decoded 
to de- 
termine 
when 
Bs16# 
should 
be 
asserted. 
See 
5.4.3.6 Pipellned 
Address 
with 
Dynamic 
Data Bus 
Sizing.) 


A2-A31 
are 
directly 
usable 
for 
addressing 
32-bit 
and 
16-bit 
devices. 
To address 
16-bit devices, 
A1 
and two byte enable 
signals are also needed. 


To generate 
an A 1 signal and two Byte Enable 
sig- 
nals for 16-bit access, 
BEO# - BE3 # should 
be de- 
coded 
as in Table 5-7. Note certain 
combinations 
of 
BEO # -BE3 # are never generated 
by the Intel386 
OX, leading to "don't 
care" 
conditions 
in the decod- 
er. Any BEO#-BE3# 
decoder, 
such as Figure 5-7. 


may use the non-occurring 
BEO# - BE3 # combina- 
tions to its best advantage. 


With the flexibility 
of memory 
addressing 
on the In- 
tel386 
OX, it is possible 
to transfer 
a logical operand 
that spans more than one physical 
Oword or word of 
memory 
or 
I/O. 
Examples 
are 
32-bit 
Oword 


operands 
beginning 
at addresses 
not evenly 
divisi- 
ble by 4. or a 16-bit word operand 
split between 
two 
physical 
Owords of the memory 
array. 


Operand 
alignment 
and data bus size dictate 
when 
multiple bus cycles are required. Table 5-8 describes 
the transfer 
cycles generated 
for all combinations 
of 
logical operand 
lengths, alignment. 
and data bus siz- 
ing. When multiple 
bus cycles 
are required 
to trans- 
fer a multi-byte 
logical 
operand, 
the 
highest-order 
bytes 
are transferred 
first 
(but 
if Bs 16 # 
asserted 
requires two 16-bit cycles be performed, 
that part of 
the transfer 
is low-order 
first). 


The 
Intel386 
OX has separate. 
parallel 
buses 
for 
data and address. 
The data bus is 32-bits 
in width, 


and bidirectional. 
The address 
bus provides 
a 32-bit 
value 
using 
30 signals 
for the 
30 upper-order 
ad- 
dress bits and 4 Byte Enable signals to directly 
indi- 
cate the active 
bytes. These 
buses 
are interpreted 
and controlled 
via several 
associated 
definition 
or 
control 
signals. 


Intel386™ 
OX Signals 
16-Bit Bus Signals 
Comments 
BE3# 
BE2# 
BE1# 
BEO# 
A1 
BHE# 
BLE# 
(AO) 


H* 
H* 
H* 
H* 
x 
x 
x 
x-no 
active bytes 
H 
H 
H 
L 
L 
H 
L 
H 
H 
L 
H 
L 
L 
H 
H 
H 
L 
L 
L 
L 
L 
H 
L 
H 
H 
H 
H 
L 
H* 
L* 
H* 
L* 
x 
x 
x 
x-not 
contiguous 
bytes 
H 
L 
L 
H 
L 
L 
H 
H 
L 
L 
L 
L 
L 
L 
L 
H 
H 
H 
H 
L 
H 
L* 
H* 
H* 
L* 
x 
x 
x 
x-not 
contiguous 
bytes 
L* 
H* 
L* 
H* 
x 
x 
x 
x-not 
contiguous 
bytes 
L* 
H* 
L* 
L* 
x 
x 
x 
x-not 
contiguous 
bytes 
L 
L 
H 
H 
H 
L 
L 
L* 
L* 
H* 
L* 
x 
x 
x 
x-not 
continguous 
bytes 
L 
L 
L 
H 
L 
L 
H 
L 
L 
L 
L 
L 
L 
L 


BLE# 
asserted 
when 00-07 
of 16-bit bus is active. 


BHE # asserted 
when 08-015 
of 16-bit bus is active. 
A 1 low for all even words; A 1 high for all odd words. 


Key: 
x 
= don't care 
H = high voltage 
level 
L = low voltage 
level 
* = a non-occurring 
pattern of Byte Enables; either none are asserted, 
or the pattern has Byte Enables asserted 
for non-contiguous 
bytes 


L 
H 


L 
x 
H 
L 
L 
L 
L 
x 
H 
L 
H 
L 
L 
X 
L 
H 
i< 
x 
H 
x 
L 


L 
H 
L 


BEO# 
~ 
BE3#~ 


L 
H 


L 
x 
L 
L 
L 
L 
L 
x 
H 
L 
H 
L 
H 
x 
L 
H 
x 
x 
L 
x 
L 


L 
H 
L 


~ 


BE1# 
BHE 
BE3# 
BE3# 


. L 
H 


L 
x 
L 
H 
L 
L 
L 
x 
L 
H 
H 
L 
L 
x 
H 
H 
x 
x 
H 
)( 
L 


L 
H 
L 


BEO# 


BE2# 


Byte-Length 
of Logical Operand 


1 
2 
4 


Physical Byte Address 
xx 
00 
01 
10 
11 
00 
01 
10 
11 
in Memory (low-order 
bits) 


Transfer 
Cycles over 
b 
w 
w 
w 
hb,* 
d 
hb 
hw, 
h3, 


32-Bit Data Bus 
Ib 
13 
Iw 
Ib 


Transfer 
Cycles over 
b 
w 
Ib, 
w 
hb, 
Iw, 
hb, 
hw, 
mw, 


16-Bit Data Bus 
hb 
Ib 
hw 
Ib, 
Iw 
hb, 
- 
I---- 


mw 
Ib 


Key: 
b = byte transfer 
3 = 3-byte transfer 
w = word transfer 
d = Dword transfer 
I 
= low-order 
portion 
h = high-order 
portion 
m = mid-order 
portion 
x 
= don't care 
= B816# 
asserted 
causes second 
bus cycle 


'For 
this case, 8086, 8088, 80186, 80188, 80286 transfer 
Ib first, then hb. 


• 


The definition of each bus cycle is given by three 
definition signals: M/IO#, W/R# 
and D/C#. At the 
same time, a valid address is present on the byte 
enable signals BED# -BE3 # and other address sig- 
nals A2-A31. 
A status signal, ADS#, 
indicates 
when the Intel386 DX issues a new bus cycle defini- 
tion and address. 


Collectively, the address bus, data bus and all asso- 
ciated control signals are referred to simply as "the 
bus". 


When active, the bus performs one of the bus cycles 
below: 
1) read from memory space 
2) locked read from memory space 
3) write to memory space 
4) locked write to memory space 
5) read from I/O space (or coprocessor) 
6) write to I/O space (or coprocessor) 
7) interrupt acknowledge 
8) indicate halt, or indicate shutdown 


Table 5-2 shows the encoding of the bus cycle defi- 
nition signals for each bus cycle. See section 5.2.5 
Bus Cycle Definition. 


The data bus has a dynamic sizing feature support- 
ing 32- and 16-bit bus size. Data bus size is indicated 
to the Intel386 DX using its Bus Size 16 (BS16#) 
input. All bus functions can be performed with either 
data bus size. 


When the Intel386 DX bus is not performing one of 
the activities listed above, it is either Idle or in the 
Hold Acknowledge state, which may be detected by 
external circuitry. The idle state can be identified by 
the Intel386 DX giving no further assertions on its 
address strobe output (ADS#) since the beginning 
of its most recent bus cycle, and the most recent 
bus cycle has been terminated. The hold acknowl- 
edge state is identified by the Intel386 DX asserting 
its hold acknowledge (HLDA) output. 


The shortest time unit of bus activity is a bus state. A 
bus state is one processor clock period (two CLK2 
periods) in duration. A complete data transfer occurs 
during a bus cycle, composed of two or more bus 
states. 


CYCLE 1 
CYCLE 2 
CYCLE 3 
NON-PIPELINED 
NON-PIPELINED 
NON-PIPELINED 
(READ) 
(READ) 
(READ) 


T1 
T2 
T1 
T2 
T1 
T2 
.11.2 
.11.2 
.11.2 
.11.2 
.11.2 
.11.2 
.1 


CLK2 [ 
(INPUT) 


BEOI-BE3i,A2-A31, 
[ 
M/IOI, 
D/Ci, W/Ri 


(OUTPUTS) 


ADSi 
[ 
(OUTPUT) 


NAi [ 
(INPUT) 


READYi [ 
(INPUT) 


LOCKi [ 
(OUTPUT) 


00-031 [ 
(INPUT DURING READ) 


When address pipelining is not selected, the current 
address and bus cycle definition remain stable 
throughout the bus cycle. 


The fastest Intel386 DX bus cycle requires only two 
bus states. For example, three consecutive bus read 
cycles, each consisting of two bus states, are shown 
by Figure 5-8. The bus states in each cycle are 
named T1 and T2. Any memory or I/O address may 
be accessed by such a two-state bus cycle, if the 
external hardware is fast enough. The high-band- 
width, two-clock bus cycle realizes the full potential 
of fast main memory, or cache memory. 


When address pipelining is selected, the address 
(BEO#-BE3#, 
A2-A31) 
and definition 
(W/R#, 


D/C# 
and M/lO#) 
of the next cycle are available 
before the end of the current cycle. To signal their 
availability, the Intel386 DX address status output 
(ADS#) is also asserted. Figure 5-9 illustrates the 
fastest read cycles with pipelined address timing. 
Every bus cycle continues until it is acknowledged 
by the external system hardware, using the Intel386 
DX READY# input. Acknowledging the bus cycle at 
the end of the first T2 results in the shortest bus 
cycle, requiring only T1 and T2. If READY# is not 
immediately asserted, however, T2 states are re- 
peated indefinitely until the READY# input is sam- 
pled asserted. 


Note from Figure 5-9 the fastest bus cycles using 
pipelined address require only two 
bus states, 


named T1P and T2P. Therefore cycles with pipe- 
lined address timing allow the same data bandwidth 
as non-pipelined cycles, but address-to-data access 
time is increased compared to that of a non-pipe- 
lined cycle. 


By increasing the address-to-data access time, pipe- 
lined address timing reduces wait state require- 
ments. For example, if one wait state is required with 
non-pipelined address timing, no wait states would 
be required with pipelined address. 


The address pipelining option provides a choice of 
bus cycle timings. Pipelined or non-pipelined ad- 
dress timing is selectable on a cycle-by-cycle basis 
with the Next Address (NA#) input. 


CYCLE 1 
PIPELINED 
(READ) 


T1 P 
T2P 
.11.2 
.11.2 


CYCLE 2 
PIPELINED 
(READ) 


T1 P 
T2P 
.11.2 .11.2 


CYCLE 3 
PIPELINED 
(READ) 


T1 P 
T2P 
.11.2 
.11.2 


8EO#-8E3#, 
A2-A31, 
[ 
M/IO#, 
D/c#, w/R# 


(OUTPUTS) 


Pipelined 
address 
timing is useful in typical 
systems 
having 
address 
latches. 
In those 
systems, 
once an 
address 
has been 
latched, 
pipelined 
availability 
of 
the next address 
allows decoding 
circuitry 
to gener- 
ate chip selects 
(and other necessary 
select signals) 
in advance, 
so selected 
devices 
are accessed 
im- 
mediately 
when 
the 
next 
cycle 
begins. 
In other 
words, 
the decode 
time for the 
next cycle 
can be 
overlapped 
with the end of the current 
cycle. 


If a system 
contains 
a memory 
structure 
of two or 
more interleaved 
memory 
banks, 
pipelined 
address 
timing potentially 
allows even more overlap 
of activi- 
ty. This is true when the interleaved 
memory control- 
ler is designed 
to allow the next memory 
operation 


TWO·BANK 
INTERLEAVED 
MEMORY 


a) Address 
signal A2 selects 
bank 


b) 32-bit datapath 
to each bank 


intel~ 


to begin in one memory 
bank while the current 
bus 
cycle is still activating 
another 
memory 
bank. Figure 
5-10 shows the general 
structure 
of the Intel386 
DX 
with 2-bank 
and 4-bank 
interleaved 
memory. 
Note 
each 
memory 
bank of the interleaved 
memory 
has 
full data bus width (32-bit data width typically, 
unless 
16-bit bus size is selected). 


Further details of pipelined 
address 
timing are given 
in 5.4.3.4 Plpellned 
Address, 
5.4.3.5 Initiating 
and 
Maintaining 
Pipellned 
Address, 
5.4.3.6 
Pipellned 
Address 
with 
Dynamic 
Bus 
Sizing, 
and 
5.4.3.7 
Maximum 
Pipe lined 
Address 
Usage 
with 
16·Bit 
Bus Size. 


FOUR·BANK 
INTERLEAVED 
MEMORY 


a) Address 
signals A3 and A2 select 
bank 


b) 32-bit datapath 
to each bank 


5.4.3.1 
INTRODUCTION 


Data transfers 
occur as a result of bus cycles, classi- 
fied as read or write cycles. 
During read cycles, data 
is transferred 
from an external 
device to the proces- 


sor. During write cycles data is transferred 
in the oth- 


er direction, 
from 
the processor 
to an external 
de- 
vice. 


Two choices 
of address 
timing 
are dynamically 
se- 
lectable: 
non-pipelined, 
or pipelined. 
After a bus idle 
state, 
the processor 
always 
uses non-pipelined 
ad- 
dress timing. 
However, 
the NA # (Next Address) 
in- 


put 
may 
be asserted 
to 
select 
pipelined 
address 
timing for the next bus cycle. When pipelining 
is se- 
lected and the Intel386 
OX has a bus request 
pend- 
ing internally, 
the address 
and definition 
of the next 
cycle is made available 
even before the current 
bus 
cycle 
is acknowledged 
by READY #. Generally, 
the 
NA # input is sampled 
each bus cycle to select 
the 
desired 
address 
timing for the next bus cycle. 


IDLE I 


TI 


CYCLE 1 
I 


NON-PIPELINEO 
(WRITE) 


Tl 
T2 


CYCLE 2 
I 


NON-PIPELINED 
(READ) 


T1 
T2 


BED I-BE3 
H 


A2- 
A31. 
[ 
M/IOH,D/CH 


Two choices 
of physical 
data bus width are dynami- 
cally 
selectable: 
32 bits, or 16 bits. Generally, 
the 
BS16# 
(Bus Size 16) input is sampled 
near the end 
of the bus cycle to confirm the physical data bus size 
applicable 
to the current 
cycle. 
Negation 
of BS16# 


indicates 
a 32-bit 
size, 
and 
assertion 
indicates 
a 
16-bit bus size. 


If 16-bit bus size is indicated, 
the Intel386 
OX auto- 
matically 
responds 
as 
required 
to 
complete 
the 
transfer 
on a 16-bit data bus. Depending 
on the size 
and 
alignment 
of the 
operand, 
another 
16-bit 
bus 
cycle may be required. Table 5-7 provides 
all details .• 
When necessary, 
the Intel386 
OX performs 
an addi- 
tional 
16-bit 
bus cycle, 
using 
00-015 
in place 
of 
016-031. 


Terminating 
a read cycle or write cycle, like any bus 
cycle, requires acknowledging 
the cycle by asserting 
the READY # input. Until acknowledged, 
the proces- 


sor inserts 
wait states 
into the bus cycle, 
to allow 
adjustment 
for the speed of any external 
device. 
Ex- 
ternal 
hardware, 
which 
has 
decoded 
the 
address 
and bus cycle type asserts the READY # input at the 
appropriate 
time. 


CYCLE 3 
I 
NDN-PIPELINED 
(WRITE) 


Tl 
T2 


IDLE I 


n 


CYCLE 4 
I 


NON-PIPELINED 
(READ) 


T1 
T2 


IDLE I 


Ti 


231630-15 
Idle states are shown here for diagram variety only. Write cycles are not always followed by an idle state. An active bus cycle can immediately 
follow 
the write 
cycle. 


Figure 5·11. Various 
Bus Cycles and Idle States with Non·Pipelined 
Address 
(zero wait states) 


1-75 


At the end of the second bus state within the bus 
cycle, READY# is sampled. At that time, if external 
hardware acknowledges the bus cycle by asserting 
READY#, the bus cycle terminates as shown in Fig- 
ure 5-11. If READY# is negated as in Figure 5-12, 
the cycle continues another bus state (a wait state) 
and READY# is sampled again at the end of that 
state. This continues indefinitely until the cycle is ac- 
knowledged by READY# asserted. 


When the current cycle is acknowledged, the In- 
tel386 OX terminates it. When a read cycle is ac- 
knowledged, the Intel386 DX latches the information 
present at its data pins. When a write cycle is ac- 
knowledged, the Intel386 DX write data remains val- 
id throughout phase one of the next bus state, to 
provide write data hold time. 


Any bus cycle may be performed with non-pipelined 
address timing. For example, Figure 5-11 shows a 
mixture of read and write cycles with non-pipelined 
address timing. Figure 5-11 shows the fastest possi- 
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ble cycles with non-pipelined address have two bus 
states per bus cycle. The states are named T1 and 
T2. In phase one of the T1, the address signals and 
bus cycle definition signals are driven valid, and to 
signal their availability, address status (ADS#) 
is 
simultaneously asserted. 


During read or write cycles, the data bus behaves as 
follows. If the cycle is a read, the Intel386 DX floats 
its data signals to allow driving by the external de- 
vice being addressed. The 
Intel386 
OX requires 
that 
all data 
bus pins be at a valid 
logic 
state 
(high or low) at the end of each read cycle, when 
READY # Is asserted, 
even If all byte enables 
are 
not asserted. 
The system 
MUST be designed 
to 
meet this requirement. 
If the cycle is a write, data 
signals are driven by the Intel386 DX beginning in 
phase two of T1 until phase one of the bus state 
following cycle acknowledgment. 


Figure 5-12 illustrates non-pipelined bus cycles with 
one wait added to cycles 2 and 3. READY# is sam- 
pled negated at the end of the first T2 in cycles 2 
and 3. Therefore cycles 2 and 3 have T2 repeated. 
At the end of the second T2, READY# is sampled 
asserted. 


IDLE 
I 
CYCLE 
1 
I 
CYCLE 
2 
IDLE 
CYCLE 
5 
IDLE 


I 


NON-PIPELINED 
NON-PIPELINED 
NON-PIPELINED 
(READ) 
(WRITE) 
(READ) 


n 
T1 
T2 
T1 
T2 
T2 
n 
T1 
T2 
T2 
n 


CLK2 
[ 


(CLK) 
[ 


BEO I-BEl 
I 
A2-A51, 
[ 


M/IOI. 
D/q 


W/RI 
[ 


ADS' 
[ 


NAN 
[ 


32-SrT 
32-BIT 
BUS SIZE 
BUS SIZE 


Bs16 I [ 


READY I [ 


END 
CYCLE 
1 
END CYCLE 
2 


LOCK I [ 
VALID 
2 
VALID 
5 


00-051[- 
OUT 


231630-16 
Idle states 
are shown 
here for diagram 
variety 
only. Write cycles 
are not 
always 
followed 
by an idle state. 
An active 
bus cycle 
can immediately 
follow 
the write 
cycle. 


Figure 5-12. Various 
Bus Cycles and Idle States with Non-Plpelined 
Address 
(various 
number of wait states) 


HOLD NEGATED _ 
~e;,0}- 


REQUEST PENDING 
'<O:;"'S' 


"'S'~ S'~,p 
~,p.ll~ 
~O. 


READY# ASSERTED- 
HOLD NEGATED- 
REQUEST PENDING 


READY# NEGATED- 
NANt-lEGATED 


231630-17 
Bus States: 
T1-first 
clock of a non-pipelined bus cycle (Inte1386OX drives new address and asserts ADS#) 
T2-subsequent 
clocks of a bus cycle when NA# has not been sampled asserted in the current bus cycle 


Ti- 
idle state 
Th-hold 
acknowledge state (Inte1386OX asserts HLOA) 
The fastest bus cycle consists of two states: Tl and T2. 
Four basic bus states describe bus operation when not using pipelined address. These states do include 8S16# usage for 32-bit and 16-bit 
bus size. If asserting 8S16 # requires a second 16-bil bus cycle to be performed, it is performed before HOLD asserted is acknowledged. 


When address pipelining is not used, the address 
and bus cycle definition remain valid during all wait 
states. When wait states are added and you desire 
to maintain non-pipelined address timing, it is neces- 
sary to negate NA# during each T2 state except the 
last one, as shown in Figure 5-12 cycles 2 and 3. If 
NA# is sampled asserted during a T2 other than the 
last one, the next state would be T21(for pipelined 
address) or T2P (for pipelined address) instead of 
another T2 (for non-pipelined address). 


When address pipelining is not used, the bus states 
and transitions are completely illustrated by Figure 
5-13. The bus transitions between four possible 
states: T1, T2, Ti, and Th. Bus cycles consist of T1 
and T2, with T2 being repeated for wait states. Oth- 
erwise, the bus may be idle, in the Ti state, or in hold 
acknowledge, the Th state. 


When address pipelining is not used, the bus state 
diagram is as shown in Figure 5-13. When the bus is 


idle it is in state Ti. Bus cycles always begin with T1. 
T1 always leads to T2. If a bus cycle is not acknowl- 
edged during T2 and NA# is negated, T2 is repeat- 
ed. When a cycle is acknowledged during T2, the 
following state will be T1 of the next bus cycle if a 
bus request is pending internally, or Ti if there is no 
bus request pending, or Th if the HOLD input is be- 
ing asserted. 


The bus state diagram in Figure 5-13 also applies to 
the use of B516#. If the Intel386 OX makes internal 
adjustments for 16-bit bus size, the adjustments do 
not affect the external bus states. If an additional 
16-bit bus cycle is required to complete a transfer on 
a 16-bit bus, it also follows the state transitions 
shown in Figure 5-13. 


Use of pipelined address allows the Intel386 OX to 
enter three additional bus states not shown in Figure 
5-13. Figure 5-20 in 5.4.3.4 Pipelined Address 
is 
the complete bus state diagram, including pipelined 
address cycles. 


• 


5.4.3.3 NON·PIPELINED 
ADDRESS 
WITH 
DYNAMIC 
DATA 
BUS SIZING 


32 bits. If B816# 
was most 
recently 
asserted, 
the 
size is defined 
as 16 bits. 


When B8 16 # is asserted 
and two 16-bit bus cycles 
are required 
to complete 
the transfer, 
B816# 
must 
be asserted 
during the second 
cycle; 
16-bit bus size 
is not 
assumed. 
Like 
any 
bus 
cycle, 
the 
second 
16-bit 
cycle 
must 
be 
acknowledged 
by asserting 
READY#. 


The 
physical 
data 
bus width 
for any non-pipelined 
bus cycle 
can 
be either 
32-bits 
or 16-bits. 
At the 
beginning 
of the bus cycle, 
the processor 
behaves 
as if the data bus is 32-bits 
wide. When the bus cy- 


cle is acknowledged, 
by asserting 
READY # at the 
end 
of 
a T2 
state, 
the 
most 
recent 
sampling 
of 
B816# 
determines 
the data bus size for the cycle 
being 
acknowledged. 
If B816# 
was most 
recently 
negated, 
the 
physical 
data 
bus size is defined 
as 


READY# [ 


LOCK# [ 


00- 015 [ 


016- 031 [ . ------- 


CLK2 [ 


(CLK) [ 


BED#. BEl # [ 


BE2 #. BE3 # [ 
A2- A3l. 


M/IO #, D/C# 


W/R# [ 


ADS# [ 


NA# [ 


BS16 # 
[ 


When a second 
16-bit bus cycle is required 
to com- 


plete the transfer 
over a 16-bit bus, the addresses 


A TRANSFERREOUIRINGTWO 
CYCLESON l6-BIT 
DATA BUS 


CYCLE 1~CYCLE 
1A 
NON-PIPELINED 
NON-PIPELINED 
(WRITE 
WRITE) 
PART ONE 
PARTTWO 


T1 
T2 
T1 
T2 


CYCLE2 TCYCLE 
2A 
NON-PIPELINED 
NON-PIPELINED 
(READ 
READ) 
PARTONE 
PARTTWO 


T1 
T2 
T1 
T2 


d16-d3l 


OUT 


dD-d15 
d16-d3l 
--0-- ---0--- 


IGNORED 
IGNORED 
--0-- ---0--- 
I 
I 


A TRANSFER 
REQUIRING TWO 
CYCLES ON 16-BIT 
DATA BUS 


CYCLE l~CYCLE 
lA 
NON-PIPELINED 
NON-PIPELINED 
(READ 
READ) 
PART ONE 
PART TWO 


T1 
T 
T2 
T1 
T2 
T2 


CYCLE 2 
NON-PIPELINED 
(WRITE) 


CLK2 
[ 


(CLK) 
[ 


BEO#.BEl 
# 
[ 
[ 
[ 
[ 


BE2 #, BE3# 
A2- 
A31, 
MilO #. D/C# 


NOTE: 
NA# MUST BE NEGATED 
HERE TO ALLOW 
RECOGNITION 
OF ASSERTED BS 16# 
IN FINAL T2 


BS16 # 
[ 


READY # [ 


LOCK# [ 


00- 
D15 [. 


D16- 
D31 [. 


dO-d15 
-------- 
--- --~-- 


IGNORED 
-------- 
--- --~-- 
I 


d16-d31 
--0 


dO-d15 


OUT 


IGNORED 
--0 
I 


d16-d31 


OUT 


generated 
for the two 
16-bit bus cycles 
are closely 
related 
to each other. The addresses 
are the same 
except 
8EO# 
and 8E1 # are always negated 
for the 
second 
cycle. This is because 
data on DO-D15 
was 
already 
transferred 
during the first 16-bit cycle. 


cycle 
during 
which 
8816# 
is asserted, 
note 
that 
NA# 
must be negated 
in the T2 state(s) 
prior to the 
last 
T2 
state. 
This 
is to 
allow 
the 
recognition 
of 
8816# 
asserted 
in the final T2 state. Also note that 
during this state 8816# 
must be stable 
(defined 
by 
t17 and t18, 8816# 
setup and hold timings), 
in order 
to prevent 
potential 
data corruption 
during split cycle 
reads. The logic state of 8816# 
during this time is 
not important. 
The relation 
of NA# 
and 8816# 
is 
given fully in 5.4.3.4 Plpellned 
Address, 
but Figure 
5-15 illustrates 
these precautions 
you need to know 
when using 8816# 
with non-pipelined 
address. 


Figures 
5-14 and 5-15 show cases where 
assertion 
of 8816# 
requires 
a second 
16-bit cycle 
for com- 
plete operand 
transfer. 
Figure 5-14 illustrates 
cycles 
without 
wait 
states. 
Figure 
5-15 
illustrates 
cycles 
with one wait state. 
In Figure 5-15 cycle 
1. the bus 


•• 


Address 
pipelining 
is the 
option 
of requesting 
the 
address 
and the bus cycle definition 
of the next, in- 
ternally 
pending 
bus cycle 
before 
the 
current 
bus 
cycle 
is 
acknowledged 
with 
READY # 
asserted. 
ADS# 
is asserted 
by the Intel386 
DX when the next 
address 
is issued. 
The address 
pipelining 
option 
is 
controlled 
on a cycle-by-cycle 
basis with the NA# 
input signal. 


Once a bus cycle is in progress 
and the current 
ad- 
dress 
has 
been 
valid 
for 
at least 
one 
entire 
bus 
state, the NA# 
input is sampled 
at the end of every 
phase one until the bus cycle is acknowledged. 
Dur- 
ing 
non-pipelined 
bus 
cycles, 
therefore, 
NA # 
is 
sampled 
at the end of phase 
one in every 
T2. An 
example 
is Cycle 2 in Figure 5-16, during which NA# 
is sampled 
at the end of phase 
one of every T2 (it 
was asserted 
once 
during 
the first T2 and has no 
further 
effect 
during that bus cycle). 


IDLE 
CYCLE 1 
NON-PIPELINED 
(WRITE) 


If NA# 
is sampled 
asserted, 
the Intel386 
DX is free 
to drive the address 
and bus cycle 
definition 
of the 
next bus cycle, and assert ADS #, as soon as it has 
a bus request 
internally 
pending. 
It may drive 
the 
next address 
as early as the next bus state, whether 
the current bus cycle is acknowledged 
at that time or 
not. 


Regarding 
the details 
of address 
pipelining, 
the In- 
tel386 
DX has the following 
characteristics: 


1) For NA# 
to be sampled 
asserted, 
8S16# 
must 
be negated 
at that sampling 
window 
(see Figure 
5-16 Cycles 2 through 4, and Figure 5-17 Cycles 
1 
through 
4). If NA# 
and 8S16# 
are both sampled 
asserted 
during the last T2 period of a bus cycle, 


8S16# 
asserted 
has priority. 
Therefore, 
if both 
are asserted, 
the current 
bus size is taken 
to be 
16 bits and the next address 
is not pipelined. 


CYCLE 2 
NON-PIPELINED 
(READ) 


CYCLE 3 
PIPELINED 
(WRITE) 


CYCLE 4 
PIPELINEo 
(READ) 


CLK2 
[ 


(CLK) [ 


8EOI 
- 8E31 
[ 
A2-A31, 
t.4/IOI,o/CI 


W/RI 
[ 


8516 # [ 


REAoy# 
[ 


LOCq 
[ 


00-031 
[ 
• 
---- 
-- 
---+-~ 


231630-20 
Following 
any 
idle 
bus state 
(Ti), addresses 
are 
non-pipelined. 
Within 
non-pipelined 
bus cycles, 
NA # 
is only 
sampled 
during 
wait 
states. 
Therefore, 
to begin 
address 
pipelining 
during 
a group 
of non-pipe 
lined 
bus cycles 
requires 
a non-pipelined 
cycle 
with at least 
one wait 
state 
(Cycle 
2 above). 


CYCLE 1 
NON-PIPELINED 


(WRITE) 


CYCLE 2 
PIPELINED 


(READ) 


CYCLE 3 
PIPELINED 


(WRITE) 


CYCLE 4 
PIPELINED 


(READ) 


CLK2 
[ 


(CLK) 
[ 


BEO#-BE3#, 
[ 
A2-A31, 
M/IO 
#, D/C# 


W/R# 
[ 


B516# 
[ 


READY# 
[ 


231630-21 
Following 
any idle bus state 
(Ti) the address 
is always 
non-pipe lined and NA# 
is only sampled 
during 
wait states. 
To start address 
pipelining 
after 
an idle state 
requires 
a non-pipelined 
cycle 
with at least 
one wait 
state 
(cycle 
1 above). 


The pipe lined cycles 
(2, 3, 4 above) 
are shown 
with various 
numbers 
of wait states. 


2) The next address 
may appear as early as the bus 
state after NA # was sampled 
asserted 
(see Fig- 
ures 5-16 or 5-17). In that case, state T2P is en- 
tered immediately. 
However, 
when there is not an 
internal 
bus request 
already pending, the next ad- 
dress will not be available 
immediately 
after NA# 
is asserted 
and T21 is entered 
instead of T2P (see 
Figure 5-19 Cycle 3). Provided the current 
bus cy- 
cle isn't yet acknowledged 
by READY # asserted, 
T2P will be entered 
as soon 
as the Intel386 
OX 
does 
drive 
the 
next address. 
External 
hardware 
should 
therefore 
observe 
the 
ADS # 
output 
as 
confirmation 
the 
next 
address 
is actually 
being 
driven on the bus. 


3) Once NA# 
is sampled 
asserted, 
the Intel386 
OX 
commits 
itself to the highest 
priority 
bus request 
that is pending 
internally. 
It can no longer perform 
another 
16-bit transfer to the same address should 
8S16# 
be 
asserted 
externally, 
so 
thereafter 


must 
assume 
the 
current 
bus 
size 
is 32 
bits. 


Therefore 
if NA # 
is sampled 
asserted 
within 
a 
bus cycle, 
8S16# 
must be negated 
thereafter 
in 
that 
bus 
cycle 
(see 
Figures 
5-16, 
5-17, 
5-19). 


Consequently, 
do not assert 
NA# 
during bus cy- 
cles 
which 
must 
have 
8S16# 
driven 
asserted. 


See 5.4.3.6 Dynamic 
Bus Sizing with Plpelined 
Address. 


4) Any address 
which is validated 
by a pulse on the 
Intel386 
OX ADS# 
output 
will remain 
stable 
on 
the address 
pins for at least two processor 
clock 
periods. 
The Intel386 
OX cannot 
produce 
a new 
address 
more frequently 
than every two proces- 
sor clock 
periods 
(see Figures 5-16, 5-17, 5-19). 


5) Only the address 
and bus cycle 
definition 
of the 
very next bus cycle is available. 
The pipelining 
ca- 
pability 
cannot 
look 
further 
than 
one 
bus cycle 
ahead 
(see Figure 5-19 Cycle 1). 


The complete bus state transition diagram, including 
operation with pipelined address is given by 5-20. 
Note it is a superset of the diagram for non-pipelined 
address only, and the three additional bus states for 
pipelined address are drawn in bold. 


The fastest bus cycle with pipelined address con- 
sists of just two bus states, T1P and T2P (recall for 
non-pipelined address it is T1 and T2). T1P is the 
first bus state of a pipelined cycle. 


5.4.3.5 
INITIATING 
AND MAINTAINING 
PIPELINED 
ADDRESS 


Using the state diagram Figure 5-20, observe the 
transitions from an idle state, Ti, to the beginning of 
a pipelined bus cycle, T1P. From an idle state Ti, the 
first bus cycle must begin with T1, and is therefore a 
non-pipelined bus cycle. The next bus cycle will be 
pipelined, however, provided NA# is asserted and 
the first bus cycle ends in a T2P state (the address 
for the next bus cycle is driven during T2P). The fast- 
est path from an idle state to a bus cycle with pipe- 
lined address is shown in bold below: 


~ 
T1 - T2 - T2P, 
T1P - T2P, 
\ 
) \ 
/ 
T 
T 


idle 
non-pipelined 
pipelined 
states 
cycle 
cycle 


T1-T2-T2P are the states of the bus cycle that es- 
tablishes address pipelining for the next bus cycle, 
which begins with T1P. The same is true after a bus 
hold state, shown below: 


\Th, Th, Th:;\T1 - T2 - T2P,/ \T1 P - T2P,/ 


T 
T 
T 
hold 
non-pipelined 
pipelined 
acknowledge 
cycle 
cycle 
states 


The transition to pipelined address is shown func- 
tionally by Figure 5-17 Cycle 1. Note that Cycle 1 is 
used to transition into pipelined address timing for 
the subsequent Cycles 2, 3 and 4, which are pipe- 
lined. The NA# input is asserted at the appropriate 
time to select address pipelining for Cycles 2, 3 
and 4. 


Once a bus cycle is in progress and the current ad- 
dress has become valid, the NA# input is sampled 
at the end of every phase one, beginning with the 
next bus state, until the bus cycle is acknowledged. 
During Figure 5-17 Cycle 1 therefore, sampling be- 
gins in T2. Once NA# is sampled asserted during 
the current cycle, the Intel386 OX is free to drive a 
new address and bus cycle definition on the bus as 
early as the next bus state. In Figure 5-16 Cycle 1 for 
example, the next address is driven during state 
T2P. Thus Cycle 1 makes the transition to pipelined 
address timing, since it begins with T1 but ends with 
T2P. Because the address for Cycle 2 is available 
before Cycle 2 begins, Cycle 2 is called a pipelined 
bus cycle, and it begins with T1P. Cycle 2 begins as 
soon as READY# asserted terminates Cycle 1. 


Example transition bus cycles are Figure 5-17 Cycle 
1 and Figure 5-16 Cycle 2. Figure 5-17 shows tran- 
sition during the very first cycle after an idle bus 
state, which is the fastest possible transition into ad- 
dress pipelining. Figure 5-16 Cycle 2 shows a tran- 
sition cycle occurring during a burst of bus cycles. In 
any case, a transition cycle is the same whenever it 
occurs: it consists at least of T1, T2 (you assert 
NA# at that time), and T2P (provided the Intel386 
OX has an internal bus request already pending, 
which it almost always has). T2P states are repeated 
if wait states are added to the cycle. 


Note three states (T1, T2 and T2P) are only required 
in a bus cycle performing a transition 
from non- 


pipelined address into pipelined address timing, for 
example Figure 5-17 Cycle 1. Figure 5-17 Cycles 2, 
3 and 4 show that address pipelining can be main- 
tained with two-state bus cycles consisting only of 
T1P and T2P. 
' 


Once a pipelined bus cycle is in progress, pipelined 
timing is maintained for the next cycle by asserting 
NA# and detecting that the Intel386 OX enters T2P 
during the current bus cycle. The current bus cycle 
must end in state T2P for pipelining to be maintained 
in the next cycle. T2P is identified by the assertion of 
ADS#. Figures 5-16 and 5-17 however, each show 
pipelining ending after Cycle 4 because Cycle 4 
ends in T21. This indicates the Intel386 OX didn't 
have an internal bus request prior to the acknowl- 
edgement of Cycle 4. If a cycle ends with a T2 or 
T21,the next cycle will not be pipelined. 


CLK2 
[ 


(CLK) 
[ 


BEOll-BEll1, 
[ 
A2-A31, 
1oI/IOll,D/ClI 


W/RlI 
[ 


ADSlI 
[ 


NAlI 
[ 


BS1611 
[ 


READYlI 
[ 


LOCKlI 
[ 


00- 031 
[ 


CYCLE 
1 
PIPELINED 
(WRITE) 


T2P 


CYCLE 
2 
PIPELINED 
(READ) 


T2 


CYCLE 3 
PIPELINED 
(WRITE) 


CYCLE 4 
PIPELINED 
(READ) 


~ 


AS LONG AS i386TIoI 
OX CPU ENTERS THE 
T2P 
STATE DURING CYCLE 3, 
ADDRESS 
PIPELINING 
IS 
IoIAINTAINED 
IN CYCLE 4 


ASSERTING 
N••••• WORE 
NAlI 
COULD HAVE 
THAN 
ONCE DURING 
BEEN ASSERTED 
ANY CYCLE HAS NO 
IN T 1P IF DESIRED. 
ADDITIONAL 
EFFECTS 
ASSERTION 
NOW IS 
I 
THE LATEST 
TIIoIE 
POSSIBLE 
TO ALLOW 
i386 TW OX CPU TO ENTER T2P 
STATE TO IoIAINTAIN 
PIPELINING 
IN CYCLE 3 


intel~ 


Bus States: 
Tl-first 
clock of a non-pipelined bus cycle (Inte1386DX drives new ad- 


dress and asserts ADS#). 
T2-subsequent 
clocks of a bus cycle when NA# has not been sampled 


asserted 
in the current bus cycle. 
T21-subsequent 
clocks of a bus cycle when NA# has been sampled as- 


""rted in the current bus cycle but there is not yet an internal bus request 
pending (Inte1386DX will not drive new address or assert ADS#). 
T2P-subsequent 
clocks of a bus cycle when NA# has been sampled 


asserted in the current bus cycle and there is an internal bus request pend- 
,ng (Inte1386DX drives new address and asserts ADS#). 
T1P-first 
clock of a pipelined bus cycle. 
Tt-idle 
state. 


Th-hold 
acknowledge state (Inte1386DX asserts HlDA). 
Asserting NA# for pipelined address gives access to three more bus 
states: T21,T2P and T1P. 
Using pipelined address, the fastest bus cycle consists of Tl P and T2P. 


Realistically, address pipelining is almost always 
maintained as long as NA# is sampled asserted. 
This is so because in the absence of any other re- 
quest, a code prefetch request is always internally 
pending until the instruction decoder and code pre- 
fetch queue are completely full. Therefore address 
pipelining is maintained for long bursts of bus cycles, 
if the bus is available (Le., HOLO negated) and NA# 
is sampled asserted in each of the bus cycles. 


5.4.3.6 
PIPE LINED 
ADDRESS 
WITH 
DYNAMIC 
DATA 
BUS SIZING 


The BS16# feature allows easy interface to 16-bit 
data buses. When asserted, the Intel386 OX bus 


interface hardware performs appropriate action to 
make the transfer using a 16-bit data bus connected 
on 00-015. 


There is a degree of interaction, however, between 
the use of Address pipelining and the use of Bus 
Size 16. The interaction results from the multiple bus 
cycles required when transferring 32-bit operands 
over a 16-bit bus. If the operand requires both 16-bit 
halves of the 32-bit bus, the appropriate Intel386 OX 
action is a second bus cycle to complete the oper- 
and's transfer. It is this necessity that conflicts with 
NA# usage. 


When NA# is sampled asserted, the Intel386 OX 
commits 
itself 
to 
perform 
the 
next 
inter- 


sampled asserted in the current cycle. If NA# is 
sampled asserted, the current data bus size is as- 
sumed to be 32 bits. 
2) To also avoid conflict, if NA# 
and 8516# 
are 
both asserted during the same sampling window, 
8516# 
asserted has priority and the Intel386 OX 
acts as if NA# was negated at that time. Internal 
Intel386 OX circuitry, shown conceptually in Fig- 
ure 5-18, assures that 8516# 
is sampled assert- 
ed and NA# is sampled negated if both inputs 
are externally asserted at the same sampling win- 
dow. 


nally pending bus request, and is allowed to drive 
the next internally pending address onto the bus. As- 
serting NA# therefore makes it impossible for the 
next bus cycle to again access the current address 
on A2-A31, such as may be required when 8516# 
is asserted by the external hardware. 


To avoid conflict, the Intel386 OX is designed with 
following two provisions: 
1) To avoid conflict, 8516# 
must be negated in the 
current bus cycle if NA# 
has already been 


BEO-, 
BEl- 
[ 


BE2-, 
BE3-, 
[ 
A2, 
A31, 
W/IO-, o/c- 
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CYCLE 2 
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Key: On ~ physical data pin n 
231630-25 
dn = logical data bit n 
Cycle 1 is pipelined. Cycle 1a cannot be pipelined. but its address can be inferred from that of Cycle 1, to externally simulate address pipellning 
during Cycle 1a. 


• 


Certain types of 16-bit or 8-bit operands require no 
adjustment for correct transfer on a 16·bit bus. 
Those are read or write operands using only the low- 
er half of the data bus, and write operands using 
only the upper half of the bus since the Intel386 DX 
simultaneously duplicates the write data on the low- 
er half of the data bus. For these patterns of Byte 
Enables and the R/W# signals, B516# need not be 
asserted at the Intel386 DX allowing NA# to be as- 
serted during the bus cycle if desired. 


5.4.4 
Interrupt Acknowledge 
(INTA) 
Cycles 


In response to an interrupt request on the INTR in· 
put when interrupts are enabled, the Intel386 DX 


INTERRUPT 
ACKNOWLEDGE 
CYCLE 
1 


Tl 
T2 
T2 


intel~ 


performs two interrupt acknowledge cycles. These 
bus cycles are similar to read cycles in that bus defi- 
nition signals define the type of bus activity taking 
place, and each cycle continues until acknowledged 
by READY# sampled asserted. 


The state of A2 distinguishes the first and second 
interrupt acknowledge cycles. The byte address 
driven during the first interrupt acknowledge cycle is 
4 (A31-A3 
low, A2 high, BE3# -BE1 # high, and 
BEO# low). The address driven during the second 
interrupt acknowledge cycle is 0 (A31-A2 
low, 


BE3#-BE1 # high, BEO# low). 


INTERRUPT 
ACKNOWLEDGE 
CYCLE 2 


Tl 
T2 
T21 


IGNORED 
--<2}-- 
--q:>-- 


VECTOR 
--0--- 
--q:>--- 


Interrupt Vector (0-255) is read on 00-07 
at end of second Interrupt Acknowledge bus cycle. 


Because each Interrupt Acknowledge bus cycle is followed by idle bus slates, asserting NA# has no practical effect. Choose the approach 
which is simplest for your system hardware design. 


CYCLE 1 
NON-PIPELINED 
(WRITE) 


Tl 
T2 


CYCLE 2 
NON-PIPELINED 
(HALT) 


11 
T2 


I 
IDLE 


Ti 


i386™ 
OX CPU REMAINS HALTED 
UNTIL INTR, NMI OR 
RESET IS ASSERTED. 
I 
I 
i386™ 
OX CPU RESPONDSTO 
HOLD INPUT WHILE IN 
THE HALT STATE. 


NOTE: HALT CYCLE MUST BE 
ACKNOWLEDGEDBY READY. 
ASSERTED. WAIT STATES MAY 
BE ADDED TO THE CYCLE IF 
DESIRED. 


- (FLOATING) - - -- 
I 
I 


The 
LOCK # output 
is asserted 
from the beginning 
of the first interrupt 
acknowledge 
cycle until the end 
of the second 
interrupt 
acknowledge 
cycle. Four idle 
bus states, 
Ti, are inserted 
by the Intel386 
OX be- 
tween 
the two interrupt 
acknowledge 
cycles, 
allow- 
ing for compatibility 
with spec TRHRL 
of the 8259A 
Interrupt 
Controller. 


Ouring both interrupt 
acknowledge 
cycles, 
00-031 
float. No data is read at the end of the first interrupt 
acknowledge 
cycle. At the end of the second 
inter- 
rupt acknowledge 
cycle, the Intel386 
OX will read an 
external 
interrupt 
vector 
from 
00-07 
of the 
data 
bus. The vector 
indicates 
the specific 
interrupt 
num- 
ber (from 0-255) 
requiring 
service. 


5.4.5 
Halt Indication 
Cycle 


The 
Intel386 
OX halts 
as a result 
of executing 
a 
HALT instruction. 
Signaling 
its entrance 
into the halt 
state, 
a halt indication 
cycle 
is performed. 
The halt 
indication 
cycle 
is identified 
by the state of the bus 
definition 
signals 
shown 
in 5.2.5 Bus Cycle 
DefIni- 
tion and a byte address 
of 2. SEO# 
and SE2# 
are 
the 
only 
signals 
distinguishing 
halt 
indication 
from 
shutdown 
indication, 
which 
drives 
an address 
of O. 


Ouring 
the 
halt cycle 
undefined 
data 
is driven 
on 
00-031. 
The halt indication 
cycle must be acknowl- 
edged 
by REAOY # asserted. 


A halted Intel386 
OX resumes 
execution 
when INTR 
(if interrupts 
are enabled) 
or NMI or RESET 
is as- 
serted. 


• 


are the only signals distinguishing shutdown indica- 
tion from halt indication, which drives an address of 
2. During the shutdown cycle undefined data is driv- 
en on 00-031. 
The shutdown indication cycle must 
be acknowledged by READY# asserted. 


5.4.6 
Shutdown 
Indication 
Cycle 


The Intel386 OX shuts down as a result of a protec- 
tion fault while attempting to process a double fault. 
Signaling its entrance into the shutdown state, a 
shutdown indication cycle is performed. The shut- 
down indication cycle is identified by the state of the 
bus definition signals shown in 5.2.5 Bus Cycle Def· 
inltlon and a byte address of O. BEO# and BE2# 


A shutdown Intel386 OX resumes execution when 
NMI or RESET is asserted. 


CYCLE 1 
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1386 T14DX CPU RE14AINS SHUTDOWN 
UNTIL NIlI OR RESET 
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I 
I 
1386T14 DX CPU RESPONDS TO 
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THE SHUTDOWN STATE. 


NOTE: SHUTDOWN CYCLE MUST BE 
ACKNOWLEDGEDBY READY* 
ASSERTED. WAIT STATES 14AY 
BE ADDED TO THE CYCLE If 
DESIRED. 
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5.5 OTHER 
FUNCTIONAL 
DESCRIPTIONS 


5.5.1 
Entering and Exiting Hold 
Acknowledge 


The bus hold acknowledge state, Th, is entered in 
response to the HOLD input being asserted. In the 
bus hold acknowledge state, the Intel386 OX floats 
all output or bidirectional signals, except for HLDA. 
HLDA is asserted as long as the Intel386 OX re- 
mains in the bus hold acknowledge state. In the bus 
hold acknowledge state, all inputs except HOLD, 
RESET, BUSY#, 
ERROR#, 
and PEREQ are ig- 
nored (also up to one rising edge on NMI is remem- 
bered for processing when HOLD is no longer as- 
serted). 


IDLErACK~g~EDGE~ 
IDLE 


TI 
Th 
Th 
Th 
TI 


8EOH-8E3H 
[ 
A2-A31, 
M/IOH 
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I 
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NOTE: 
For maximum 
design 
flexibility 
the Intel386 
DX has no 
internal 
pullup 
resistors 
on its outputs. 
Your design 
may 
require 
an external 
pullup 
on ADS# 
and other 
Intel386 
DX outputs 
to keep them 
negated 
during float periods. 


Th may be entered from a bus idle state as in Figure 
5-25 or after the acknowledgement of the current 
physical bus cycle if the LOCK# signal is not assert- 
ed, as in Figures 5-26 and 5-27. If HOLD is asserted 
-during a locked bus cycle, the Intel386 OX may exe- 


cute one unlocked bus cycle before acknowledging 
HOLD. If asserting BS16# requires a second 16-bit 
bus cycle to complete a physical operand transfer, it 
is performed before HOLD is acknowledged, al- 
though the bus state diagrams in Figures 5-13 and 
5-20 do not indicate that detail. 


Th is exited in response to the HOLD input being 
negated. The following state will be Ti as in Figure 
5-25 if no bus request is pending. The following bus 
state will be T1 if a bus request is internally pending, 
as in Figures 5-26 and 5-27. 


Th is also exited in response to RESET being assert- 
ed. 


If a rising edge occurs on the edge-triggered NMI 
input while in Th, the event is remembered as a non- 
maskable interrupt 2 and is serviced when Th is exit- 
ed, unless of course, the Intel386 OX is reset before 
Th is exited. 


5.5.2 
Reset During Hold Acknowledge 


RESET being asserted takes priority over HOLD be- 
ing asserted. Therefore, Th is exited in reponse to 
the RESET input being asserted. If RESET is assert- 
ed while HOLD remains asserted, the Intel386 OX 
drives its pins to defined states during reset, as in 
Table 5·3 Pin State During Reset, and performs 
internal reset activity as usual. 


If HOLD remains asserted when RESET is negated, 
the Intel386 OX enters the hold acknowledge state 
before performing its first bus cycle, provided HOLD 
is still asserted when the Intel386 OX would other- 
wise perform its first bus cycle. If HOLD remains as- 
serted when RESET is negated, the BUSY# input is 
still sampled as usual to determine whether a self 
test is being requested, and ERROR# is still sam- 
pled as usual to determine whether a Intel387 OX 
coprocessor vs. an 80287 (or none) is present. 


5.5.3 
Bus ActiVity During and 
Following Reset 


RESET is the highest priority input signal, capable of 
interrupting any processor activity when it is assert- 
ed. A bus cycle in progress can be aborted at any 
stage, or idle states or bus hold acknowledge states 
discontinued so that the reset state is established. 


RESET should remain asserted for at least 15 CLK2 
periods to ensure it is recognized throughout the In- 
tel386 OX, and at least 80 CLK2 periods if Intel386 
OX self-test is going to be requested at the falling 
edge. RESET asserted pulses less than 15 CLK2 
periods may not be recognized. RESET pulses less 
than 80 CLK2 periods followed by a self-test may 
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READY#[ 


(NE ATED, OR LAST LOCKED CY :E) (FLOATING) 


LOCKI[ 
VALID 1. 
'.---l----- 


[ 
(FLOATING) 
(FLOATING) 
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CYCLE 1 
NON-PIPELINEO 
(READ) 


T1 
T2 
T2 


CYCLE 2 
NON-PIPELINED 
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Tl 
T2 


NOTE: 
HOLD is a synchronous input and can be asserted at any CLK2 edge, provided setup and hold (t23 and t24) require- 
ments are met. This waveform is useful for determining Hold Acknowledge latency. 


cause the self-test to report a failure when no true 
failure exists. The additional RESET pulse width is 
required to clear additional state prior to a valid self- 
test. 


Provided the RESET falling edge meets setup and 
hold times t25 and t26, the internal processor clock 
phase is defined at that time, as illustrated by Figure 
5-28 and Figure 7-7. 


A Intel386 OX self-test may be requested at the time 
RESET is negated by having the BUSY"" input at a 
LOW level, as shown in Figure 5-28. The self-test 
requires (220) + approximately 60 CLK2 periods to 
complete. The self-test duration is not affected by 
the test results. Even if the self-test indicates a prob- 
lem, the Intel386 OX attempts to proceed with the 
reset sequence afterwards. 


After the RESET falling edge (and after the self-test 
if it was requested) the Intel386 OX performs an in- 
ternal initialization sequence for approximately 350 
to 450 CLK2 periods. 


The Intel386 OX samples its ERROR"" input some 
time after the falling edge of RESET and before exe- 
cuting the first ESC instruction. During this sampling 
period BUSY"" must be HIGH. If ERROR"" was 
sampled active, the Intel386 OX employs the 32-bit 
protocol of the Intel387 OX. Even though this proto- 
col was selected, it is still necessary to use a soft- 
ware recognition test to determine the presence or 
identity of the coprocessor and to assure compatibil- 
ity with future processors. (See Chapter 11 of the 
Intel386 OXProgrammer's Reference Manual, Order 
""230985-002). 


CYCLE 1 
PIPELINED 
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T1P 
T21 
T21 


CYCLE 2 
NON-PIPELINED 
(READ) 


T1 
T2 


BEOH-BE3H,A2-A31, 
[ 
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NOTE: 
HOLD is a synchronous input and can be asserted at any CLK2 edge, provided setup and hold (t23 and t24) require- 
ments are met. This waveform is useful for determining Hold Acknowledge latency. 


identifier 
in its OX register. 
The upper 
8 bits of OX 
hold 03h as identification 
of the Intel386 
OX compo- 
nent. The lower 8 bits of OX hold an 8-bit unsigned 
binary 
number 
related 
to 
the 
component 
revision 
level. 
The 
revision 
identifier 
begins 
chronologically 
with a value zero and is subject 
to change 
(typically 
it will be incremented) 
with component 
steppings 
in- 
tended 
to have certain 
improvements 
or distinctions 
from previous 
steppings. 


Upon 
completion 
of 
self-test, 
(if self-test 
was 
re- 
quested 
by 
holding 
BUSY # 
LOW 
at 
least 
eight 
CLK2 
periods 
before 
and after 
the falling 
edge 
of 
RESET), the EAX register will contain 
a signature 
of 
OOOOOOOOhindicating 
the 
Intel386 
OX passed 
its 
self-test 
of microcode 
and major PLA contents 
with 
no 
problems 
detected. 
The 
passing 
signature 
in 
EAX, OOOOOOOOh,applies 
to all Intel386 
OX revision 
levels. Any non-zero 
signature 
indicates 
the Intel386 
OX unit is faulty. 
These 
features 
are intended 
to assist 
Intel386 
OX 
users 
to a practical 
extent. 
However, 
the 
revision 
identifier 
value is not guaranteed 
to change 
with ev- 
ery stepping 
revision, 
or to follow 
a completely 
uni- 
form numerical 
sequence, 
depending 
on the type or 
intention 
of revision, 
or manufacturing 
materials 
re- 
quired to be changed. 
Intel has sole discretion 
over 
these characteristics 
of the component. 


5.7 
COMPONENT 
AND REVISION 
IDENTIFIERS 


To assist 
Intel386 
OX users, the 
Intel386 
OX after 
reset 
holds 
a component 
identifier 
and 
a revision 
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RESET 


~ 15 CLK2 DURATION IF 
NOT GOING TO REQUEST 
SELF-TEST. 


NO SELF-TEST 


(NOTE 1) 


LOW TO 8EGIN SELF-TEST (NOTE 2) 


ERROR" [ 


8EO"-8E3". 
W/R".1oI/10". [ 
HLOA 


A2-A31. 
[ 
O/C".LOCK" 


00-031"[ 
XXXXXXX}--- 
-(FLOATING)----------- 
--- 
-- 
- 
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--- 


NOTES: 
1. BUSY'" should be held stable for 8 CLK2 periods before and after the CLK2 period in which RESET falling edge 
occurs. 
2. If self·test is requested, the Intel386 OX outputs remain in their reset state as shown here and in Table 5-3. 


Intel386TM OX 
Component 
Revision 
Intel386 
OX 
Component 
Revision 
Stepping 
Stepping 
Name 
Identifier 
Identifier 
Name 
Identifier 
Identifier 


80 
03 
03 
DO 
03 
05 
81 
03 
03 
01 
03 
08 


The Intel3B6 OX provides an automatic interface for 
the Intel Intel387 OX numeric floating-point coproc- 
essor. The Intel3B7 OX coprocessor uses an 1/0- 
mapped interface driven automatically by the In- 
tel3B6 OX and assisted by three dedicated signals: 
BUSY#, ERROR#, and PEREQ. 


As the Intel3B6 OXbegins supporting a coprocessor 
instruction, it tests the BUSY# and ERROR# sig- 
nals to determine if the coprocessor can accept its 
next instruction. Thus, the BUSY# and ERROR# 
inputs eliminate the need for any "preamble" bus 
cycles for communication between processor and 
coprocessor. The Intel3B7 OX can be given its com- 
mand opcode immediately. The dedicated signals 
provide instruction synchronization, and eliminate 
the need of using the Intel3B6 OX WAIT opcode 
(9Bh) for Intel3B7 OX coprocessor instruction syn- 
chronization (the WAIT opcode was required when 
8086 or 8088 was used with the 8087 coprocessor). 


Custom coprocessors can be included in Intel386 
OX-based systems, via memory-mapped or 1/0- 
mapped interfaces. Such coprocessor interfaces al- 
Iowa completely custom protocol, and are not limit- 
ed to a set of coprocessor protocol "primitives". In- 
stead, memory-mapped or I/O-mapped interfaces 
may use all applicable Intel3B6 OX instructions for 
high-speed 
coprocessor 
communication. 
The 
BUSY# and ERROR# inputs of the Intel3B6 OX 
may also be used for the custom coprocessor inter- 
face, if ,such hardware assist is desired. These sig- 
nals can be tested by the Intel3B6 OXWAIT opcode 
(9Bh). The WAIT instruction will wait until the 
BUSY# input is negated (interruptable by an NMI or 
enabled INTR input), but generates all exception 16 
fault if the ERROR# pin is in the asserted state 
when the BUSY# goes (or is) negated. If the custom 
coprocessor interface is memory-mapped, protec- 
tion of the addresses used for the interface can be 
provided with the Intel3B6 OX on-.chip paging or 


segmentation mechanisms. If the custom interface 
is I/O-mapped, protection of the interface can be 
provided with the Intel386 OX 10PL (I/O Privilege 
Level) mechanism. 


The Intel387 OX numeric coprocessor interface is 
I/O mapped as shown in Table 5-11. Note that the 
Intel387 OX coprocessor interface addresses are 
beyond the Oh·FFFFh range for programmed I/O. 
When the Intel386 OX supports the Intel387 OX co- 
processor, the Intel386 OX automatically generates 
bus cycles to the coprocessor interface addresses. 


Table 5-11. Numeric Coprocessor 
Port Addresses 


Address In 
Intel387TM OX 
Intel386TM OX 
Coprocessor 
1/0 Space 
Register 


BOOOOOFBh 
Opcode Register 
(32-bit port) 


800000FCh 
Operand Register 
(32-bit port) 


To correctly map the Intel3B7 OXcoprocessor regis- 
ters to the appropriate I/O addresses, connect the 
Intel387 OX coprocessor CMOO# pin directly to the 
A2 output of the Intel3B6 OX. 


5.8.1 
Software 
Testing for 
Coprocessor 
Presence 


When software is used to test for coprocessor (In- 
tel387 OX)presence, it should use only the following 
coprocessor opcodes: FINIT, FNINIT, FSTCW mem, 
FSTSW mem, FSTSW AX. To use other coproces- 
sor opcodes when a coprocessor is known to be not 
present, first set EM = 1 in Intel3B6 OX CRO. 


• 


This section describes the Intel386 OX instruction 
set. A table lists all instructions along with instruction 
encoding diagrams and clock counts. Further details 
of the instruction encoding are then provided in the 
following sections, which completely describe the 
encoding structure and the definition of all fields oc- 
curring within Intel386 OX instructions. 


6.1 
Intel386™ 
DX INSTRUCTION 
ENCODING 
AND CLOCK COUNT 
SUMMARY 


To calculate elapsed time for an instruction, multiply 
the instruction clock count, as listed in Table 6-1 
below, by the processor clock period (e.g. 50 ns for 
a 20 MHz Intel386 OX, 40 ns for a 25 MHz Intel386 
OX, and 30 ns for a 33 MHz Intel386 OX). 


For more detailed information on the encodings of 
instructions refer to section 6.2 Instruction Encod- 
ings. Section 6.2 explains the general structure of 
instruction encodings, and defines exactly the en- 
codings of all fields contained within the instruction. 


Instruction Clock Count Assumptions 
1. The instruction has been prefetched, decoded, 


and is ready for execution. 


intel~ 


2. Bus cycles do not require wait states. 
3. There are no local bus HOLD requests delaying 


processor access to the bus. 


4. No exceptions are detected during instruction ex- 


ecution. 
5. If an effective address is calculated, it does not 


use two general register components. One regis- 
ter, scaling and displacement can be used within 
the clock counts shown. However, if the effective 
address calculation uses two general register 
components, add 1 clock to the clock count 
shown. 


Instruction Clock Count Notation 
1. If two clock counts are given, the smaller refers to 


a register operand and the larger refers to a mem- 
ory operand. 


2. n = number of times repeated. 
3. m = number of components in the nex1instruc- 


tion executed, where the entire displacement (if 
any) counts as one component, the entire imme- 
diate data (if any) counts as one component, and 
each of the other bytes of the instruction and pre- 
fix(es) each count as one component. 


Wait States 
Add 1 clock per wait state to instruction execution 
for each data access. 


CLOCK COUNT 
NOTES 


Real 
Real 
INSTRUCTION 
FORMAT 
Addreas 
Protected 
Addre •• 
Protected 
Mode or 
Vlrtusl 
Mod. or 
Virtual 
Virtual 
Addre •• 
Virtual 
Addr ••• 


8086 
Mode 
8086 
Mode 
Mode 
Mode 


GENERAL 
DATA TRANSFER 


MOV ~ Move: 


Register to Register/Memory 
I 
1000100w 
mod reg 
rim I 
2/2 
2/2 
b 
h 


Register/Memory 
to Register 
I 
1000101w 
mod reg 
rim I 
2/4 
2/4 
b 
h 


Immediate to Register/Memory 
I 
1100011 
w 
modOOO 
r/ml 
immediate data 
2/2 
2/2 
b 
h 


Immediate to Register (short form) 
11011 
w 
'eg 
immediate data 
2 
2 


Memory to Accumulator 
(short form) 
I 
1010000w 
full displacement 
4 
4 
b 
h 


Accumulator 
to Memory (short form) 
I 
1010001w 
full displacement 
2 
2 
b 
h 


Register Memory to Segment Register 
I 
10001110 
rnodsreg3 
r/ml 
2/5 
18/19 
b 
h, i, i 


Segment Register to Register/Memory 
I 
10001100 
modsreg3 
r/ml 
2/2 
2/2 
b 
h 


MOVSX = Move With Sign Extension 


Register From Register/Memory 
I 
00001111 
I 
1011111 
w I mod reg 
r/ml 
3/6 
3/6 
b 
h 


MOVZX 
~ Move With Zero Extension 


Register From Register/Memory 
00001111 
I 
1011011 
w I mod reg 
r/ml 
3/6 
3/6 
b 
h 


PUSH ~ Push: 


Register/Memory 
11111111 
I mod 110 
r/ml 
5 
5 
b 
h 


Register (short form) 
01010 
reg I 
2 
2 
b 
h 


Segment Register (ES, CS, SS 0' OS) 
000s,eg211'O 
I 
2 
2 
b 
h 


Segment Register (FS or GS) 
I 
00001111 
I 10sreg3000 
I 
2 
2 
b 
h 


Immediate 
I 
011010s0 
I immediate data 
2 
2 
b 
h 


PUSHA = Push All 
I 
01100000 
I 
18 
18 
b 
h 


POP ~ Pop 


Register/Memory 
I 
10001111 
I modOOO 
r/ml 
5 
5 
b 
h 


Register (short form) 
101011 
reg I 
4 
4 
b 
h 


Segment Registe, (ES, SS or OS) 
I 000s,eg2 
111 I 
7 
21 
b 
h, i,i 


Segment Registe, (FS or GS) 
I 
00001111 
I 10sreg3001 
I 
7 
21 
b 
h, i,i 


POPA = Pop All 
I 
01100001 
I 
24 
24 
b 
h 


XCHG ~ Exchange 


Register/Memory 
With Register 
I 
1000011w 
I mod reg 
r/ml 
3/5 
3/5 
b,f 
f, h 


Register With Accumulator 
(short form) 
110010 
reg I 
ClkCount 
3 
3 


IN ~ Input from: 


Virtual 
8086 Mode 


Fixed Port 
I 
1110010w 
I 
port number 
t26 
12 
6'/26" 
m 


Variable Port 
I 
1110110w 
I 
t27 
13 
7' 127" 
m 


OUT ~ Output 
to: 


Fixed Port 
I 
1110011 
w I 
port number 
t24 
10 
4'/24" 
m 


Variable Port 
I 
1110111 
w I 
t25 
11 
5'/25" 
m 


LEA ~ Load EA to Register 
I 
10001101 
I mod reg 
r/ml 
2 
2 


• 


CLOCK COUNT 
NOTES 


Real 
Real 
INSTRUCTION 
FORMAT 
Address 
Protected 
Address 
Protected 
Mode or 
Virtual 
Mode or 
Virtual 
Virtual 
Address 
Virtual 
Addreas 
8086 
Mode 
8086 
Mode 
Mode 
Mode 


SEGMENT CONTROL 


LOS ~ Load Pointer 
to OS 
I 
11000101 
mod reg 
rim 
7 
22 
b 
h, i,j 


LES ~ Load Pointer 
to ES 
I 
11000100 
mod reg 
rim 
7 
22 
b 
h, i,j 


LFS ~ Load Pointer 
to FS 
I 00001111 
10110100 
mod reg 
r/ml 
7 
25 
b 
h, i, i 


LGS ~ Load Pointer 
to GS 
I 
00001111 
10110101 
mod reg 
rim I 
7 
25 
b 
h, i, i 


LSS ~ Load Pointer 
to SS 
I 
00001111 
10110010 
mod reg 
rim I 
7 
22 
b 
h, i, J 


FLAG CONTROL 


CLC ~ Clear Carry 
Flag 
I 
11111000 
I 
2 
2 


CLD = Clear Direction 
Flag 
I 
11111100 
I 
2 
2 


CLI = Clear Interrupt 
Enable Flag 
I 
11111010 
I 
8 
8 
m 


CLTS ~ Clear Task Switched 
Flag 
I 00001111 
I 00000110 
I 
6 
6 
c 
i 


CMC ~ Complement 
Carry Flag 
I 
11110101 
I 
2 
2 


LAHF ~ Load AH Into Flag 
10011111 
I 
2 
2 


POPF ~ Pop Flags 
10011101 
I 
5 
5 
b 
h, n 


PUSHF - 
Push Flags 
10011100 
I 
4 
4 
b 
h 


SAHF ~ Store AH Into Flags 
10011110 
I 
3 
3 


STC ~ set Carry Flag 
11111001 
i 
2 
2 


STD ~ set Direction 
Flag 
11111101 
I 
2 
2 


STI ~ Set Interrupt 
Enable Flag 
11111011 
I 
8 
8 
m 


ARITHMETIC 


ADD = Add 


Register to Register 
OOOOOOdw 
mod reg 
r/ml 
2 
2 


Register 
to Memory 
OOOOOOOw 
mod reg 
rim I 
7 
7 
b 
h 


Memory 
to Register 
0000001w 
mod reg 
r/ml 
6 
6 
b 
h 


Immediate 
to Register/Memory 
100000sw 
modOOO 
rim I immediate 
data 
2/7 
2/7 
b 
h 


Immediate 
to Accumulator 
(short form) 
0000010w 
immediate 
data 
2 
2 


ADC ~ Add With Carry 


Register 
to Register 
I 000100dw 
I mod reg 
rim I 
2 
2 


Register to Memory 
I 0001000w 
I mod 
reg 
rim I 
7 
7 
b 
h 


Memory 
to Register 
I 
0001001w 
I rnodreg 
r/ml 
6 
6 
b 
h 


Immediwe 
to Register/Memory 
I 
lOOOOOsw 
Imod010 
r/ml 
immediate 
data 
2/7 
2/7 
b 
h 


Immediate 
to Accumulator 
(short form) 
I 
0001010w 
I 
immediate 
data 
2 
2 


INe = Increment 


Register/Memory 
L1111111w 
I modOOO 
r/ml 
2/6 
2/6 
b 
h 


Register 
(short form) 
~OOO 
-;;J 
2 
2 


SUB ~ Subtract 


Register 
from Register 
I 001010dw 
I mod reg 
r/ml 
2 
2 


CLOCK COUNT 
NOTES 


Real 
Real 
INSTRUCTION 
FORMAT 
Address 
Protected 
Addre •• 
Protected 


Mode or 
Vlrtua' 
Mode or 
Virtual 
Virtual 
Addre •• 
Virtual 
Addre •• 
8086 
Mode 
8088 
Mode 
Mode 
Mode 


ARITHMETIC 
(Continued) 


Register from Memory 
100101 
OOw !modreg 
r/ml 
7 
7 
b 
h 


Memory from Register 
1 0010101 
w ImOd reg 
r/ml 
6 
6 
b 
h 


Immediate from Register/Memory 
11 OOOOOsw 
ImOd 101 
r/ml 
immediate data 
2/7 
2/7 
b 
h 


Immediate from Accumulator 
(short form) 
10010110wl 
immediate data 
2 
2 


SBB ~ Subtract with Borrow 


Register from Register 
1 00011 
Odw Imod reg 
r/ml 
2 
2 


Register from Memory 
1 0001100w 
1mod reg 
r/ml 
7 
7 
b 
h 


Memory from Register 
I 0001101 
w Imod reg 
r/ml 
6 
6 
b 
h 


Immediate from Register/Memory 
1 1 OOOOOsw 
ImOd011 
r/ mI immediate data 
2/7 
2/7 
b 
h 


Immediate from Accumulator 
(short form) 
I 0001110wl 
immediate data 
2 
2 


DEe = Decrement 


Register/Memory 
I 1111111wlreg001 
r/ml 
2/6 
2/6 
b 
h 


Register (short form) 
101001 
regl 
2 
2 


CMP ~ Compare 


Register with Register 
I 00111 
Odw Imod reg 
r/ml 
2 
2 


Memory with Register 
I 00111 
OOw Imod reg 
r/ml 
5 
5 
b 
h 


Register with Memory 
I 0011101w 
Imod reg 
r/ml 
6 
6 
b 
h 


Immediate with Register/Memory 
I 1 OOOOOsw Imod 1 1 1 
r/ mI immediate data 
2/5 
2/5 
b 
h 


Immediate with Accumulator 
(short form) 
1001111 
Ow I 
immediate data 
2 
2 


NEG ~ Change Sign 
1 1111011w 
ImOdOl1 
r/ml 
2/6 
2/6 
b 
h 


AAA ~ ASCII Adjust lor Add 
I 00110111 
1 
4 
4 


AAS - 
ASCII Adjust lor Subtract 
I 00111111 
I 
4 
4 


DAA ~ Decimal Adjust lor Add 
I 00100111 
I 
4 
4 


DAS = Decimal Adjuatlor 
Subtract 
1 00101111 
1 
4 
4 


MUL ~ Multiply (unsigned) 


Accumulator 
with Register/Memory 
1 1 1 1 101 
1 w ImOd 100 
r/ml 


Multiplier-Byte 
12-17/15-20 
12-17/15-20 
b, d 
d, h 
-Word 
12-25/15-28 
12-25/15-28 
b, d 
d, h 
-Doubleword 
12-41/15-44 
12-41/15-44 
b, d 
d, h 


IMUL - 
Integer Multiply (signed) 


Accumulator 
with Register/Memory 
I 1111011wlmOd101 
r/ml 


Multiplier-Byte 
-. 
12-17115-20 
12-17/15-20 
b, d 
d, h 
-Word 
12-25/15-28 
12-25/15-28 
b, d 
d, h 
-Doubleword 
12-41/15-44 
12-41/15-44 
b, d 
d, h 


Register with Register/Memory 
1 00001111 
1 10101111 
Imod reg 
r/ml 


Multiplier-Byte 
12-17115-20 
12-17115-20 
b, d 
d, h 
-Word 
12-25/15-28 
12-25/15-28 
b,d 
d, h 


-Doubleword 
12-41/15-44 
12-41/15-44 
b,d 
d, h 


Register/Memory 
with Immediate to Register I 011010 
s 1 Imodreg 
r/ mI immediate data 


-Word 
13-26/14-27 
13-26/14-27 
b, d 
d, h 
-Doubleword 
13-42/14-43 
13-42/14-43 
b, d 
d, h 


• 


CLOCK COUNT 
NOTES 


Reel 
Real 
INSTRUCTION 
FORMAT 
Address 
Protected 
Addre •• 
Protected 
Mode or 
Virtual 
Mode or 
Virtual 
, 
Virtual 
Addre •• 
Vlrtua' 
Addre •• 
8086 
Mode 
8086 
Mode 
Mode 
Mode 


ARITHMETIC 
(Continued) 


OIV ~ Divide (Unsigned) 


Accumulator 
by Register/Memory 
I 1 1 1 1 01 1 w Imod 1 1 0 
r/ml 


DIVisor-Byte 
14/17 
14/17 
b,e 
e,h 


-Word 
22/25 
22/25 
b,e 
e,h 


-Doubleword 
38/41 
38/41 
b,e 
e,h 


IDiV = Integer Divide (Signed) 


Accumulator 
By Register/Memory 
I 1111011 
w Imod 111 
r/ml 


DiviSOf-8yte 
19/22 
19/22 
b,e 
e,h 


-Word 
27/30 
27/30 
b,e 
e,h 


-ooubleword 
43/46 
43/46 
b,e 
e,h 


AAD = ASCII Adjust for Divide 
I 11010101 
1000010101 
19 
19 


AAM ~ ASCII Adjust for Multiply 
I 11010100 
I 00001010 
I 
17 
17 


CBW ~ Convert Byte to Word 
I 100110001 
3 
3 


CWO = Convert Word to Double Word I 10011001 
I 
2 
2 


LOGIC 


Shift 
Rotate 
Instructions 
Not Through Carry (ROL, ROR, SAL, SAR, SHL, and SHR) 


Register/Memory 
by 1 
11101 
OOOw ImodTTT 
r/ml 
3/7 
3/7 
b 
h 


Register/Memory 
by CL 
11101001 
w Imod TTT 
r/ml 
3/7 
3/7 
b 
h 


Register/Memory 
by Immediate 
Count 
111 OOOOOw ImodTTT 
r/mlimmed B·bit data 
3/7 
3/7 
b 
h 


hrough Carry (RCL and RCR) 


Register/Memory 
by 1 
I 1101 
OOOw ImodTTT 
r/ml 
9/10 
9/10 
b 
h 


Register/Memory 
by CL 
I 1101001w 
ImodTTT 
r/ml 
9/10 
9/10 
b 
h 


Register I Memory by Immediate 
Count I 11 OOOOOw ImodTTT 
r/mlimmed B·bit data 
9/10 
9/10 
b 
h 


TTT 
Instruction 


000 
ROL 


001 
ROR 


010 
RCL 


011 
RCR 


100 
SHL/SAL 


101 
SHR 


111 
SAR 


SHLD ~ Shift Left Double 


Register/Memory 
by Immediate 
I 00001111 
I 10100100 
Imod reg 
rtmlimmed 8-bit data 
3/7 
3/7 


Register/Memory by CL 
I 00001111 
I 10100101 
Imod reg 
r/ml 
3/7 
3/7 


SHRD ~ Shift Right Double 


Register/Memory 
by Immediate 
I 00001111 
I 10101100 
Imod reg 
rIml immed a-bit data 
3/7 
3/7 


Register/Memory by CL 
~111 
I 10101101 
Imodreg 
r/ml 
3/7 
3/7 


AND - 
And 


Register 
to Register 
1001 
OOOdw Imod reg 
r/ml 
2 
2 


CLOCK COUNT 
NOTES 


Reel 
Ree' 
INSTRUCTION 
FORMAT 
Addre •• 
Protected 
Addre •• 
Protected 
Mode or 
Vlrtuel 
Mode or 
Vlrtuel 
Vlrtuel 
Addre •• 
Vlrtuel 
Addre •• 
8086 
Mode 
8086 
Mode 
Mode 
Mode 


LOGIC (Continued) 


Register to Memory 
I 001 
OOOOw 
Imodreg 
r/ml 
7 
7 
b 
h 


Memory to Register 
I 0010001 
w Imodreg 
r/ml 
6 
6 
b 
h 


Immediate to Register/Memory 
I 100000sw 
Imod100 
r/ml 
immediate data 
2/7 
2/7 
b 
h 


Immediate to Accumulator 
(Short Form) 
I 001001 
Ow I immediate data 
2 
2 


TEST ~ And Function 
to Flage, No Result 


Register/Memory 
and Register 
I 1000010w 
Imod reg 
r/ml 
2/5 
2/5 
b 
h 


Immediate Data and Register/Memory 
I 1111011w 
ImodOOO 
r/ml 
immediate data 
2/5 
2/5 
b 
h 


Immediate Data and Accumulator 


I 10101 
DOw I immediate data 
(ShorlForm) 
2 
2 


OR ~ Or 


Register to Register 
I 000010dw!modreg 
r/ml 
2 
2 


Register to Memory 
I 00001 
OOw 
jmodreg 
r/ml 
7 
7 
b 
h 


Memory to Register 
0000101 
w lmodreg 
r/ml 
6 
6 
b 
h 


Immediate to Register/Memory 
100000sw 
Imod001 
rIm I immediate data 
2/7 
2/7 
b 
h 


Immediate to Accumulator 
(Short Form) 
0000 
11 Ow I immediate data 
2 
2 


XOR ~ Exclusive 
Or 


Register to Register 
0011 
OOdw 
!modreg 
r/ml 
2 
2 


Register to Memory 
I 0011 
OOOw 
Imod reg 
r/ml 
7 
7 
b 
h 


Memory to Register 
I 0011001w 
I mod reg 
r/ml 
6 
6 
b 
h 


Immediate to Register/Memory 
I 1 OOOOOsw 
I mod 110 
r/ml 
immediate dats 
2/7 
2/7 
b 
h 


Immediate to Accumulator 
(Short Form) 
I 001101 
Ow I immediate data 
2 
2 


NOT ~ Invert Register/Memory 
I 1111011w 
Imod010 
r/ml 
2/6 
2/6 
b 
h 
Clk 
STRING MANIPULATION 
Count 
Virtual 


CMPS ~ Compere Byte Word 
I 1010011 
wi 
8086 
10 
10 
b 
h 
Mode 


INS ~ Input Byte/Word 
from OX Port 
I 011011 
Ow I 
I 
129 
15 
9'/29" 
b 
h,m 


LODS ~ Loed Byte/Word 
to All 
AX/EAX I 101011 
Ow I 
5 
5 
b 
h 


MOVS ~ Move Byte Word 
I 1010010wl 
8 
8 
b 
h 


OUTS ~ Output Byte/Word 
to OX Port 
I 0110111 
w I 
I 
128 
14 
8'/28" 
b 
h,m 


SCAS ~ seen Byte Word 
I 1010111 
w I 
8 
8 
b 
h 


STOS ~ Store Byte/Word 
from 


AL/AX/EX 
I 1010101 
wi 
5 
5 
b 
h 


XLA T ~ Trenslete 
String 
I 11010111 
I 
5 
5 
h 


REPEATED STRING MANIPULATION 
Repeated by Count in CX or ECX 


REPE CMPS ~ Compere String 


(Find Non-Match) 
I 11110011 
I 1010011 
wi 
5+9n 
5+9n 
b 
h 


• 


CLOCK COUNT 
NOTES 


Real 
Real 
INSTRUCTION 
FORMAT 
Addre •• 
Protected 
Addre •• 
Protected 
Mode or 
Virtual 
Mode or 
Vlrtuel 
Virtual 
Add •••• 
Virtual 
Addr ••• 


8086 
Mode 
8086 
Mode 


Mode 
Mode 


REPEATED STRING MANIPULATION (Continued) 


REPNE CMPS ~ Compare String 
ClkCount 


(Find Match) 
I 11110010 
1010011 
w 
Vlrtua' 
5+9n 
5+9n 
b 
h 
8086 Mode 


REP INS ~ Input String 
I 11110010 
0110110w 
I 
12B+6n 
14+6n 
8+60·/28+60·· 
b 
h, m 


REP LODS = Load String 
I 11110010 
1010110w 
5+6n 
5+6n 
b 
h 


REP MOVS = Move Strlng 
I 11110010 
1010010w 
B+4n 
B+4n 
b 
h 


REP OUTS = Output String 
I 11110010 
0110111 
w 
I 
126+5n 
12+5n 
6 + 5n'/26 
+ 5n" 
b 
h,m 


REPE SCAS = sean String 


(Find Non-All 
AX/EAX) 
I 11110011 
11010111 
w I 
5+Bn 
5+Bn 
b 
h 


REPNE SCAS ~ Seen Strlng 


(Find ALl AX/EAX) 
11111001011010111W! 
5+Bn 
5+Bn 
b 
h 


REP STOS = Store Strlng 
I 11110010 
11010101W 
I 
5+5n 
5+5n 
b 
h 


BIT MANIPULATION 


BSF = Seen BII Forward 
I 00001111 
I 1 0 1 1 1 1 00 
Imod reg 
r/ml 
11+3n 
11+3n 
b 
h 


BSR ~ Seen BII Reverae 
I 00001111 
I 10111101 
lmod reg 
r/ml 
9+3n 
9+3n 
b 
h 


BT = TeatBII 


Register/Memory, 
Immediate 
I 00001111 
! 10111010 
Imod 100 
r/mlimmed B-bit datal 
3/6 
3/6 
b 
h 


Register/Memory, 
Register 
I 00001111 
I 10100011 
!modreg 
r/ml 
3/12 
3/12 
b 
h 


BTC ~ Teat BII and Complement 


Register/Memory,lmmediate 
I 00001111 
I 1 011 
1 0 1 0 Imod 1 1 1 
r/m!immed B-bit datal 
6/B 
6/B 
b 
h 


Register/Memory, 
Register 
I 00001111 
I 1 0 1 1 1 0 1 1 Imod reg 
r/ml 
6/13 
6/13 
b 
h 


BTR - 
Te.t 
BII and Re.et 


Register/Memory, 
Immediate 
I 0000 
1 1 1 1 I 1 0 1 1 1 0 1 0 Imod 1 1 0 
rIml;mmed B-bit datal 
6/B 
6/B 
b 
h 


Register/Memory, 
Register 
100001111 
110110011 
!mOdreg 
r/ml 
6/13 
6/13 
b 
h 


BTS = Te.t 
BII and Set 


Register/Memory, 
Immediate 
I 00001111 
110111010 
Imod 101 
r/mlimmed 
a-bit data 
6/B 
6/B 
b 
h 


Register/Memory, 
Register 
I 00001111 
I 10101011 
Imod reg 
r/ml 
6/13 
6/13 
b 
h 


CONTROL TRANSFER 


CALL ~ Call 


Direct Within Segment 
I 
1 1 1 0 1 0 0 0 I full displacement 
7+m 
7+m 
b 
r 


Register/Memory 


Indirect Within Segment 
I 11111111 
ImodO 1 0 
r/ml 
7+m/ 
7+ml 
b 
h, r 
10+m 
to+m 


Direct Intersegment 
I 1 0 0 1 t 0 1 0 Iunsigned full offset, selector 
17+m 
34+m 
b 
I,k,r 


NOTES: 
t Clock 
count 
shown 
applies 
if I/O'permission 
allows 
I/O to the port in virtual 
8086 
mode, 
If I/O bit map denies 
permission 


exception 
13 fault occurs; 
refer to clock 
counts 
for INT 3 instruction, 
• If CPL 
:S: 10PL 
•• 
If CPL > 10PL 


CLOCK COUNT 
NOTES 


Real 
R.el 
INSTRUCTION 
FORMAT 
Addre •• 
Protected 
Addr ••• 
Protected 
Mode or 
Vlrtuel 
Mode or 
Vlrtuel 
Vlrtuel 
Addr ••• 
Vlrtuel 
Address 
8086 
Mod. 
8086 
Mod. 
Mod. 
Mod. 


CONTROL 
TRANSFER 
(Continued) 


Protected Mode Only (Oirecllntersegment) 


Via Call Gate to Same Privilege Level 
52+m 
h,j,k,r 


Via Call Gate to Different Privilege Level, 


(No Parameters) 
86+m 
h,j,k,r 


Via Call Gate to Different Privilege Level. 


(x Parameters) 
94+4x+m 
h,j,k,r 


From 80286 Task 1080286 TSS 
273 
h,j,k,r 


From B0286 Task 10Inlel3B6 OX TSS 
298 
h,j,k,r 


From B02B6 Task 10Virtual BOB6Task (Inte1386 OX TSS) 
218 
h,j,k,r 


From Intel386 OX Task 10B0286 TSS 
273 
h,j,k,r 


From Inlel386 OX Task 10 Inlel386 OX TSS 
300 
h,j,k,r 


From Inlel386 OX Task 10Virtual B086 Task (Inte1386 OX TSS) 
21B 
h,j,k,r 


Indirect Intersegment 
I 11111111 
ImodO 11 
r/ml 
22+m 
3B+m 
b 
h,j,k,r 


Protected Mode Only (Indirect Inlersegmenl) 


Via Call Gate to Same PriVilege Level 
56+m 
h,j,k,r 


Via Call Gate to Different Privilege Level, 


(No Parameters) 
90+m 
h,j,k,r 


Via Call Gate to Different Privilege Level, 


(x Parameters) 
98+4x+m 
h,j,k,r 


From 802B6 Task to B02B6 TSS 
278 
h,j,k,r 


From B0286 Task to Inlel386 OX TSS 
303 
h,j,k,r 


From 80286 Task to Virtual 8086 Task (Inlel3B6 OX TSS) 
222 
h,j,k,r 


From Inlel386 OX Task to 80286 TSS 
278 
h,j,k,r 


From Inlel386 OX Task to Inlel3B6 OX TSS 
305 
h,j,k,r 


From Intel386 OX Task to Virtual 8086 Task (Inle1386 OX TSS) 
222 
h,j,k,r 


JMP ~ Unconditional 
Jump 


Short 
I 1 t 101011 
la-bit diSPlacementl 
7+m 
7+m 
r 


Direct within Segment 
I 11101001 
I full displacement 
7+m 
7+m 
r 


Register/Memory 
Indirect within Segment 
111111111 
lmod 1 00 
r/ml 
7+ml 
7+ml 
b 
h,r 
to+m 
to+m 


Direct Intersegment 
I 1 1 1 0 1 01 0 lunsigned full offset, selector 
12+m 
27+m 
j,k,r 


Protected Mode Only (Direct Intersegment) 


Via Call Gate to Same Privilege Level 
45+m 
h,j,k,r 


From B0286 Task to 802B6 TSS 
274 
h,j,k,r 
From B0286 Task to Inlel386 OX TSS 
301 
h,j,k,r 


From B0286 Task to Virtual B086 Task (Inte1386 OX TSS) 
219 
h,),k.r 


From Inlel386 OX Task 10B0286 TSS 
270 
h.j,k,r 


From Int81386 OX Task 10 Intel386 OX TSS 
303 
h,j,k,r 


From Inl81386 OX Task 10Virtual B086 Task (Intel3B6 OX TSS) 
221 
h,j,k,r 


Indirect Intersegment 
I 11111111 
Imod 101 
r/ml 
17+m 
31+m 
b 
h,J,k,r 


Protected Mode Only (Indirect lntersegment) 


Via Call Gate to Same Privilege Level 
49+m 
h,j,k,r 


From 802B6 Task 1080286 TSS 
279 
h,j,k,r 


From 80286 Task 10Intel386 OX TSS 
306 
h,j,k,r 
From 80286 Task 10Virtual 8086 Task (Inle1386 OX TSS) 
223 
h,j,k,r 
From Inlel386 OX Task to B0286 TSS 
275 
h.j,k,r 
From Inlel386 OX Task to Inl81386 OX TSS 
308 
h,j,k,r 
From Inlel386 OX Task to Virtual 8086 Task (Inle1386 OX TSS) 
225 
h,j,k,r 


• 


intel~ 


CLOCK COUNT 
NOTES 


Real 
Real 
INSTRUCTION 
FORMAT 
Add,e •• 
P,otected 
Add,e •• 
Protected 
Mode or 
Virtual 
Mode 0' 
Virtual 
Virtual 
Add,e •• 
Virtual 
Add'e •• 
8086 
Mode 
8088 
Mode 
Mode 
Mode 


CONTROL TRANSFER 
(Continued) 


RET ~ Return f,om CALL: 


Within Segment 
I 
"0000' 
, I 
10 + m 
'0+ 
m 
b 
g, h,' 


Within segment Adding Immediate to SP 
I 
"0000'0 
I 
'6-brtdispl 
I 
'0 + m 
10 + m 
b 
g, h,' 


lntersegment 
I 
, , 00'0' 
, I 
'B + m 
32+m 
b 
g, h, j, k,' 


Intersegment 
Adding Immediate to SP 
I 
"00'0'0 
I 
'6-bit displ 
I 
'B + m 
32+m 
b 
g, h, j, k,' 


P,otected Mode Only (REl): 


to Different Privilege Level 


Intersegment 
69 
h,j, k,' 
Intersegment 
Adding Immediate to SP 
69 
h, j, k,' 


CONDITIONAL JUMPS 


NOTE: Times Are Jump "Taken or Not Taken" 


JO ~ Jump on Overflow 


B-Bit Displacement 
I 
0"'0000 
I 
B-bitdispl 
I 
7+mor3 
7 + mor3 
, 


Full Displacement 
I 0000' 
, , , I '0000000 
I full displacement 
7+mor3 
7 + mor3 
r 


JNO - 
Jump on Not Overflow 


a-Bit Displacement 
I 
01'1000' 
I 
B-bit displ 
I 
7 + mor3 
7 + mor3 
r 


Full Displacement 
I 
0000' 
, , , I 
'000000' 
I full displacement 
7 + mor3 
7 + m or3 
, 


JB/JNAE 
~ Jump on Below/Not 
Above 0' Equal 


a-Bit Displacement 
I 0"'00'0 
I 
B-bildispl 
I 
7 + mor3 
7 + mor3 
, 


Full Displacement 
I 0000"" 
I 
, 0 0 0 0 0 , 0 I full displacement 
7 + mor3 
7 + m or3 
, 


JNB/JAE 
- 
Jump on Not Below/Above 
0' Equal 


8-Bit Displacement 
I 0' 
"00" 
I 
B-bit displ 
I 
7 + mor3 
7 + mor3 
, 


Full Displacement 
I 0000' 
, " 
I '00000" 
I full displacement 
7+mor3 
7+mor3 
, 


JE/ JZ ~ Jump on Equal/Ze,o 


a-Bit Displacement 
I 0"'0'00 
I 
B-bitdispl 
I 
7 + m or3 
7 + mor3 
r 


Full Displacement 
I 0000'1'1 
I 
'0000'00 
I full displacement 
7 + mor3 
7 + mor3 
r 


JNE/JNZ 
~ Jump on Not Equal/Not 
Ze,o 


&..Sit Displacement 
I 0" 
, 0 1 0' 
I 
B-bitdispl 
I 
7+mor3 
7 + mor3 
r 


Full Displacement 
I 
0000"" 
I '0000'0' 
I full displacement 
7 + mor3 
7 + mor3 
r 


JBE/JNA 
~ Jump on Below 0' Equal/Not 
Above 


8-Bit Displacement 
I 
0' 
, , 0' 
, 0 I 
B-bit displ 
I 
7 + mor3 
7 + mor3 
, 


Full Displacement 
I 0000' 
, , , I '0000"0 
I full displacement 
7 + mor3 
7+mor3 
, 


JNBE/ JA ~ Jump on Not Below 0' Equal/ Above 


e-Bit Displacement 
I 0" 
, 0"1 
I 
B-bitdispl 
I 
7 + mor3 
7+mor3 
, 


Full Displacement 
I 0000' 
, , , I 
'0000'" 
Ifull displacement 
7 + mor3 
7 + mor3 
r 


JS ~ Jump on Sign 


8-Bit Displacement 
I 0""000 
I 
B-bit displ 
I 
7 + mor3 
7 + mor3 
, 


Full Displacement 
I 0000' 
, , , I '000'000 
I full displacement 
7 + mor3 
7 + mor3 
, 


CLOCK COUNT 
NOTES 


Real 
Re81 
INSTRUCTION 
FORMAT 
Addre •• 
Protected 
Addre •• 
Protected 
Mode or 
Vlrtuel 
Mode or 
Virtual 
Vlrtuel 
Addre •• 
Virtual 
Addre •• 
8086 
Mode 
8086 
Mode 
Mode 
Mod. 


CONDITIONAL 
JUMPS 
(Continued) 


JNS ~ Jump on Not Sign 


8·81t Displacement 
I 01111001 
, 
S-brtdispl 
, 
7 + mer3 
7+mor3 
r 


Full Displacement 
I 00001111 
I 10001001 
I full displacement 
7 + mor3 
7 + mor3 
r 


JP/JPE 
~ Jump on Parlty/Parlty 
Even 


8-Bit Displacement 
, 
01111010 
I 
S-bitdispl 
I 
7+mor3 
7 + mor3 
r 


Full Displacement 
, 
00001111 
, 
10001010 
I full diS~lacement 
7 + m or3 
7+mor3 
r 


JNP/JPO 
~ Jump on Not ParilylParlty 
Odd 


8-Bit Displacement 
, 
01111011 
, 
S-bitdispl 
I 
7 + mer3 
7 + mer3 
r 


Full Displacement 
I 
00001111 
, 
10001011 
Itull displacement 
7 + m or3 
7 + mor3 
r 


JL/JNGE 
= Jump on Le •• /Not 
Greater 
or Equal 


8·Bit Displacement 
I 
01111100 
, 
S-bit displ 
, 
7 + mor3 
7+mor3 
r 


Full Displacement 
I 00001111 
, 
10001100 
I full displacement 
7 + mor3 
7+mor3 
r 


JNL/JGE 
~ Jump on Not LesslGreater 
or Equal 


8·Bit Displacement 
I 
01111101 
I 
S-bit displ 
, 
7 + mer3 
7 + m or 3 
r 


Full Displacement 
, 
00001111 
I 
10001101 
I full displacement 
7 + mer3 
7 + mer3 
r 


JLE/JNG 
- 
Jump on Le•• or Equal/Not 
Greater 


8-Blt Displacement 
I 01111110 
I 
S-bit displ 
, 
7 + mer3 
7+mor3 
r 


Full Displacement 
~11 
I 
10001110 
I full displacement 
7 + mer3 
7 + m or 3 
r 


JNLE/JG 
= Jump on Not Less or Equal/Greater 


8-Bit Displacement 
, 
01111111 
I 
S-bit displ 
, 
7 + mer3 
7 + mer3 
r 


Full Displacement 
, 
00001111 
, 
10001111 
I full displacement 
7 + mor3 
7 + mar3 
r 


JCXZ ~ Jump on CX Zero 
, 
11100011 
I 
S-bit displ 
, 
9 + marS 
9 + marS 
r 


JECXZ 
~ Jump on ECX Zero 
, 
11100011 
I 
S-bit displ 
, 
9 + marS 
9 + morS 
r 


(Address Size Prefix Differentiates 
JCXZ from JECXZ) 


LOOP ~ Loop CX Times 
, 
11100010 
I 
S-bitdispl 
, 
11 + m 
11 + m 
r 


LOOPZ/LOOPE 
~ Loop with 
, 
I 
, 
Zero/Equal 
11100001 
S-bit displ 
11 + m 
11 + m 
r 


LOOPNZlLOOPNE 
~ Loop While 
I 
I 
, 
Not Zero 
11100000 
S-bit displ 
11 + m 
11 + m 
r 


CONDITIONAL 
BYTE SET 


NOTE: Times Are Register/Memory 


SETO ~ set Byte on Overflow 


To Register/Memory 
, 
00001111 
, 
10010000 
, madOOO 
rIm' 
4/5 
4/5 
h 


SETNO ~ set Byte on Not Overflow 


To Register/Memory 
I 
00001111 
, 
10010001 
, madOOO 
rIm' 
4/5 
4/5 
h 


SETB/SETNAE 
~ set Byte on Below INot 
Above 
or Equal 


To Register/Memory 
I 
00001111 
, 
10010010 
, madOOO 
rIm' 
4/5 
4/5 
h 


• 


CLOCK COUNT 
NOTES 


Real 
Real 
INSTRUCTION 
FORMAT 
Addre •• 
Protected 
Addre •• 
Protected 
Mode or 
Virtual 
Mode or 
Virtual 
Virtual 
Addre •• 
Virtual 
Addre •• 


8086 
Mode 
8086 
Mode 


Mode 
Mode 


CONDITIONAL 
BYTE SET (Conbnued) 


SETNB ~ Set Byte on Not Below I Above or Equal 


To Register/Memory 
I 
00001'1' 
I 
10010011 
I modOOO 
r/ml 
4/5 
4/5 
h 


SETE/SETZ 
~ Set Byte on Equal/Zero 


To Register/Memory 
I 
0000111' 
I 
'0010'00 
I modOOO 
r/ml 
4/5 
4/5 
h 


SETNE/SETNZ 
~ Set Byte on Not Equal/Not 
Zero 


To Register/Memory 
I 
00001111 
I '0010101 
I modOOO 
r/ml 
4/5 
4/5 
h 


SETBE/SETNA 
~ Set Byte on Below or Equal/Not 
Above 


To Register/Memory 
I 
0000'1'1 
I 
'00101'0 
I modOOO 
r/ml 
4/5 
4/5 
h 


SETNBE/SETA 
= Set Byte on Not Below or Equal/Above 


To Register/Memory 
I 
0000'1'1 
I 
10010111 
I modOOO 
r/ml 
4/5 
4/5 
h 


SETS ~ Set Byte on Sign 


To Register I Memory 
I 
00001111 
I 
100'1000 
I modOOO 
rIm I 
4/5 
4/5 
h 


SETNS ~ Set Byte on Not Sign 


To Register/Memory 
I 
0000'111 
I 
'001'001 
I modOOO 
r/ml 
4/5 
4/5 
h 


SETPISETPE ~ Set Byte on Parity IParlty 
Even 


To Register/Memory 
I 
0000'111 
I 
100'10'0 
I modOOO 
rIm I 
4/5 
4/5 
h 


SETNP/SETPO 
= Set Byte on Not ParltylParlty 
Odd 


To Register/Memory 
I 
0000'1'1 
I 
'001'0'1 
I modOOO 
rIm I 
4/5 
4/5 
h 


SETL/SETNGE 
= Set Byte on Le•• lNot 
Greater or Equal 


To Register/Memory 
I 
0000'1'1 
I 
10011100 
I modOOO 
r/ml 
4/5 
4/5 
h 


SETNLlSETGE 
~ Set Byte on Not Le•• /Greater 
or Equal 


To Register/Memory I 
0000'1'1 
I 
01'11101 
I modOOO 
r/ml 
4/5 
4/5 
h 


SETLE/SETNG 
= Set Byte on Leaa or EquallNot 
Greater 


To Register/Memory 
I 
0000'111 
I 
'001'1'0 
I modOOO 
r/ml 
4/5 
4/5 
h 


SETNLE/SETG 
~ Set Byte on Not Le•• or EquallGreater 


To Register/Memory 
I 
00001111 
I '001'1'1 
I modOOO 
r/ml 
4/5 
4/5 
h 


ENTER = Enter Procedure 
I 
l' 
00 1 000 
I 16-bit displacement, 8-bitlevel 
I 


L=O 
10 
'0 
b 
h 


L = 1 
12 
12 
b 
h 
L> 
1 
15 + 
15 + 
b 
h 


4(n - 
1) 
4(n - 
1) 


LEAVE ~ Leave Procedure 
I 
'100'001 
I 
4 
4 
b 
h 


CLOCK COUNT 
NOTES 


Real 
Real 
INSTRUCTION 
FORMAT 
Addre •• 
Protected 
Addrea. 
Protected 
Mode or 
Virtual 
Mode or 
Virtual 
Virtual 
Addre •• 
Virtual 
Addre •• 
8086 
Mode 
8086 
Mode 
Mode 
Mode 


INTERRUPT 
INSTRUCTIONS 


INT = Interrupt: 


Type Specified 
I 
11001101 
I 
type 
I 
37 
b 


Type 3 
I 
11001100 
I 
33 
b 


INTO ~ Interrupt 
4 II Overflow 
Flag Set I 
11001110 
I 


If OF ~ 1 
35 
b,e 


IIOF 
- 
0 
3 
3 
b,e 


Bound 
~ Interrupt 
511 Detect 
Value 
I 01100010 
I mod reg 
rIm I 


Out 01 Range 


If Out of Range 
44 
b,e 
e,g, h,i, k, r 


II In Range 
10 
10 
b,e 
e,g, h,i, k,r 


Protected 
Mode Only (INn 


INT: Typa Spaclfled 


Via Interrupt or Trap Gate 


to Same 
Privilege Level 
59 
g, i, k, r 


Via Interrupt or Trap Gate 


to Different 
Privilege Level 
99 
g, i, k, r 


From 80286 Task to 80286 TSS via Task Gale 
282 
g, i, k, r 
From 80288 Task to Intel386 OX TSS via Task Gate 
309 
g,i, k, r 
From 80288 Task to virt 8086 md via Task Gate 
228 
g,i, k, r 


From Intel386 OX Task to 80286 TSS via Task Gate 
284 
g,i, k, r 
From Intel386 OX Task to Intel386 OX TSS via Task Gate 
311 
g, i, k, r 
From Intel386 OX Task to virt 8086 md via Task Gate 
228 
g, i, k, r 


From virt 8086 md to 80286 TSS via Task Gate 
289 
g, i, k, r 


From virt 8086 
md to Intel386 
OX TSS via Task Gate 
316 
g, i, k, r 


From virt 8086 
md to priv level 0 via Trap Gate or Interrupt Gate 
119 


INT:TYPE 
3 


Via Interrupt or Trap Gate 


to Same 
Privilege Level 
59 
g, i, k, r 


Via Interrupt or Trap Gate 


to Different 
Privilege Level 
99 
g, i, k, r 
From 80286 Task to 80286 TSS via Task Gate 
278 
g, i, k, r 
From 80286 Task to Intel386 OX TSS via Task Gate 
305 
g, i, k, r 
From 80286 Task to Virt 8086 md via Task Gate 
222 
g,i, k, r 
From Intel386 OX Task to 80286 TSS via Task Gate 
280 
g,i, k, r 
From Intel386 OX Task to Intel386 OX TSS via Task Gate 
307 
g, i, k, r 
From Intel386 OX Task to Virt 8086 md via Task Gate 
224 
g,i, k, r 
From virt 8086 md to 80286 TSS via Task Gate 
285 
g, i, k, r 


From virt 8086 
md to Intel386 
OX TSS via Task Gate 
312 
g,i, k, r 


From virt 8086 md to priv level 0 via Trap Gate or Interrupt Gate 
119 


INTO: 


Via Interrupt or Trap Grate 


to Same 
Privilege Level 
59 
g, i, k, r 


Via Interrupt or Trap Gate 


to Different 
Privilege Level 
99 
g, i, k, r 
From 80286 Task to 80286 TSS via Task Gate 
280 
9, i, k, r 
From 80286 Task to Intel386 OX TSS via Task Gate 
307 
g, i, k, r 


From 80286 
Task to virt 8086 md via Task Gate 
224 
g, i, k, r 
From Intei386 OX Task to 80286 TSS via Task Gate 
282 
g, i, k, r 
From Intel386 OX Task to Inlel386 OX TSS via Task Gate 
309 
g, i, k, r 
From Intel386 
OX Gate 
225 
9, i, k, r 


From virt 8086 
md to 80286 
TSS via Task Gate 
287 
g,i, k, r 
From virt 8086 md to Intel386 OX TSS via Task Gate 
314 
g, i, k, r 


From virt 8086 
md to priv level 0 via Trap Gate or Interrupt Gate 
119 


• 


CLOCK COUNT 
NOTES 


Real 
Raal 
INSTRUCTION 
FORMAT 
Addre •• 
Protected 
Addre •• 
Protected 
Modaor 
Virtual 
Mode or 
Virtual 
Virtual 
Addre •• 
Virtual 
Addre •• 
8086 
Mode 
8086 
Mode 
Mode 
Mode 


INTERRUPT 
INSTRUCTIONS 
(Continued) 


BOUND: 


Via Interrupt or Trap Gate 


to Same Privilege Level 
59 
g, i, k, r 
Via Interrupt or Trap Gate 


to Different Privilege Level 
99 
g, j, k, r 
From 80286 Task to 80286 TSS via Task Gate 
254 
g, i, k, r 
From 80286 Task to Intel386 OX TSS via Task Gate 
284 
g,i, k, r 
From 80268 Task to virt 8086 Mode via Task Gate 
231 
g,i, k, r 
From Intel386 OX Task to 80286 TSS via Task Gate 
264 
g,i, k, r 
From Intel386 OX Task to Intel386 OX TSS via Task Gate 
294 
g, i, k, r 
From 80368 Task to virt 8086 Mode via Task Gate 
243 
g,i, k, r, 


From virt 8086 Mode to 80286 TSS via Task Gate 
264 
g,i, k,r 
From virt 8086 Mode to Intel386 OX TSS via Task Gate 
294 
g,i, k,r 
From virt 8086 md to pnv level 0 via Trap Gate or Interrupt Gate 
119 


INTERRUPT 
RETURN 


IRET ~ Interrupt 
Return 
I 
11001111 
I 
22 
g, h, i, k, r 


Protected 
Mode Only (IRET) 


To the Same Privilege Level (within task) 
38 
g, h,i, k,r 
To Different Privilege Level (within task) 
82 
g, h,i, k, r 
From 80286 Task to 80286 TSS 
232 
h, i, k, r 
From 80286 Task to Intel386 OX TSS 
265 
h, i, k, r 
From 80286 Task to Virtual 8086 Task 
213 
h, i, k, r 
From 80286 Task to Virtual 8086 Mode (within task) 
60 
From Intel386 OX Task to 80286 TSS 
271 
h, i, k, r 
From intel386 OX Task to Intel386 OX TSS 
275 
h, i, k, r 
From Intel386 OX Task to Virtual 8086 Task 
223 
h, i, k, r 
From Intel386 OX Task to Virtual 8086 Mode (within task) 
60 


PROCESSOR CONTROL 


HLT 
= HALT 
I 
11110100 
I 
5 
5 
I 


MOV 
= Move to and From Control/Deb 
g/Teat 
Regloter 


CRO/CR2/CR3 
from register 
00001111 
00100010 
11 eee reg 
11/4/5 
11/4/5 
1 


Register From CRO-3 
00001111 
00100000 
1 1 eee reg 
6 
6 
1 


DRO-3 From Register 
00001111 
00100011 
11 eee reg 
22 
22 
1 


DR6-7 
From Register 
00001111 
00100011 
11 eeereg 
16 
16 
J 


Register from DR6-7 
I 00001111 
I 00100001 
11 eeereg 
14 
14 
1 


Register from DAO-3 
I 
00001111 
00100001 
1 t ~eereg 
22 
22 
1 


TR6-7 
from Register 
I 
00001111 
00100110 
11 eooreg 
12 
12 
J 


Register from TR6-7 
I 
00001111 
00100100 
11 eeereg 
12 
12 
J 


NOP 
= No Operation 
I 
10010000 
3 
3 


WAIT=Walt 
until BUSY# 
pin 10 negated 
[ 
10011011 
7 
7 


CLOCK COUNT 
NOTES 


Real 
Real 
INSTRUCTION 
FORMAT 
Address 
Protected 
Address 
Protected 
Mode or 
Virtual 
Mode or 
Virtual 
Virtual 
Address 
Virtual 
Address 
8086 
Mode 
8086 
Mode 
Mode 
Mode 


PROCESSOR EXTENSION INSTRUCTIONS 


Processor 
Extension 
Escape 
111011 
TTT 
ImodLLL 
r/ml 
see 
h 


TIT 
and LLL bits are opcode 
80287/80lntel387 


information 
for coprocessor. 
data sheets for 


clock counts 


PREFIX BYTES 


Addrell 
Size Prell. 
I 
01100111 
I 
0 
0 


LOCK ~ BUI Lock Prell. 
I 
11110000 
I 
0 
0 
m 


Operand Size Prell. 
I 
01100110 
! 
0 
0 


segment Override Prell. 


CS: 
I 00101110 
0 
0 


OS: 
I 00111110 
0 
0 


ES: 
I 00100110 
0 
0 


FS: 
I 01100100 
0 
0 


GS: 
I 01100101 
0 
0 


55: 
I 00110110 
0 
0 


PROTECTION CONTROL 


ARPL 
~ Adjult 
Requelted 
Privilege Level 


From Register/Memory 
I 01100011 
I mod reg 
rim! 
N/A 
20/21 
a 
h 


LAR 
= Load Aceesa Rights 


From Register/Memory 
I 00001111 
I 
00000010 
I mod reg 
r/ml 
N/A 
15/16 
a 
g, h,i, P 


LGOT 
= Load Global Descriptor 


Table 
Register 
I 00001111 
I 
00000001 
ImodOl0 
r/ml 
11 
11 
b,c 
h,\ 


LIOT 
= Load Interrupt Descriptor 


Table 
Register 
I 00001111 
I 
00000001 
I mod011 
rim! 
11 
11 
b, c 
h,l 


LLOT 
= Load Local Descriptor 


Table 
Register 
to 
I 
I 
Imod010 
rim! 
Register/Memory 
00001111 
00000000 
N/A 
20/24 
a 
g, h,i,l 


LMSW ~ Load Machine StatuI Word 


From Register/Memory 
I 
00001111 
I 
00000001 
I mod 11 0 
rim! 
11/14 
11/14 
b, c 
h,l 


LSL 
~ Load segment Limit 


From Register/Memory 
I 
00001111 
I 00000011 
I mod reg 
r/ml 


Byte-Granular 
Limit 
N/A 
21/22 
a 
g, h, i, p 


Page-Granular 
Limit 
N/A 
25/26 
a 
g, h,i, P 


LTR 
~ Load Talk Regllter 


From Register/Memory 
I 
00001111 
I 00000000 
I modO 11 
rim! 
N/A 
23/27 
a 
g, h, i,l 


SGOT 
= Store Global Descriptor 


Table Regllter 
I 00001111 
I 
00000001 
ImodOOO 
rim! 
9 
9 
b, c 
h 


SlOT 
= Store Interrupt Descrtptor 


Table Regllter 
I 00001111 
I 00000001 
Imod001 
rim! 
9 
9 
b, c 
h 


SLOT 
~ Store Local Delcriptor 
Table Regllter 


To Register/Memory 
I 
00001111 
I 
00000000 
I modOOO 
rim! 
N/A 
2/2 
a 
h 


• 
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CLOCK COUNT 
NOTES 


Real 
Real 
INSTRUCTION 
FORMAT 
Addra •• 
Protected 
Addra •• 
Protected 
Mode or 
Virtual 
Mode or 
Virtual 
Virtual 
Address 
Virtual 
Addre •• 


8086 
Mode 
8088 
Mode 
Mode 
Mode 


SMSW 
= Store Machine 


I 
I 
ImOd100 
r/ml 
Statu. 
Word 
00001111 
00000001 
2/2 
2/2 
b,c 
h,t 


STR 
~ Store Ta.k 
Regl.ter 


To Register/Memory 
I 
00001111 
I 
00000000 
I mod001 
r/ml 
N/A 
2/2 
a 
h 


VERR 
~ Verily 
Read Acce ••• 


Register/Memory 
I 
00001111 
I 
00000000 
Imod100 
r/ml 
N/A 
10/11 
a 
9, h,i, P 


VERW 
= Verily 
Write Acee ••• 
I 
00001111 
I 00000000 
Imod 1 01 
rim I 
N/A 
15/16 
a 
9, h,i, P 


INSTRUCTION 
NOTES 
FOR TABLE 
6-1 


Notes 
a through 
c apply 
to 
Intel386 
OX Real Address 
Mode 
only: 
a. This is a Protected 
Mode 
instruction. 
Attempted 
execution 
in Real Mode will result in exception 
6 (invalid 
opcode). 
b. Exception 
13 fault 
(general 
protection) 
will 
occur 
in Real 
Mode 
if an operand 
reference 
is made 
that 
partially 
or fully 


extends 
beyond 
the maximum 
CS, OS, ES, FS or GS limit, FFFFH. 
Exception 
12 fault 
(stack 
segment 
limit violation 
or not 


present) 
will occur in Real Mode if an operand 
reference 
is made that partially 
or fully extends 
beyond 
the maximum 
SS limit. 


c. This instruction 
may be executed 
in Real Mode. 
In Real Mode, 
its purpose 
is primarily 
to initialize 
the CPU for Protected 


Mode. 


Notes 
d through 
g apply 
to Intel386 
OX Real Address 
Mode 
and 
Intel386 
OX Protected 
Virtual 
Address 
Mode: 
d. The Intel386 
OX uses an early-out 
multiply 
algorithm. 
The actual 
number 
of clocks 
depends 
on the position 
of the most 


signi,ficant 
bit in the operand 
(multiplier). 
Clock 
counts 
given are minimum 
to maximum. 
To calculate 
actual 
clocks 
use the following 
formula: 


Actual 
Clock 
= if m < > 0 then 
max ([Iog2 Imll. 
3) + 
b clocks: 
if m = 0 then 3+b 
clocks 
In this formula, 
m is the multiplier, 
and 
b = 9 for register 
to register, 
b = 12 for memory 
to register, 


b = 10 for register 
with immediate 
to register, 


b = 11 for memory 
with immediate 
to register. 


e. An exception 
may occur, 
depending 
on the value 
of the operand. 
f. LOCK# 
is automatically 
asserted, 
regardless 
of the presence 
or absence 
of the LOCK# 
prefix. 


g. LOCK # is asserted 
during 
descriptor 
table accesses. 


Notes 
h through 
r apply 
to Intel386 
OX Protected 
Virtual 
Address 
Mode 
only: 
h. Exception 
13 fault (general 
protection 
violation) 
will occur 
if the memory 
operand 
in CS, OS, ES, FS or GS cannot 
be used 


due to either 
a segment 
limit violation 
or access 
rights violation. 
If a stack 
limit is violated, 
an exception 
12 (stack 
segment 
limit violation 
or not present) 
occurs. 
i. For segment 
load operations, 
the CPL, RPL, and OPL must agree 
with the privilege 
rules to avoid 
an exception 
13 fault 


(general 
protection 
violation). 
The segment's 
descriptor 
must indicate 
"present" 
or exception 
11 (CS, OS, ES, FS, GS not 


present). 
If the SS register 
is loaded 
and a stack 
segment 
not present 
is detected, 
an exception 
12 (stack 
segment 
limit 


violation 
or not present) 
occurs. 


j. All segment 
descriptor 
accesses 
in the GOT or LOT made by this instruction 
will automatically 
assert 
LOCK# 
to maintain 


descriptor 
integrity 
in multiprocessor 
systems. 
k. JMP, 
CALL, 
INT, 
RET 
and 
IRET 
instructions 
referring 
to another 
code 
segment 
will cause 
an exception 
13 (general 
protection 
violation) 
if an applicable 
privilege 
rule is violated. 
I. An exception 
13 fault occurs 
if CPL is greater 
than 0 (0 is the most privileged 
level). 
m. An exception 
13 fault occurs 
if CPL is greater 
than 
IOPL. 


n. The IF bit of the flag register 
is not updated 
if CPL is greater 
than 
IOPL. The IOPL and VM fields 
of the flag register 
are 


updated 
only if CPL = O. 


o. The PE bit of the MSW (CRO) cannot 
be reset by this instruction. 
Use MOV into CRO if desiring 
to reset the PE bit. 


p. Any violation 
of privilege 
rules as applied 
to the selector 
operand 
does not cause 
a protection 
exception; 
rather, 
the zero 


flag is cleared. 
q. If the coprocessor's 
memory 
operand 
violates 
a·segment 
limit or segment 
access 
rights, 
an exception 
13 fault 
(general 


protection 
exception) 
will occur 
before 
the ESC instruction 
is executed. 
An exception 
12 fault 
(stack 
segment 
limit violation 


or not present) 
will occur 
if the stack 
limit is violated 
by the operand's 
starting 
address. 
r. The destination 
of a JMP, CALL, 
INT, RET or IRET must be in the defined 
limit of a code segment 
or an exception 
13 fault 


(general 
protection 
violation) 
will occur. 


intel~ 


All instruction 
encodings 
are subsets 
of the general 


instruction 
format 
shown 
in Figure 6-1. Instructions 


consist 
of one or two primary opcode 
bytes, possibly 


an address 
specifier 
consisting 
of the 
"mod 
rim" 
byte and "scaled 
index" 
byte, a displacement 
if re- 
quired, and an immediate 
data field if required. 


Within 
the primary 
opcode 
or opcodes, 
smaller 
en- 


coding 
fields 
may be defined. 
These 
fields vary ac- 


cording 
to the class 
of operation. 
The fields 
define 


such information 
as direction 
of the operation, 
size 


of the displacements, 
register 
encoding, 
or sign ex- 
tension. 


Almost 
all instructions 
referring 
to 
an 
operand 
in 
memory 
have 
an addressing 
mode 
byte 
following 


the primary 
opcode 
byte(s). 
This byte, the mod rim 


byte, specifies 
the address 
mode to be used. Certain 


encodings 
of the mod rim 
byte indicate 
a second 


addressing 
byte, the scale-index-base 
byte, follows 


the 
mod rim 
byte 
to fully 
specify 
the 
addressing 


mode. 


Addressing 
modes 
can include 
a displacement 
im- 


mediately 
following 
the mod rim byte, or scaled 
in- 


dex byte. If a displacement 
is present, 
the possible 


sizes are 8, 16 or 32 bits. 


If the 
instruction 
specifies 
an immediate 
operand, 


the 
immediate 
operand 
follows 
any 
displacement 


bytes. The immediate 
operand, 
if specified, 
is always 


the last field of the instruction. 


Figure 
6-1 illustrates 
several 
of the fields 
that 
can 
appear 
in an instruction, 
such as the mod field and 


the rim field, but the Figure does not show all fields. 
Several 
smaller fields also appear in certain 
instruc- 


tions, 
sometimes 
within 
the 
opcode 
bytes 
them- 
selves. 
Table 
6-2 is a complete 
list of all fields 
ap- 


pearing 
in the 
Intel386 
OX instruction 
set. 
Further 


ahead, 
following 
Table 
6-2, are detailed 
tables 
for 


each field. 


IT T T T T T T TIT 
T T T T T T T I mod T T T rim I ss index base 
Id32116181 
none data32 
116181 
none 


;:. 
07 
°1\76532°;\765320)\ 
1\ 
1 


T 
•• 
------ 


register and address 
mode specifier 


opcode 


(one or two bytes) 
(T represents 
an 
opcode 
bit.) 


"mod rim" 


byte 
address 
displacement 
(4, 2, 1 bytes 
or none) 


immediate 
data 
(4, 2, 1 bytes 


or none) 


Field Name 
Description 
Number of Bits 


w 
Specifies 
if Data is Byte or Full Size (Full Size is either 16 or 32 Bits 
1 
d 
Specifies 
Direction 
of Data Operation 
1 


s 
Specifies 
if an Immediate 
Data Field Must be Sign-Extended 
1 


reg 
General 
Register 
Specifier 
3 


mod rim 
Address 
Mode Specifier 
(Effective 
Address 
can be a General Register) 
2 for mod; 
3 for rim 


ss 
Scale Factor for Scaled Index Address 
Mode 
2 
index 
General 
Register to be used as Index Register 
3 
base 
General 
Register to be used as Base Register 
3 
sreg2 
Segment 
Register Specifier 
for CS, SS, OS, ES 
2 


sreg3 
Segment 
Register Specifier 
for CS, SS, OS, ES, FS, GS 
3 
tttn 
For Conditional 
Instructions, 
Specifies 
a Condition 
Asserted 
or a Condition 
Negated 
4 


g."." 
,),,-gll 
I:.Xl\::II~IUII~OJ tne 
Instruction Set 


With 
the 
Intel386 
DX, the 8086/80186/80286 
in- 
struction 
set 
is extended 
in two 
orthogonal 
direc- 
tions: 32-bit forms of all 16-bit instructions 
are added 
to support 
the 32-bit data types, and 32-bit address- 
ing modes are made available 
for all instructions 
ref- 
erencing 
memory. This orthogonal 
instruction 
set ex- 
tension 
is accomplished 
having 
a Default 
(D) bit in 
the code segment 
descriptor, 
and by having 2 prefix- 
es to the instruction 
set. 


Whether 
the instruction 
defaults 
to operations 
of 16 
bits or 32 bits depends 
on the setting of the D bit in 
the 
code 
segment 
descriptor, 
which 
gives 
the de- 
fault length 
(either 
32 bits or 16 bits) for both oper- 
ands 
and effective 
addresses 
when 
executing 
that 
code segment. 
In the Real Address 
Mode or Virtual 
8086 Mode, no code segment 
descriptors 
are used, 
but a D value of 0 is assumed 
internally 
by the In- 
tel386 
DX when operating 
in those modes (for 16-bit 
default 
sizes 
compatible 
with 
the 
8086/801861 
80286). 


Two prefixes, 
the Operand 
Size Prefix and the Effec- 
tive Address 
Size Prefix, allow overriding 
individually 
the Default 
selection 
of operand 
size and effective 
address 
size. These 
prefixes 
may precede 
any op- 
code 
bytes and affect 
only the instruction 
they pre- 
cede. 
If necessary, 
one or both of the prefixes 
may 
be placed before the opcode 
bytes. The presence 
of 
the Operand 
Size Prefix and the Effective 
Address 
Prefix will toggle 
the operand 
size or the effective 
address 
size, respectively, 
to the value 
"opposite" 
from the Default 
setting. 
For example, 
if the default 
operand 
size is for 32-bit data operations, 
then pres- 
ence of the Operand 
Size Prefix toggles 
the instruc- 
tion to 16-bit data operation. 
As another 
example, 
if 
the default 
effective 
address 
size is 16 bits, pres- 
ence of the Effective 
Address 
Size prefix toggles the 
instruction 
to use 32-bit effective 
address 
computa- 
tions. 


These 
32-bit extensions 
are available 
in all Intel386 
DX modes, 
including 
the Real Address 
Mode or the 
Virtual 
8086 
Mode. 
In these 
modes 
the 
default 
is 
always 
16 bits, 
so prefixes 
are needed 
to specify 
32-bit 
operands 
or addresses. 
For instructions 
with 
more than one prefix, the order of prefixes 
is unim- 
portant. 


Unless 
specified 
otherwise, 
instructions 
with 
8-bit 
and 
16-bit 
operands 
do not affect 
the contents 
of 
the high-order 
bits of the extended 
registers. 


6.2.3 Encoding of Instruction Fields 


Within 
the 
instruction 
are 
several 
fields 
indicating 
register 
selection, 
addressing 
mode and so on. The 
exact encodings 
of these fields are defined 
immedi- 
ately ahead. 


For any given 
instruction 
performing 
a data opera- 
tion, the instruction 
is executing 
as a 32-bit operation 
or a 16-bit operation. 
Within 
the constraints 
of the 
operation 
size, the w field encodes 
the operand 
size 
as either 
one 
byte 
or the 
full 
operation 
size, 
as 
shown 
in the table below. 


Operand 
Size 
Operand 
Size 
wField 
During 
16-8it 
During 
32·81t 
Data Operations 
Data Operations 


0 
8 Bits 
8 Bits 
1 
16 Bits 
32 Bits 


6.2.3.2 
ENCODING 
OF THE GENERAL 
REGISTER 
(reg) 
FIELD 


The 
general 
register 
is specified 
by the 
reg field, 


which may appear in the primary opcode 
bytes, or as 
the reg field of the "mod 
rim" 
byte, or as the rim 
field of the "mod rim" 
byte. 


Encoding 
of reg Field When w Field 
is not Present 
in Instruction 


Register 
Selected 
Register 
Selected 
reg Field 
During 
16-81t 
During 
32·81t 
Data Operations 
Data Operations 


000 
AX 
EAX 
001 
CX 
ECX 
010 
DX 
EDX 
011 
BX 
EBX 
100 
SP 
ESP 
101 
BP 
EBP 
110 
SI 
ESI 
111 
DI 
EDI 


Encoding 
of reg Field When 
w Field 
is Present 
in Instruction 


Register 
Specified 
by reg Field 
During 
16·8it 
Data Operations: 


Function 
of w Field 
reg 
(when 
w = 0) 
(whenw 
= 1) 


000 
AL 
AX 
001 
CL 
CX 
010 
DL 
DX 
011 
BL 
BX 
100 
AH 
SP 
101 
CH 
BP 
110 
DH 
SI 
111 
BH 
DI 


Register 
Specified 
by reg Field 
During 32-Blt Data Operations 


Function 
of w Field 
reg 
(whenw 
= 0) 
(whenw 
= 1) 


000 
AL 
EAX 
001 
CL 
ECX 
010 
oL 
EoX 
011 
BL 
EBX 
100 
AH 
ESP 
101 
CH 
EBP 
110 
oH 
ESI 
111 
BH 
Eol 


6.2.3.3 ENCODING 
OF THE SEGMENT 
REGISTER 
(sreg) 
FIELD 


The sreg field in certain instructions is a 2-bit field 
allowing one of the four 80286 segment registers to 
be specified. The sreg field in other instructions is a 
3-bit field, allowing the Intel386 OX FS and GS seg- 
ment registers to be specified. 


2·Blt 
Segment 


sreg2 Field 
Register 
Selected 


00 
ES 
01 
CS 
10 
SS 
11 
OS 


3·Bit 
Segment 


sreg3 Field 
Register 
Selected 


000 
ES 
001 
CS 
010 
SS 
011 
OS 
100 
FS 
101 
GS 
110 
do not use 
111 
do not use 


Except for special instructions, such as PUSH or 
POP,where the addressing mode is pre-determined, 
the addressing mode for the current instruction is 
specified by addressing bytes following the primary 
opcode. The primary addressing byte is the "mod 
rim" byte, and a second byte of addressing informa- 
tion, the "s-i-b" 
(scale-index-base) byte, can be 
specified. 


The s-i-b byte (scale-index-base byte) is specified 1 
when using 32-bit addressing mode and the "mod 
rim" byte has rim = 100 and mod = 00,01 or 10. 
When the sib byte is present, the 32-bit addressing 
mode is a function of the mod, ss, index, and base 
fields. 


The primary addressing byte, the "mod rim" 
byte, 


also contains three bits (shown asmin Figure 6-1) 
sometimes used as an extension of the primary op- 
code. The three bits, however, may also be used as 
a register field (reg). 


When calculating an effective address, either 16-bit 
addressing or 32-bit addressing is used. 16-bit ad- 
dressing uses 16-bit address components to calcu- 
late the effective address while 32-bit addressing 
uses 32-bit address components to calculate the ef- 
fective address. When 16-bit addressing is used, the 
"mod rim" byte is interpreted as a 16-bit addressing 
mode specifier. When 32-bit addressing is used, the 
"mod rim" byte is interpreted as a 32-bit addressing 
mode specifier. 


Tables on the following three pages define all en- 
codings of all 16-bit addressing modes and 32-bit 
addressing modes. 
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mod rIm 
Effective 
Address 


00000 
DS:[BX+SI] 
00001 
DS:[BX+DI] 
00010 
SS:[BP+SI] 
00011 
SS:[BP+DI) 
00100 
DS:[SI] 
00101 
DS:[DI] 
00110 
DS:d16 
00 111 
DS:[BX) 


01000 
DS:[BX+SI+d8] 
01 001 
DS:[BX+DI+d8) 
01 010 
SS: [BP + SI + d8) 
01 011 
SS:[BP+DI+d8) 
01 100 
DS:[SI+d8) 


01 101 
DS:[DI+d8) 
01 110 
SS:[BP+d8) 
01 111 
DS:[BX+d8) 


mod rIm 
Effective 
Address 


10000 
DS:[BX+SI+d16) 


10001 
DS:[BX+DI+d16) 


10010 
SS:[BP+SI+d16) 


10011 
SS:[BP+DI+d16) 


10100 
DS:[SI+d16) 
10 101 
DS:[DI+d16) 


10110 
SS:[BP+d16] 


10111 
DS:[BX + d16) 


11 000 
register-see 
below 


11 001 
register-see 
below 


11 010 
register-see 
below 


11 011 
register-see 
below 


11 100 
register-see 
below 


11 101 
register-see 
below 


11 110 
register-see 
below 


11111 
register-see 
below 


Register 
Specified 
by rIm 


During 
16·Blt Data Operations 


mod rIm 
Function 
of w Field 


(whenw=O) 
(whenw 
= 1) 


11 000 
AL 
AX 


11 001 
CL 
CX 


11 010 
DL 
DX 


11 011 
BL 
BX 


11100 
AH 
SP 


11 101 
CH 
BP 


11110 
DH 
SI 


11111 
BH 
DI 


Register 
Specified 
by rIm 


During 32·Bit Data Operations 


mod rIm 
Function 
of w Field 


(when w=O) 
(when w = 1) 


11 000 
AL 
EAX 


11 001 
CL 
ECX 


11 010 
DL 
EDX 
11 011 
BL 
EBX 
11 100 
AH 
ESP 


11 101 
CH 
EBP 
11110 
DH 
ESI 


11111 
BH 
EDI 


mod rIm 
Effective 
Address 


00000 
DS:[EAX] 
00001 
DS:[ECX] 
00010 
DS:[EDX] 
00011 
DS:[EBX] 
00100 
s-i-b is present 
00101 
DS:d32 
00110 
DS:[ESI] 
00111 
DS:[EDI] 


01000 
DS:[EAX+d8] 
01001 
DS: [ECX + d8] 
01010 
DS: [EDX + d8] 
01 011 
DS:[EBX+d8] 
01100 
s-i-b is present 
01 101 
SS: [EBP + d8] 
01 110 
DS: [ESI + d8] 
01 111 
DS:[EDI+d8] 


mod rIm 
Effective 
Address 


10000 
DS: [EAX + d32] 
10001 
DS: [ECX + d32] 
10010 
DS: [EDX + d32] 
10011 
DS: [EBX + d32] 
10100 
s-i-b is present 
10 101 
SS:[EBP+d32] 
10110 
DS: [ESI + d32] 
10111 
DS: [EDI + d32] 


11 000 
register-see 
below 
11 001 
register-see 
below 
11 010 
register-see 
below 
11 011 
register-see 
below 
11 100 
register-see 
below 
11 101 
register-see 
below 
11 110 
register-see 
below 
11111 
register-see 
below 


Register 
Specified 
by reg or rIm 
during 
16-Blt Data Operations: 


mod rIm 
function 
of w field 


(when w=O) 
(whenw= 
1) 


11 000 
AL 
AX 
11 001 
CL 
CX 
11 010 
DL 
DX 
11 011 
BL 
BX 
11100 
AH 
SP 
11 101 
CH 
BP 
11110 
DH 
SI 
11111 
BH 
DI 


Register 
Specified 
by reg or rIm 
during 
32-Blt Data Operations: 


mod rIm 
function 
of w field 


(whenw=O) 
(whenw= 
1) 


11 000 
AL 
EAX 
11 001 
CL 
ECX 
11 010 
DL 
EDX 
11 011 
BL 
EBX 
11 100 
AH 
ESP 
11 101 
CH 
EBP 
11 110 
DH 
ESI 
11111 
BH 
EDI 


• 


mod base 
Effective 
Address 


00000 
DS:[EAX 
+ (scaled index)] 
00001 
DS:[ECX 
+ (scaled index)] 
00010 
DS:[EDX 
+ (scaled index)] 
00011 
DS:[EBX 
+ (scaled index)] 
00100 
SS:[ESP 
+ (scaled index)] 
00101 
DS:[d32 
+ (scaled index)] 
00110 
DS:[ESI 
+ (scaled index)] 
00 111 
DS:[EDI 
+ (scaled index)] 


01000 
DS:[EAX 
+ (scaled index) 
+ d8] 
01 001 
DS:[ECX 
+ (scaled index) 
+ d8] 
01 010 
DS:[EDX 
+ (scaled index) 
+ d8] 
01 011 
DS:[EBX 
+ (scaled index) 
+ d8] 
01 100 
SS:[ESP 
+ (scaled index) 
+ d8] 
01 101 
SS:[EBP 
+ (scaled inqex) 
+ d8] 
01 110 
DS:[ESI 
+ (scaled index) 
+ d8] 
01 111 
DS:[EDI 
+ (scaled index) 
+ d8] 


10000 
DS:[EAX 
+ (scaled index) 
+ d32] 
10001 
DS:[ECX 
+ (scaled index) 
+ d32] 
10010 
DS:[EDX 
+ (scaled index) 
+ d32] 
10011 
DS:[EBX 
+ (scaled index) 
+ d32] 
10100 
SS:[ESP 
+ (scaled index) 
+ d32] 
10 101 
SS: [EBP + (scaled index) 
+ d32] 
10110 
DS:[ESI 
+ (scaled index) 
+ d32] 
10111 
DS:[EDI 
+ (scaled index) 
+ d32] 


NOTE: 
Mod 
field 
in 
"mod 
rIm" 
byte; 
ss, 
index, 
base 
fields 
in 
"s-i-b" 
byte. 


ss 
Scale Factor 


00 
x1 
01 
x2 
10 
x4 
11 
x8 


index 
Index Register 


000 
EAX 
001 
ECX 
010 
EDX 
011 
EBX 
100 
no index reg" 
101 
EBP 
110 
ESI 
111 
EDI 


"IMPORTANT 
NOTE: 
When index field is 100, indicating 
"no index register," 
then 


ss field 
MUST equal 00. If index is 100 and ss does 
not 


equal 00, the effective 
address 
is undefined. 


6.2.3.5 
ENCODING 
OF OPERATION 
DIRECTION 
(d) FIELD 


I 


In many two-operand 
instructions 
the d field is pres- 
ent 
to 
indicate 
which 
operand 
is considered 
the 
source 
and which 
is the destination. 


d 
Direction 
of Operation 


0 
Register/Memory 
<- - Register 
"reg" 
Field Indicates 
Source Operand; 


"mod r/m" 
or "mod ss index base" 
Indicates 
Destination 
Operand 


1 
Register <- - Register/Memory 
"reg" 
Field Indicates 
Destination 
Operand; 
"mod 
r/m" 
or "mod ss index base" 
Indicates 
Source Operand 


The s field occurs 
primarily 
to instructions 
with im- 
mediate 
data fields. The s field has an effect 
only if 
the size of the immediate 
data is 8 bits and is being 
placed 
in a 16-bit or 32-bit destination. 


Effect on 
Effect on 
s 
Immediate 
Data8 
Immediate 
Data 16132 


None 
None 


1 Sign-Extend 
Data8 to Fill 
None 
16-Bit or 32-Bit Destination 


6.2.3.7 
ENCODING 
OF CONDITIONAL 
TEST 
(tUn) 
FIELD 


For the 
conditional 
instructions 
(conditional 
jumps 
and set on condition), 
tttn is encoded 
with n indicat- 


ing to use the condition 
(n = 0) or its negation 
(n = 1), 
and ttt giving the condition 
to test. 


Mnemonic 
Condition 
tttn 
0 
Overflow 
0000 
NO 
No Overflow 
0001 
BINAE 
BelowlNot 
Above or Equal 
0010 
NB/AE 
Not Below/Above 
or Equal 
0011 
E/Z 
Equal/Zero 
0100 
NE/NZ 
Not Equal/Not 
Zero 
0101 
BEINA 
Below or EquallNot 
Above 
0110 
NBE/A 
Not Below or Equal/Above 
0111 
S 
Sign 
1000 
NS 
Not Sign 
1001 
PIPE 
Parity/Parity 
Even 
1010 
NP/PO 
Not Parity/Parity 
Odd 
1011 
L/NGE 
Less Than/Not 
Greater or Equal 
1100 
NL/GE 
Not Less Than/Greater 
or Equal 
1101 
LE/NG 
Less Than or Equal/Greater 
Than 
1110 
NLE/G 
Not Less or Equal/Greater 
Than 
1111 


6.2.3.8 
ENCODING 
OF CONTROL 
OR DEBUG 
OR TEST 
REGISTER 
(eee) 
FIELD 


For the 
loading 
and storing 
of the Control, 
Debug 
and Test registers. 


When Interpreted 
as Control 
Register 
Field 


eeeCode 
Reg Name 


000 
CRO 
010 
CR2 
011 
CR3 


Do not use any other encoding 


eeeCode 
Reg Name 


000 
ORO 
001 
DR1 
010 
DR2 
011 
DR3 
110 
DR6 
111 
DR7 


Do not use any other encoding 


eee Code 
Reg Name 


110 
TR6 
111 
TR7 


Do not use any other encoding 
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1.3S" j 
* .--- 
. 
i 
I 
4.0" 
I 
I 
I 


~ 
--.1 
_-=========l::::J 
--'10.8S" 
C####iSt 


7. DESIGNING 
FOR ICETM·lnteI386 
OX EMULATOR 
USE 


The Intel386 DX in-circuit emulator products are 
ICE-lntel386 DX 25 MHz or 33 MHz (both referred to 
as ICE-lntel386 DX emulator). The ICE-lntel386 DX 
emulator probe module has several electrical and 
mechanical characteristics that should be taken into 
consideration when designing the hardware. 


Capacitive loading: The ICE-lntel386 DX emulator 
adds up to 25 pF to each line. 


Drive requirement: The ICE-lntel386 DX emulator 
adds one standard TIL load on the CLK2 line, up to 
one advanced low-power Schottky TIL 
load per 
control signal line, and one advanced low-power 
Schottky TIL 
load per address, byte enable, and 
data line. These loads are within the probe module 
and are driven by the probe's Intel386 DX compo- 
nent, which has standard drive and loading capabili- 
ty listed in the A.C. and D.C. Specification Tables in 
Sections 9.4 and 9.5. 


Power requirement: For noise immunity the ICE-In- 
tel386 DX emulator probe is powered by the user 
system. This high-speed probe circuitry draws up to 
1.5A plus the maximum lee from the user Intel386 
DX component socket. 


Intel386 DX location and orientation: The ICE-In- 
tel386 DX processor module, target-adaptor cable 
(which does not exist for the 
ICE-lntel386 DX 
33 MHz emulator), and the isolation board used for 
extra electrical buffering of the emulator initially, re- 
quire clearance as illustrated in Figures 7-1 and 7-2. 


Interface 
Board and CLK2 speed 
reduction: 
When the ICE-lntel386 DX emulator probe is first 
attached to an unverified user system, the interface 
board helps the ICE-lntel386 DX emulator function 
in user systems with bus faults (shorted signals, 
etc.). After electrical verification it may be removed. 
Only when the interface board is installed, the user 
system must have a reduced CLK2 frequency of 
25 MHz maximum. 


Cache coherence: The ICE-lntel386 DX emulator 
loads user memory by performing Intel386 DX com- 
ponent write cycles. Note that if the user system is 
not designed to update or invalidate its cache (if it 
has a cache) upon processor writes to memory, the 
cache could contain stale instruction code and/or 
data. For best use of the ICE-lntel386 DX emulator, 
the user should consider designing the cache (if any) 
to update itself automatically when processor writes 
occur, or find another method of maintaining cache 
data coherence with main user memory. 
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8.2 
PACKAGE 
DIMENSIONS 
AND 
MOUNTING 


In this section, the physical packaging and its con- 
nections are described in detail. 


The initial Intel386 DX package is a 132-pin ceramic 
pin grid array (PGA). Pins of this package are ar· 
ranged 0.100 inch (2.54mm) center-to-center, in a 
14 x 14 matrix, three rows around. 


A wide variety of available sockets allow low inser- 
tion force or zero insertion force mountings, and a 
choice of terminals 
such as soldertail, 
surface 


mount, or wire wrap. Several applicable sockets are 
listed in Table 8.1. 


CIN 
#1 POSITION 


1 


~ R 
0;- R ~ 
0;;- 
N 
'" 
0 
It> 
'" 
'" 
0 • 
co 
~ 
'" • • 
~ 
co 
.., 
co - 
..; 
.0 
cD 
~ ~ e e ~ ~ ~ ~ 
It> 
'"": 


·@@@@@@'I@@@@@@@ 
@@@@@@@@@@@@@@ 
@@i)@@@@'@@@@i)@@ 
@@@ 
@@@ 
@@@ 
@@@ 
@@@ 
I 
@@@ 


@@@ 
+ 
@@@ 
8 
-@ @ ® 
-- 
- - 
<!> @ @ 


@@@ 
I 
@@@ 
@@@ 
@@@ 
@@@ 
@@@ 
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@@ ® ®@@@,@@@@@@@ 


cdo~>o:) 
G 
H 
J 
K 
L 
~O~5~~8)~.I 


.070 (1.777) 
DIA 
TYP BRAZE PAD 
1.450 (36.802) 
------ 
.• 


.725 
(18.401) 


.650 
(16.497) 


.550 
(13.959) 


.450 
(11.421) 


.350 
(8.883) 


.250 
(6.345) 


.150 
(3.807) 


.050 
(1:269) 
o 


SWEDGE PIN 
STANDOFF 
(4) 
PLACES 


.001 (0.025) 
R 


MIN TYP 


.018 (0.47) 1 
DIATYP _ 


'165(4'189~1 
~ 


.110(2:1J 
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• 
Low insertion 
force 
(L1F) soldertail 
55274-1 
• 
Amp 
tests 
indicate 
50% 
reduction 
in insertion 
force 
compared 
to machined 
sockets 


Other 
socket 
options 
• 
Zero 
insertion 
force 
(ZIF) 
soldertail 
55583-1 
• 
Zero 
insertion 
force 
(ZIF) 
Bum-in 
version 
55573-2 


Amp 
Incorporated 
(Harrisburg, 
PA 17105 
U.S.A. 


Phone 
717-564-0100) 


Peel-A-Way 
Mylar 
and Kapton 
Socket 
Terminal 
Carriers 


• 
Low 
insertion 
force 
surface 
mount 
CS132-37TG 


• 
Low 
insertion 
force 
soldertail 
CS132-oHG 


• Low insertion force wire-wrap 
CS 132-02TG 
(two 
level) 
CS132-03TG 
(three-level) 


• 
Low 
insertion 
force 
press-fit 
CS132-05TG 


Advanced 
Interconnections 
(5 Division 
Street 
Warwick, 
AI 02818 
U.S.A. 


Phone 
401-885-0485) 


231630-45 
Cam handle 
locks 
in low profile 
position 
when 
substrate 
is installed 
(handle 
UP for 
opan 
and DOWN 
for clo~ed 
positions) 


courtesy 
Amp Incorporated 


Peel-A-Way 
Carrier 
No. 132: 
Kapton 
Carrier 
is KS 132 
Mylar 
Carrier 
is MS 132 


Molded 
Plastic 
Body 
KS 132 
is shown 
below: 
c 
-oj I-- .1DOTYP 


1•• 1•• 1IIOWI 
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WIRE WRAP -o2J-GS 
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231630-47 
courtesy 
Advanced 
Interconnections 
(Peel-A-Way 
Terminal 
Carriers 
U.S. Patent 
No. 4442938) 


• 


PIN GRID 
ARRAY 
DECOUPLING 
SOCKETS 


Low 
insertion 
force 
soldertail 
0.125 
length 
PGD-005-1 
A 1 
Finish: 
Term/Contact 
Tin- 
Lead/Gold 


• 
Low 
insertion 
force 
soldertail 
0.180 
length 
PGD-Q05-1Bl 
Finish: 
Term/Contact: 
Tin- 
Lead/Gold 


• Low insertion 3 level Wire! 


Wrap 
PGD-005-1 
Cl 
Finish: 
Term/Contact 
Tin-Lead/Gold 


Includes 
0.10 
I'-F 
& 
1.0 
I'-F 
Decoupling 
Capacitors 


Pin Grid Array 


PGM (Plastic) 
or PPS 
(Glass 
Epoxy) 
Series 


AUGAT 
INC. 


33 Perry Ave., 
P.O. Box 779 Attleboro, 
MA 02703 
TECHNICAL 
INFORMATION: 
(508) 
222-2202 
CUSTOMER 
SERVICE: 
(508) 699-9800 


• 
Low insertion 
force 
socket 
soldertail 
(for production 
use) 
2XX·6576-00-3308 
(new style) 
2XX-6003-00-3302 
(older 
style) 


• 
Zero 
insertion 
force 
soldertail 
(for test 
and burn-in 
use) 
2XX-6568-QO·3302 


Textool 
Products 
Electronic 
Products 
Division/3M 
(1410 
West 
Pioneer 
Drive 
Irving, 
Texas 
75601 
U.S.A. 


Phone 
214-259-2676) 


c: Soldertall 
I 
0.193r 
0.510 
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s: Soldertall 
I 
0.166r 
0.180L 


-.J 
1-0.020 


-11.- O.l00TYP. 


231630-86 


I~I~ 
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II 
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"- 
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Textool 
Products/3~ 
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8.3 
PACKAGE 
THERMAL 
SPECIFICATION 


The PGA case temperature should be measured at 
the center of the top surface opposite the pins, as in 
Figure 8.2. 
The Intel386 OX is specified for operation when 
case temperature is within the range of D 
OC-85°C. 
The case temperature may be measured in any envi- 
ronment, to determine whether the Intel386 OX is 
within specified operating range. 


Thermal 
Resistance 
- 
·C/Walt 


Airflow 
- 
ft.lmln 
(m/see) 


Parameter 
0 
50 
100 
200 
400 
600 
800 
(0) 
(0.25) 
(0.50) 
(1.01) 
(2.03) 
(3.04) 
(4.06) 


8 Junction-to-Case 
2 
2 
2 
2 
2 
2 
2 
(case 
measured 
as Fig. 8-2) 


8 Case-to-Ambient 
19 
18 
17 
15 
12 
10 
9 
(no heatsink) 


8 Case-to-Ambient 
16 
15 
14 
12 
9 
7 
6 
(with omnidirectional 
heatsink) 


8 Case-to-Ambient 
15 
14 
13 
11 
8 
6 
5 
(with unidirectional 
heatsink) 


NOTES: 
1. Table 
8.2 applies 
to Inte1386T'" 
DX PGA 
piugged 
into 
socket 
or 
soldered 
directly 
into board. 
2. 8JA ~ 
8JC + 8CA' 


3. 8J.CAP ~ 
4·C/w 
(approx.) 
8J-PIN ~ 4·C/w 
(inner 
pins) 
(approx.) 
8J-PIN ~ 8·C/w (outer 
pins) 
(approx.) 
4. TA = TC - 
P • 8CA (ambient 
temperature) 


The following sections describe recommended elec- 
trical connections for the Intel386 DX, and its electri- 
cal specifications. 


The Intel386 DX is implemented in CHMOS III and 
CHMOS IV technology and has modest power re- 
quirements. However, its high clock frequency and 
72 output buffers (address, data, control, and HLDA) 
can cause power surges as multiple output buffers 
drive new signallevets simultaneously. For clean on· 
chip power distribution at high frequency, 20 Vcc 
and 21 Vss pins separately feed functional units of 
the Intel386 DX. 


Power and ground connections must be made to all 
external Vcc and GND pins of the Intel386 DX. On 
the circuit board, all Vcc pins must be connected on 
a Vcc plane. All VSSpins must be likewise connect- 
ed on a GND plane. 


9.2.2 
Power Decoupling 
Recommendations 


Liberal decoupling capacitance should be placed 
near the Intel386 DX. The Intel386 DX driving its 
32-bit parallel address and data buses at high fre- 
quencies can cause transient power surges, particu- 
larly when driving large capacitive loads. 


Low inductance capacitors and interconnects are 
recommended for best high frequency electrical per- 
formance. Inductance can be reduced by shortening 
circuit board traces between the Intel386 DX and 


decoupling capacitors as much as possible. Capaci- 
tors specifically for PGA packages are also commer- 
cially available, for the lowest possible inductance. 


The ERROR# and 8USY# inputs have resistor pull- 
ups of approximately 20 Kn built-in to the Intel386 
DX to keep these signals negated when no Intel387 
DX coprocessor is present in the system (or tempo- 
rarily removed from its socket). The 8S16 # input 
also has an internal pullup resistor of approximately 
20 Kn, and the PEREQ input has an internal pull- 
down resistor of approximately 20 Kn. 


In typical designs, the external pullup resistors 
shown in Table 9-1 are recommended. However, a 
particular design may have reason to adjust the re- 
sistor values recommended here, or alter the use of 
pullup resistors in other ways. 


9.2.4 
Other Connection 
Recommendations 


For reliable operation, always connect unused in- 
puts to an appropriate signal level. N.C. pins should 
always remain unconnected. 


Particularly when not using interrupts or bus hold, 
(as when first prototyping, perhaps) prevent any 
chance of spurious activity by connecting these as- 
sociated inputs to GND: 


Pin 
Signal 
87 
INTR 
88 
NMI 
D14 
HOLD 


If not using address pipelining, pullup D13 NA# to 
Vcc· 


If not using 16-bit bus size, pullup C14 8S16# 
to 


Vcc· 


Pullups in the range of 20 Kn are recommended. 


Table 9·1. Recommended Resistor Pullups to Vcc 


Pin and Signal 
PullupValue 
Purpose 


E14 
ADS# 
20Kn 
±10% 
Lightly Pull ADS# Negated 
During Intel386 DX Hold 
Acknowledge States 


C10 
LOCK# 
20 Kn ±10% 
Lightly Pull LOCK# Negated 
During Intel386 DX Hold 
Acknowledge States 


Table 9-2 is a stress rating only, and functional 
oper- 


ation at the maximums 
is not guaranteed. 
Functional 


operating 
conditions 
are given in 9.4 D.C. SpecIfica- 


tions 
and 9.5 A.C. Specifications. 
Intel386TM 
OX 


Parameter 
20, 25, 33 MHz 


Maximum 
Rating 


Storage Temperature 
-6S'C to + 150'C 
Case Temperature Under Bias 
-6S'C to + 110'C 
Supply Voltage with Respect to Vss 
-0.5Vto 
+6.SV 
Voltage on Other Pins 
-0.5V to Vce + O.SV 


Extended 
exposure 
to the Maximum 
Ratings may af- 


fect device 
reliability. 
Furthermore, 
although 
the In- 


tel386 
OX contains 
protective 
circuitry 
to resist dam- 


age from static 
electric 
discharge, 
always 
take pre- 


cautions 
to 
avoid 
high 
static 
voltages 
or 
electric 


fields. 


9.4 D.C. SPECIFICATIONS 
Functional 
Operating 
Range: Vcc 
= 5V ± 5%; TCASE = O'C to 85'C 


Table 9-3. Intel386TM 
OX D.C. Characteristics 


Intel386TM 
OX 


Symbol 
Parameter 
20 MHz, 25 MHz, 
Unit 
Test 
33 MHz 
Conditions 


Mln 
Max 


VIL 
Input Low Voltage 
-0.3 
0.8 
V 
(Note 1) 


VIH 
Input High Voltage 
2.0 
VCC + 0.3 
V 


VILC 
CLK2 Input Low Voltage 
-0.3 
0.8 
V 
(Note 1) 


VIHC 
CLK2 Input High Voltage 
20 MHz 
Vcc 
- 
0.8 
VCC + 0.3 
V 
25 MHz and 33 MHz 
3.7 
VCC + 0.3 
V 


VOL 
Output 
Low Voltage 
tOL = 4 mA: A2-A31, 
00-031 
0.45 
V 
tOL = 5 mA: BEO#:"'BE3#, 
W/R#, 
0.45 
V 
O/C#, 
M/IO#, 
LOCK#, 
AOS#, 
HLOA 


VOH 
Output High Voltage 
IOH = 1 mA: A2-A31, 
00-031 
2.4 
V 
IOH = 0.9 mA: BEO#-BE3#, 
W/R#, 
2.4 
V 
O/C#, 
M/IO#, 
LOCK#, 
AOS#, 
HLOA 


III 
Input Leakage Current 
±15 
/LA 
OV ~ VIN ~ Vcc 
(For All Pins except BS16#, 
PEREQ, BUSY#, 
and ERROR#) 


IIH 
Input Leakage Current 
200 
/LA 
VIH = 2.4V (Note 2) 


(PEREQ Pin) 


IlL 
Input Leakage Current 
-400 
/LA 
VIL = 0.45 (Note 3) 


(BS16#, 
BUSY#, 
and ERROR# 
Pins) 


ILO 
Output Leakage Current 
±15 
/LA 
0.45V 
~ VOUT ~ VCC 


Icc 
Supply Current 
(Note 4) 
CLK2 = 40 MHz: with 20 MHz Intel386™ 
OX 
260 
mA 
Icc Typ. = 200 mA 
CLK2 = 50 MHz: with 25 MHz Intel386™ 
OX 
320 
mA 
Icc Typ. = 240 mA 
CLK2 = 66 MHz: with 33 MHz Intel386™ 
OX 
390 
mA 
Icc Typ. = 300 mA 


CIN 
Input or 1/0 Capacitance 
10 
pF 
Fc = 1 MHz 


COUT 
Output Capacitance 
12 
pF 
Fc = 1 MHz 


CCLK 
CLK2 Capacitance 
20 
pF 
Fc = 1 MHz 


NOTES: 
1. The min value, - 0.3, is not 100% tested. 
2. PEREQ input has an internal pulldown resistor. 
3. BS16#, BUSY# and ERROR# inputs each have an internal pullup resistor. 
4. CHMOS IV Technology (CHMOS III Max Ice at 20 MHz, 25 MHz = SOOmA, 5S0 mAl. 


•• 


intel~ 


provided to external circuitry. Intel386 OX input set- 
up and hold times are specified as minimums, defin- 
ing the smallest acceptable sampling window. Within 
the sampling window, a synchronous input signal 
must be stable for correct Intel386 OX operation. 


The AG. specifications, given in Tables 9-4, 9-5, and 
9-6, consist of output delays, input setup require- 
ments and input hold requirements. All AG. specifi- 
cations are relative to the GLK2 rising edge crossing 
the 2.0V level. 


AG. spec measurement is defined by Figure 9-1. In- 
puts must be driven to the voltage levels indicated 
by Figure 9-1 when AG. specifications are mea- 
sured. Intel386 OX output delays are specified with 
minimum and maximum limits, measured as shown. 
The minimum Intel386 OXdelay times are hold times 


Outputs NA#, 
W/R#, 
O/G#, 
M/IO#, 
LOGK#, 


BEO#-BE3#, 
A2-A31 
and HLOA only change at 


the beginning of phase one. 00-031 
(write cycles) 


only change at the beginning of phase two. The 
READY#, HOLD, BUSY#, ERROR#, PEREQ and 
00-031 
(read cycles) inputs are sampled at the be- 


ginning of phase one. The NA#, Bs16#, 
INTR and 


NMI inputs are sampled at the beginning of phase 
two. 


OUTPUTS 


(A2-A31. 
D/CN. BEON-BE3N. 
[ 


ADSN.M/ION. 
W/RN. LOCKN. HLDA) 


INPUTS 
(NAN. BS16N. 
[ 
INTR.NMI) 


INPUTS 


(READYN. HOLD. BUSYN. [ 


ERRORN.PEREQ.00-031) 


LEGEND: 


@-MAXIMUM 
OUTPUT DELAY SPEC. 


@-MINIMUM 
OUTPUT DELAY SPEC. 


©- MINIMUM INPUT SETUP SPEC. 


@-MINIMUM 
INPUT HOLD SPEC. 


C 
N 
1 


l.SV 
VALID INPUT 
1.5V 
I 


NOTES: 
1. Input waveforms 
have tr ,;; 2.0 ns from 0.8V to 2.0V. 


2. See section 
9.5.8 for typical 
output 
rise time versus 
load capacitance. 


9.5.2 A.C. Specification 
Tables 
Functional 
Operating 
Range: Vcc = 5V ± 5%; TCASE = O·C to + 85·C 


33 MHz 
Ref. 


Symbol 
Parameter 
Intel386™ 
OX 
Unit 
Fig. 
Notes 


Mln 
Max 


Operating 
Frequency 
8 
33.3 
MHz 
Half of CLK2 Frequency 


t1 
CLK2 Period 
15.0 
62.5 
ns 
9-3 


t2a 
CLK2 High Time 
6.25 
ns 
9-3 
at2V 


t2b 
CLK2 High Time 
4.5 
ns 
9-3 
at 3.7V 


t3a 
CLK2 Low Time 
6.25 
ns 
9-3 
at2V 


t3b 
CLK2 Low Time 
4.5 
ns 
9-3 
atO.8V 


t4 
CLK2 Fall Time 
4 
ns 
9-3 
3.7V to 0.8V (Note 3) 


t5 
CLK2 Rise Time 
4 
ns 
9-3 
0.8V to 3.7V (Note 3) 


t6 
A2-A31 
Valid Delay 
4 
15 
ns 
9-5 
Cl = 50pF 


t7 
A2-A31 
Float Delay 
4 
20 
ns 
9-6 
(Note 1) 


t8 
BEO#-BE3#. 
LOCK# 
Valid Delay 
4 
15 
ns 
9-5 
Cl = 50 pF 


t9 
BEO#-BE3#. 
LOCK# 
Float Delay 
4 
20 
ns 
9-6 
(Note 1) 


t10 
W/R#. 
M/IO#. 
D/C#. 
Valid Delay 
4 
15 
ns 
9-5 
Cl = 50 pF 


t10a 
ADS# 
Valid Delay 
4 
14.5 
ns 
9-5 
Cl = 50 pF 


t11 
W/R#. 
M/IO#. 
D/C#. 
ADS# 
Float Delay 
4 
20 
ns 
9-6 
(Note 1) 


t12 
DO-D31 
Write Data Valid Delay 
7 
24 
ns 
9-5a 
Cl = 50 pF. (Note 4) 


t12a 
DO-D31 
Write Data Hold Time 
2 
9-5b 
Cl = 50 pF 


t13 
DO-D31 
Float Delay 
4 
17 
ns 
9-6 
(Note 1) 


t14 
HLDA Valid Delay 
4 
20 
ns 
9-6 
Cl = 50 pF 


t15 
NA # Setup Time 
5 
ns 
9-4 


t16 
NA # Hold Time 
2 
ns 
9-4 


t17 
BS16# 
Setup Time 
5 
ns 
9-4 


t18 
BS16# 
Hold Time 
2 
ns 
9-4 


t19 
READY # Setup Time 
7 
ns 
9-4 


t20 
READY # Hold Time 
4 
ns 
9-4 


9.5.2 
A.C. Specification 
Tables (Continued) 
Functional 
Operating 
Range: Vcc = 5V ± 5%; TCASE = O·C to + 85·C 


33 MHz 
Ref. 


Symbol 
Parameter 
Intel386TM OX 
Unit 
Fig. 
Notes 


Min 
Max 


t21 
00-031 
Read Setup Time 
5 
ns 
9-4 


t22 
00-031 
Read Hold Time 
3 
ns 
9-4 


t23 
HOLD Setup Time 
11 
ns 
9-4 


t24 
HOLD Hold Time 
2 
ns 
9-4 


t25 
RESET Setup Time 
5 
ns 
9-7 


t26 
RESET Hold Time 
2 
ns 
9-7 


t27 
NMI. INTR Setup Time 
5 
ns 
9-4 
(Note 2) 


t28 
NMI, INTR Hold Time 
5 
ns 
9-4 
(Note 2) 


t29 
PEREQ. ERROR IF. BUSY IF Setup Time 
5 
ns 
9-4 
(Note 2) 


t30 
PEREQ. ERROR IF. BUSY IF Hold Time 
4 
ns 
9-4 
(Note 2) 


1. Float 
condition 
occurs 
when 
maximum 
output 
current 
becomes 
less 
than 
ILO in magnitude. 
Float 
delay 
is not 
100% 


tested. 
2. These 
inputs 
are allowed 
to be asynchronous 
to CLK2. The setup and hold specifications 
are given for testing 
purposes, 


to assure 
recognition 
within 
a specific 
CLK2 period. 


3. Rise and fall times 
are not tested. 


4. Min. time not 100% 
tested. 


intel~ 


9.5.2 
A.C. Specification 
Tables (Continued) 
Functional 
Operating 
Range: VCC = 5V ±5%; 
TCASE = O°C to +B5°C 


25 MHz 
Ref. 


Symbol 
Parameter 
Intel386TM OX 
Unit 
Fig. 
Notes 


Mln 
Max 


Operating 
Frequency 
4 
25 
MHz 
Half of CLK2 Frequency 


t1 
CLK2 Period 
20 
125 
ns 
9-3 


t2a 
CLK2 High Time 
7 
ns 
9-3 
at2V 


t2b 
CLK2 High Time 
4 
ns 
9-3 
at 3.7V 


t3a 
CLK2 Low Time 
7 
ns 
9-3 
at2V 


t3b 
CLK2 Low Time 
5 
ns 
9-3 
at O.BV 


t4 
CLK2 Fall Time 
7 
ns 
9-3 
3.7V to O.BV 


t5 
CLK2 Rise Time 
7 
ns 
9-3 
O.BV to 3.7V 


t6 
A2-A31 
Valid Delay 
4 
21 
ns 
9-5 
CL = 50 pF 


t7 
A2-A31 
Float Delay 
4 
30 
ns 
9-6 
(Note 1) 


tB 
BEO#-BE3# 
Valid Delay 
4 
24 
ns 
9-5 
CL = 50 pF 


tBa 
LOCK # Valid Delay 
4 
21 
ns 
9-5 
CL = 50 pF 


t9 
BEO#-BE3#, 
LOCK# 
Float Delay 
4 
30 
ns 
9-6 
(Note 1) 


t10 
W/R#, 
MIIO#, 
D/C#, 
ADS# 
Valid Delay 
4 
21 
ns 
9-5 
CL = 50 pF 


t11 
W/R#, 
M/IO#, 
D/C#, 
ADS# 
Float Delay 
4 
30 
ns 
9-6 
(Note 1) 


t12 
00-031 
Write Data Valid Delay 
7 
27 
ns 
9-5a 
CL = 50 pF 


t12a 
00-031 
Write Data Hold Time 
2 
9-5b 
CL = 50 pF 


t13 
00-031 
Float Delay 
4 
22 
ns 
9-6 
(Note 1) 


t14 
HLDA Valid Delay 
4 
22 
ns 
9-6 
CL = 50 pF 


t15 
NA # Setup Time 
7 
ns 
9-4 


t16 
NA # Hold Time 
3 
ns 
9-4 


t17 
BS 16 # Setup Time 
7 
ns 
9-4 


t1B 
BS16# 
Hold Time 
3 
ns 
9-4 


t19 
READY # Setup Time 
9 
ns 
9-4 


t20 
READY # Hold Time 
4 
ns 
9-4 


9.5.2 A.C. Specification Tables (Continued) 
Functional 
Operating 
Range: Vcc 
= 5V ± 5%; TCASE = O°C to + 85·C 


25 MHz 
Ref. 
Symbol 
Parameter 
Intel386™ 
OX 
Unit 
Fig. 
Notes 


Mln 
Max 


t21 
00-031 
Read Setup Time 
7 
ns 
9-4 


t22 
00-031 
Read Hold Time 
5 
ns 
9-4 


t23 
HOLD Setup Time 
15 
ns 
9-4 


t24 
HOLD Hold Time 
3 
ns 
9-4 


t25 
RESET Setup Time 
10 
ns 
9-7 


t26 
RESET Hold Time 
3 
ns 
9-7 


t27 
NMI, INTR Setup Time 
6 
ns 
9-4 
(Note 2) 


t28 
NMI, INTR Hold Time 
6 
ns 
9-4 
(Note 2) 


t29 
PEREa, 
ERROR •• , BUSY •• Setup Time 
6 
ns 
9-4 
(Note 2) 


t30 
PEREa, 
ERROR •• , BUSY •• Hold Time 
5 
ns 
9-4 
(Notes 2, 3) 


1. Float condition occurs when maximum output current becomes less than ILO in magnitude. Float delay is not 100% 
tested. 
2. These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing purposes. 
to assure recognition within a specific CLK2 period. 
3. 
Symbol 
Parameter 
Mln 
TC = O°C 
t30 
PEREQ. ERROR". BUSY•• Hold Time 
4 
TC = +85°C 
t30 
PEREQ.ERROR••• BUSY•• Hold Time 
5 


9.5.2 
A.C. Specification 
Tables (Continued) 
Functional 
Operating 
Range: Vee = 5V ±5%; 
TeASE = O°C to +85°C 


20 MHz 
Ref. 


Symbol 
Parameter 
Intel386™ 
OX 
Unit 
Fig. 
Notes 


Mln 
Max 


Operating 
Frequency 
4 
20 
MHz 
Half of CLK2 
Frequency 


t1 
CLK2 Period 
25 
125 
ns 
9-3 


t2a 
CLK2 High Time 
8 
ns 
9-3 
at2V 


t2b 
CLK2 High Time 
5 
ns 
9-3 
at (Vee - 
0.8V) 


t3a 
CLK2 Low Time 
8 
ns 
9-3 
at2V 


t3b 
CLK2 Low Time 
6 
ns 
9-3 
at 0.8V 


t4 
CLK2 Fall Time 
8 
ns 
9-3 
(Vee - 
0.8V) to 0.8V 


ts 
CLK2 Rise Time 
8 
ns 
9-3 
0.8V to (Vee - 
0.8V) 


ts 
A2-A31 
Valid Delay 
4 
30 
ns 
9-5 
Cl = 120 pF 


t7 
A2-A31 
Float Delay 
4 
32 
ns 
9-6 
(Note 1) 


ts 
BEO#-BE3#. 
LOCK# 
4 
30 
ns 
9-5 
Cl = 75 pF 
Valid Delay 


t9 
BEO#-BE3#. 
LOCK# 
4 
32 
ns 
9-6 
(Note 1) 
Float Delay 


t10 
W/R#. 
M/IO#. 
D/C#. 
6 
28 
ns 
9-5 
Cl = 75 pF 
ADS# 
Valid Delay 


t11 
W/R#. 
M/IO#. 
D/C#. 
6 
30 
ns 
9-6 
(Note 1) 
ADS # Float Delay 


t12 
DO-D31 
Write Data 
4 
38 
ns 
9-5c 
Cl = 120 pF 
Valid Delay 


t13 
DO-D31 
Float Delay 
4 
27 
ns 
9-6 
(Note 1) 


t14 
HLDA Valid Delay 
6 
28 
ns 
9-6 
Cl = 75 pF 


t1S 
NA # Setup Time 
9 
ns 
9-4 


t16 
NA# 
Hold Time 
14 
ns 
9-4 


t17 
BS16# 
Setup Time 
13 
ns 
9-4 


t1S 
BS16# 
Hold Time 
21 
ns 
9-4 


t19 
READY # Setup Time 
12 
ns 
9-4 


t20 
READY # Hold Time 
4 
ns 
9-4 


t21 
DO-D31 
Read 
11 
ns 
9-4 
Setup Time 


t22 
DO-D31 
Read 
6 
ns 
9-4 
Hold Time 


t23 
HOLD Setup Time 
17 
ns 
9-4 


t24 
HOLD Hold Time 
5 
ns 
9-4 


t2S 
RESET Setup Time 
12 
ns 
9-7 


• 


9.5.2 
A.C. Specification 
Tables (Continued) 
Functional 
Operating 
Range: Vcc = 5V ±5%; 
TCASE = QOCto +85°C 


Table 9-6. 20 MHz Intel386™ 
DX A.C. Characteristics 
(Continued) 


20 MHz 
Ref. 
Symbol 
Parameter 
Intel386™ 
DX 
Unit 
Fig. 
Notes 


Mln 
Max 


t26 
RESET Hold Time 
4 
ns 
9-7 


t27 
NMI, INTR Setup Time 
16 
ns 
9-4 
(Note 2) 


t28 
NMI, INTR Hold Time 
16 
ns 
9-4 
(Note 2) 


t29 
PEREQ,ERROR#.BUSY# 
14 
ns 
9-4 
(Note 2) 


Setup Time 


t30 
PEREQ.ERROR#.BUSY# 
5 
ns 
9-4 
(Note 2) 


Hold Time 


NOTES: 
1. Float condition occurs when maximum output current becomes less than ILO in magnitude. Float delay is not 100% 
tested. 
2. These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing purposes, 
to assure recognition within a specific CLK2 period. 


1"101386 
OX CPU0---., 
OUTPUT 
-L 


~Ct 


CL = 120 pF on A2-A31, 
00-031 
CL = 
75 pF on BEO#-BE3#, 
W/R#, 
MIIO#, 
O/C#, 
AOS#, 
LOCK#, 
HLOA 
CL includes 
all parasitic 
capacitances. 


Tx 
.2 


CLK2 
[ 


REAOY# [ 


HOLD [ 


00-031 [ 
(INPUT) 


BUSY#. [ 
ERROR# 
PEREa 


NA# [ 


BS16# [ 


INTR. [ 
Nloll 


• 


CLK2 [ 


9EO#-9E3#. [ 
LOCK# 


W/R#.I>A/IO#. [ 
D/C#.ADS# 


A2-A31 [ 


HLDA [ 


CLK2 [ 


DO-D31[ 
8 
:min. 


"'",,, "! ~::::::::::: 


Figure 9·5a. Write Data Valid Delay Timing 
(25 MHz, 33 MHz) 
Figure 9·5b. Write Data Hold Timing 
(25 MHz, 33 MHz) 


CLK2 [ 


9.5.5 
Typical Output Valid Delay Versus Load Capacitance 
at Maximum Operating Temperature 
(CL = 120 pF) 


nom+6 


~ 
nom+3 
.. 
..=.~« 
..J.., 
nom 
c 
c::;«> 
nom-3 
~ 
::> 
ll.~ 
::>0 
nom-6 


NOTE: 
This graph will not be linear outside 
of the CL range 
shown. 


9.5.6 
Typical Output Valid Delay Versus Load Capacitance 
at Maximum Operating Temperature 
(CL = 75 pF) 


nom +9 
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:3..,c 
c::;«>~ 
::> 
ll.~ 
::>0 
nom-3 


nom-6 
75 
100 
125 
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NOTE: 
This graph 
will not be linear outside 
of the CL range shown. 


9.5.7 
Typical Output Valid Delay Versus Load Capacitance 
at Maximum Operating Temperature 
(CL = 50 pF) 
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NOTE: 
This graph will not be linear oU1side of the CL range 
shown. 


9.5.8 
Typical Output Rise Time Versus Load Capacitance 
at Maximum Operating Temperature 
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NOTE: 
This graph 
will not be linear outside 
of the CL range 
shown. 
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10. Revision 
History 


This Intel386 DX data sheet, version -005, contains updates and improvements to previous versions. A revi- 
sion summary is listed here for your convenience. 


2.9.6 
2.9.7 
2.11.2 
2.12 
3.1 
4.4.3.3 


Figures 4-15a, 4-15b 
4.6.4 


4.6.6 


5.6 
5.8 
5.8.1 
Table 6-3 


7. 
Figures 7-8,7-9,7-10 
6.2.3.4 


Sequence of exception checking table added. 
Instruction restart revised. 
TL8 testing revised. 
Debugging support revised. 


LOCK prefix restricted to certain instructions. 
I/O privilege level and I/O permission bitmap added. 
I/O permission bitmap added. 
Protection and I/O permission bitmap revised. 
Entering and leaving virtual 8086 mode through task switches, trap and interrupt 
gates, and IRET explained. 
Self-test signature stored in EAX. 
Coprocessor interface description added. 
Software testing for coprocessor presence added. 
PGA package thermal characteristics added. 
Designing for ICE-lntel386 revised. 
ICE-lntel386 clearance requirements added. 
Encoding of 32·bit address mode with no "sib" byte corrected. 


The sections 
significantly 
revised 
since version 
-002 are: 
Table 2-5 
Interrupt vector assignments updated. 


Figure 4-15a 
8iLmap_offset 
must be less than or equal to DFFFH. 
Fig'ure5-28 
Intel386 DX outputs remain in their reset state during self-test. 


5.7 
Component and revision identifier history updated. 
9.4 
20 MHz D.C. specifications added. 


9.5 
16 MHz A.C. specifications updated. 20 MHz A.C. specifications added. 


Table 6-1 
Clock counts updated. 


The sections 
significantly 
revised 
since version 
-003 are: 
Table 2-6b 
Interrupt priorities 2 and 3 interchanged. 


2.9.8 
Double page faults do not raise double fault exception. 


Figure 4-5 
Maximum-sized segments must have segments 8ase11..0 = O. 


5.4.3.4 
8S16# timing corrected. 
Figures 5-16, 5-17, 
8S16# timing corrected. 8S16# must not be asserted once NA# has been 
5-19, 5-22 
sampled asserted in the current bus cycle. 
9.5 
16 MHz and 20 MHz A.C. specifications revised. All timing parameters are now 
guaranteed at 1.5V test levels. The timing parameters have been adjusted to 
remain compatible with previous 0.8V/2.0V specifications. 
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The sections 
significantly 
revised 
since version 
-004 are: 
Chapter 4 
25 MHz Clock data included. 


Table 2-4 
Segment Register Selection 
Rules updated. 


5.4.4 
Interrupt Acknowledge 
Cycles discussion corrected. 


Table 5-10 
Additional 
Stepping Information 
added. 


Table 9-3 
lee values updated. 


9.5.2 
Table for 25 MHz AC. 
Characteristics 
added. AC. 
Characteristics 
tables reor- 


dered. 


Figure 9-5 
Output Valid Delay Timing Figure reconfigured. 
Partial data now provided in addi- 


tional Figures 9-5a and 9-5b. 


Table 6-1 
Clock counts updated and formats corrected. 


Table of Contents 


Chapter 1 


2.3.6 


Table 2-4 


Figure 4-6 


Figure 4-7 


5.2.3 


5.2.8.4 


5.5.3 


Figure 5-28 


Chapter 6 


Chapter 7 


Chapter 8 


Table 9-3 


Table 9-3 


Table 9-4 


Figure 9-5 


Figure 9-5c 


9.5.6 


9.5.7 


Figure 9.6 


Simplified. 


Pin Assignment. 


Control Register O. 


Segment override prefixes possible. 


Note added. 


Note added. 


Data bus state at end of cycle. 


Coprocessor 
error. 


Bus activity during and following reset. 


ERROR#. 


Moved forward in datasheet. 


Moved forward in datasheet. 


Upgraded to chapter. 


25 MHz lee Typ. value corrected. 


33 MHz D.C. Specifications 
added. 


33 MHz AC. Specifications 
added. 


t8a and t10a added. 


Added. 


Added derating for CL = 75 pF. 


Added derating for CL = 50 pF. 


t8a and t10a added. 


The sections 
significantly 
revised 
since version 
-006 are: 
2.3.4 
Alignment of maximum sized segments. 


2.9.8 
Double page faults do not raise double fault exception. 


5.5.3 
ERROR# 
and BUSY# 
sampling after RESET. 


Figure 5-21 
BS16# 
timing altered. 


Figure 5-26 
READY # timing altered. 


Figure 5-28 
ERROR# 
timing corrected. 


6.2.3.1 
Corrected 
Encoding of Register Field Chart. 


Chapter 7 
Updated ICE-lntel386 
OX information. 


9.5.2 
Remove preliminary stamp on 25 MHz A.C. Specifications. 


9.5.2 
Remove preliminary stamp on 33 MHz AC. 
Specifications. 


The sections 
significantly 
revised 
since version 
-007 are: 
Tableof Contents 
Pagenumbersrevised. 


Figure5-15 
B816# timingaltered. 
Figure5-22 
Previouscycle,T2 changedto Idle cycle,Ti. 


6.1 
Note aboutwait states added. 


Table6-1 
Opcodesfor AND,OR, and XOR instructionscorrected. 
Table6-1 
Bits 3, 4, and 5 of the "mod rim" byte correctedfor the LTR instruction. 


Table8-2 
Referenceto Figure6-4 shouldbe referenceFigure8-2. 
Table8-2 
Note #4 added. 


The sections 
significantly 
revised 
since version 
-008 are: 
Table9-3 
20, 25, 33 MHz lee specificationsupdated. 
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Intel386™ 
DX MICROPROCESSOR 
32-BIT CHMOS MICROPROCESSOR 
WITH 
INTEGRATED 
MEMORY MANAGEMENT 
(PQFP SUPPLEMENT) 


• 
Optimized for System Performance 
- 
Pipellned Instruction 
Execution 
- 
On-Chip Address Translation 
Caches 
- 
20, 25 and 33 MHz Clock 
- 
40, 50 and 66 Megabytes/See 
Bus 
Bandwidth 


• 
Numerics Support via Intel387TM OX 
• 
Math Coprocessor 


• 
Complete System Development 
Support 
- 
Software: C, PL/M, Assembler 
System Generation Tools 
- 
Debuggers: PSCOPE, ICETM-386 


• 
High Speed CHMOS IV Technology 


• 
132 Pin PQFP Package 


(See 
Packaging 
Specification. 
Order 
#231369) 


• 
Flexible 32-Bit Microprocessor 
- 
8, 16, 32-Bit Data Types 
- 
8 General Purpose 32-Blt Registers 
• 
Very Large Address Space 
- 
4 Gigabyte Physical 
- 
64 Terabyte Virtual 
- 
4 Gigabyte Maximum Segment Size 
• 
Integrated 
Memory Management Unit 
- 
Virtual Memory Support 
- 
Optional On-Chip Paging 
- 
4 Levels of Protection 
- 
Fully Compatible with 80286 
• 
Object Code Compatible with All 8086 
Family Microprocessors 
• 
Virtual 8086 Mode Allows Running of 
8086 Software in a Protected and 
Paged System 
• 
Hardware Debugging Support 


The Intel386 
DX Microprocessor 
is an entry-level 
32-bit microprocessor 
designed 
for single-user 
applications 
and operating 
systems 
such as MS-DOS 
and Windows. 
The 32-bit 
registers 
and data paths 
support 
32-bit 
addresses 
and data types. The processor 
addresses 
up to four gigabytes 
of physical 
memory and 64 terabytes 


(2··46) 
of virtual memory. 
The integrated 
memory 
management 
and protection 
architecture 
includes 
address 


translation 
registers, 
multitasking 
hardware 
and a protection 
mechanism 
to support operating 
systems. 
Instruc- 
tion pipelining, 
on-chip 
address 
translation, 
ensure 
short average 
instruction 
execution 
times 
and maximum 
system 
throughput. 


The Intel386 
DX CPU offers new testability 
and debugging 
features. 
Testability 
features 
include a self-test 
and 
direct access 
to the page translation 
cache. 
Four new breakpoint 
registers 
provide 
breakpoint 
traps on code 
execution 
or data accesses, 
for powerful 
debugging 
of even ROM-based 
systems. 


Object-code 
compatibility 
with 
all 8086 
family 
members 
(8086, 
8088, 
80186, 
80188, 
80286) 
means 
the 
Intel386 
DX offers 
immediate 
access 
to the world's 
largest 
microprocessor 
software 
base. 
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This document should be used in conjunction 
with the 
Intei386™ 
OX Microprocessor data 
sheet (order number 231630-011, October 1993). 


The circuit board should include Vcc 
and GNO 
planes for power distribution and all Vcc and Vss 
pins must be connected to the appropriate plane. 


NOTE: 
Pins identified as "N.C." should remain completely 
unconnected. 


The Intel386 OX pinout as viewed from the top side 
of the component is shown by Figure 1-1. 


Vcc and GNO connections must be made to multi- 
ple Vcc and Vss (GNO) pins. Each Vcc and Vss 
must be connected to the appropriate voltage level. 


Vss 
vcc 
013 
012 
011 
DID 
09 
HLOA 
08 
Vss 
Vss 
07 
06 
05 
04 
Vcc 
03 
02 
01 
DO 
Vss 
Vcc 
Vss 
CLK2 
Vss 
READY" 
ADS" 
HOLD 
Bs16" 
HA" 
BED" 
BE'" 
BE2" 


•• 


Address 
Data 
Control 
N/C 
Vss 
CC 


A2 
67 
00 
20 
AOS# 
27 
36 
1 
2 
A3 
68 
01 
19 
BEO# 
31 
37 
10 
16 
A4 
69 
02 
18 
BEH 
32 
39 
11 
22 
A5 
70 
03 
17 
BEU 
33 
59 
21 
34 
A6 
71 
04 
15 
BE3# 
38 
60 
23 
49 
A7 
72 
05 
14 
BS16# 
29 
61 
25 
56 
A8 
74 
06 
13 
BUSY# 
46 
62 
35 
58 
A9 
75 
07 
12 
CLK2 
24 
63 
44 
73 
A10 
76 
08 
9 
O/C# 
41 
48 
85 
A11 
77 
09 
7 
ERROR# 
47 
51 
99 
A12 
78 
010 
6 
FLT# 
54 
55 
106 
A13 
79 
011 
5 
HLOA 
8 
57 
110 
A14 
81 
012 
4 
HOLO 
28 
64 
117 
A15 
82 
013 
3 
INTR 
53 
65 
123 
A16 
84 
014 
131 
LOCK# 
42 
66 
127 
A17 
86 
015 
130 
M/lO# 
40 
80 
A18 
87 
016 
129 
NA# 
30 
83 
A19 
88 
017 
128 
NMI 
52 
90 
A20 
89 
018 
126 
PEREO 
50 
91 
A21 
93 
019 
125 
REAOY# 
26 
92 
A22 
94 
020 
124 
RESET 
45 
105 
A23 
95 
021 
121 
W/R# 
43 
111 
A24 
96 
022 
120 
114 
A25 
97 
023 
119 
122 
A26 
98 
024 
118 
132 
A27 
100 
025 
116 
A28 
101 
026 
115 
A29 
102 
027 
113 
A30 
103 
028 
112 
A31 
104 
029 
109 
030 
108 
031 
107 


intel~ 


1.1 Pin Description Table 


The following table lists a brief description of each pin on the Intel386 OX.The following definitions are used in 
these descriptions: 
# 
The named signal is active LOW. 


I 
Input signal. 


o 
Output signal. 


I/O 
Input and Output signal. 


No electrical connection. 


Symbol 
Type 
Name and Function 


CLK2 
I 
CLK2 provides the fundamental timing for the Intel386 OX. 


031-00 
I/O 
DATA 
BUS inputs data during memory, I/O and interrupt acknowledge read 
cycles and outputs data during memory and I/O write cycles. 


A31-A2 
0 
ADDRESS 
BUS outputs physical memory or port I/O addresses. 


BEO#-BE3# 
0 
BYTE ENABLES 
indicate which data bytes of the data bus take part in a bus 
cycle. 


W/R# 
0 
WRITE/READ 
is a bus cycle definition pin that distinguishes write cycles from 
read cycles. 


D/C# 
0 
DATA/CONTROL 
is a bus cycle definition pin that distinguishes data cycles, 


either memory or I/O, from control cycles which are: interrupt acknowledge, 
halt, and instruction fetching. 


M/IO# 
0 
MEMORY 
I/O is a bus cycle definition pin that distinguishes memory cycles 
from input/output cycles. 


LOCK# 
0 
BUS LOCK is a bus cycle definition pin that indicates that other system bus 
masters are denied access to the system bus while it is active. 


ADS# 
0 
ADDRESS 
STATUS 
indicates that a valid bus cycle definition and address 
(W/R#, 
O/C#, 
M/IO#, 
BEO#, BE1#, BE2#, BE3# and A31-A2) are being 
driven at the Intel386 OX pins. 


NA# 
I 
NEXT ADDRESS 
is used to request address pipelining. 


REAOY# 
I 
BUS READY terminates the bus cycle. 


BS16# 
I 
BUS SIZE 16 input allows direct connection of 32-bit and 16-bit data buses. 


HOLO 
I 
BUS HOLD REQUEST input allows another bus master to request control of the 
local bus. 


• 


Symbol 
Type 
Name and Function 


HLOA 
a 
BUS 
HOLD 
ACKNOWLEDGE 
output 
indicates 
that 
the 
Intel386 
OX 
has 
surrendered 
control 
of its local bus to another 
bus master. 


BUSY# 
I 
BUSY signals a busy condition 
from a processor 
extension. 


ERROR# 
I 
ERROR 
signals an error condition 
from a processor 
extension. 


PEREO 
I 
PROCESSOR 
EXTENSION 
REQUEST 
indicates 
that the processor 
extension 
has 
data to be transferred 
by the Intel386 
OX. 


FLT# 
I 
FLOAT is an input which forces all bidirectional 
and output signals, including 
HLOA, 
to the tri-state 
condition. 
This allows 
the electrically 
isolated 
386 OX POFP to use 
On-Circuit 
Emulation 
(ONCE) 
directly 
on the motherboard. 
The 
FLT # 
pin has an 
internal 
pull-up resistor; 
if the FLT # pin is not used, it should 
not be connected. 


INTR 
I 
INTERRUPT 
REQUEST 
is a maskable 
input that signals the Intel386 
OX to suspend 
execution 
of the current 
program 
and execute 
an interrupt 
acknowledge 
function. 


NMI 
I 
NON·MASKABLE 
INTERRUPT 
REQUEST 
is a non-maskable 
input that signals the 
Intel386 
OX to suspend 
execution 
of the current 
program 
and execute 
an interrupt 
acknowledge 
function. 


RESET 
I 
RESET suspends 
any operation 
in progress 
and places the Intel386 
OX in a known 
reset state. See Interrupt 
Signals for additional 
information. 


N/C 
- 
NO CONNECT 
should 
always 
remain 
unconnected. 
Connection 
of a N/C 
pin may 
cause the processor 
to malfunction 
or be incompatible 
with future steppings 
of the 
Intel386 
OX. 


VCC 
I 
SYSTEM 
POWER 
provides 
the + 5V nominal 
O.C. supply input. 


Vss 
I 
SYSTEM 
GROUND 
provides 
OV connection 
from which 
all inputs and outputs 
are 
measured. 
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1.2 Float Pin Description 


Activating the FLT /I input floats all Intel386 OX bidi- 
rectional and output signals, including HLOA.Assert- 
ing FLT# isolates the Intel386 OX microprocessor 
from the surrounding circuitry. 


Packaged in a surface mount PQFP, it cannot be 
removed from the motherboard when In-Circuit Em- 
ulation (ICE) is needed. The FLT# input allows the 
Intel386 CPU to be electrically isolated from the sur- 
rounding circuitry. This allows connection of an emu- 
lator to the processor without removing it from the 
PCB. This method of emulation is referred to as ON- 
Circuit Emulation (ONCE). 


FLT# is an asynchronous, active-low input. It is rec- 
ognized on the rising edge of CLK2. When recog- 


nized, it aborts the current bus cycle and floats the 
outputs of the processor (Figure 1-2). FLT# must be 
held low for a minimum of 16 CLK2 cycles. Reset 
should be asserted and held asserted until after 
FLT# is deasserted. This will ensure that the In- 
tel386 OX CPU will exit float in a valid state. 


Asserting the FLT /I input unconditionally aborts the 
current bus cycle and forces the processor into the 
FLOAT mode, and is therefore not guaranteed to 
enter FLOAT in a valid state. After deactivating 
FLT#, 
the processor is not guaranteed to exit 
FLOAT mode in a valid state. This is not a problem • 
as the FLT# pin is meant to be used only during 
ONCE. After exiting FLOAT, the processor must be 
reset to return it to a valid state. Reset should be 
asserted before FLT# is deasserted. This will en- 
sure that the processor will exit float in a valid state. 


FLT# has an internal pull-up resistor, and if it is not 
used it should be unconnected. 


2.1 
Package Dimensions 


The 
Intel386 
OX is available 
in a 132 lead plastic 
quad flat pack 
(PQFP) 
package. 
Table 
2.1 and Figures 
2.1-2.5 
show the physical 
dimensions 
of this package. 


Symbol 
Description 
Inch 
mm 


Mln 
Max 
Mln 
Max 


A 
Package 
Height 
0.160 
0.170 
4.06 
4.32 


A1 
Standoff 
0.020 
0.030 
0.51 
0.76 


D,E 
Terminal 
Dimension 
1.075 
1.085 
27.31 
27.56 


D1, E1 
Pack.age Body 
0.947 
0.953 
24.05 
24.21 


02, E2 
Bumper Distance 
1.097 
1.103 
27.86 
28.02 


D3,E3 
Lead Dimension 
0.800 REF 
20.32 REF 


L1 
Foot Length 
0.020 
0.030 
0.51 
0.76 


Issue 
IWS Preliminary 
1/15/87 


Letter or Symbol 
Description 
of Dimensions 


A 
Package 
Height: Distance 
from Seating Plane to Highest Point of Body 


A1 
Standoff: 
Distance 
from Seating Plane to Base Plane 


DIE 
Overall Package 
Dimension: 
Lead Tip to Lead Tip 


D1/E1 
Plastic Body Dimension 


D2/E2 
Bumper Distance 


D3/E3 
Footprint 


L1 
Foot Length 


NOTES: 
1. All dimensions 
and tolerances 
conform 
to ANSI Y14.5M-1982. 
2. Datum 
plane 
H located 
at the mold parting 
line and coincident 
with the bottom 
of the lead where 
lead exits plastic 
body. 


3. Datums 
A Band 
D to be determined 
where 
center 
leads exit plastic 
body at datum 
plane 
H. 


4. Controlling 
Dimension, 
Inch. 


5. Dimensions 
D1, D2, E1, and E2 are measured 
at the mold parting 
line and do not include 
mold protrusion. 
Allowable 
mold 
protrusion 
is 0.18 mm (0.007 
in) per side. 
6. Pin 1 identifier 
is located 
within 
one of the two zones 
indicated. 


, 
~D2 


1m" 
E2 
El 
-~" 


~ 
B.25 
(.BIB)'" 
C A@-B s 
D@ 


--L 
.BB2 MM/MM <IN/IN) 
A-B 


~ 
B.25 
LBlB)@> 
C A@-B@ 
0 s 


.BB2 MM/MM <IN/IN) 
A-B 


~ 
B.25 
LBlB)@> 
C A@-B@ 
D@ 


--L 
.BB2 MM/MM (IN/IN) 
0 


I. 
it 
,,~,~ 


O/E 


• 


AA8.41 
~." 


1$18.28 
<.88S)@ICIA®-B®ID®k8\ 


DetailJ 


! 
1.32 <'852) 
1.22 <'848) 
8.98 <'835) MIN. j 
2.83 
< .888)-l 
1. 93 <.8n) 


-fH 


8 DEG. 
8 
DEG. 


2.2 Package Thermal Specifications 


The Intel386 
OX Microprocessor 
is specified 
for op· 
eration when case temperature 
is within the range of 
0·C-100·C. 
The 
case 
temperature 
may 
be 
mea· 
sured in any environment, 
to determine 
whether 
the 


Intel386 
OX Microprocessor 
is within specified 
oper- 
ating range. The case temperature 
should 
be mea· 
sured at the center 
of the top surface. 


Ta = Tj - 
POOja 


Tc = Ta + PO[I/ja - 
I/jd 


Values for 8ja and 8jc are given in Table 2.2 for the 
100 lead fine pitch. 
8ja is given at various 
airflows. 
Table 2.3 shows the maximum 
Ta allowable 
(without 
exceeding 
Tel at various 
airflows. 


The ambient 
temperature 
is guaranteed 
as long as 
Tc is not violated. 
The ambient 
temperature 
can be 


calculated 
from 
the 
8jc and 
8ja from 
the following 


equations: 


a 
e 
•• 
erma 
es s ances 
a 
'Ican 
la 


8JBversus 
Airflow· 
ft/mln 
(m/sec) 
Package 
8jc 
0 
200 
400 
600 
800 
1000 
(O) 
(1.01) 
(2.03) 
(3.04) 
(4.06) 
(5.07) 


132 Lead 
9.0 
31.0 
24.5 
21.5 
19.0 
17.0 
16.0 
PQFP 


T4{*C) versus 
Airflow 
- ft/mln 
(m/sec) 
Package 
Frequency 
0 
200 
400 
600 
800 
1000 
(O) 
(1.01) 
(2.03) 
(3.04) 
(4.06) 
(5.07) 


132 Lead 
20 MHz 
71 
79 
83 
87 
89 
90 
PQFP 
25 MHz 
65 
75 
80 
84 
87 
89 


33 MHz 
60 
72 
78 
82 
85 
87 


NOTE: 
The numbers in Table 2.3 were calculated using worst case Ice at Tc = 100·C with the outputs unloaded. 
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Table 3-1 is a stress rating only, and functional 
oper- 


ation at the maximums 
is not guaranteed. 
Functional 


operating 
conditions 
are given in 3.1 D.C. SpecIfica- 
tions 
and 3.2 A.C. Specifications. 
Intel386™ OX 
Parameter 
20, 2S,33 MHz 
Maximum Rating 


Storage Temperature 
- 65'C to + 150'C 
Case Temperature Under Bias 
-6S'C to + 110'C 
Supply Voltage with Respect to Vss 
-0.5Vto 
+6.5V 
Voltage on Other Pins 
- 0.5V to Vcc + 0.5V 


Extended 
exposure 
to the Maximum 
Ratings may af- 
fect device 
reliability. 
Furthermore, 
although 
the In- 


tel386 
OX contains 
protective 
circuitry to resist dam- 
age from static electric 
discharge, 
always 
take pre- 
cautions 
to 
avoid 
high 
static 
voltages 
or electric 
fields. 


3.1 D.C.Specifications 
Functional 
Operating 
Range: VCC = 5V ±5%; 
TCASE = O°C to +100'C 


Table 
3-2. Intel386TM 
DX D.C. Characteristics 


Intel386™ 
DX 


Symbol 
Parameter 
20 MHz, 25 MHz, 
Unit 
Test 
33 MHz 
Conditions 


Mln 
Max 


VIL 
Input Low Voltage 
-0.3 
0.8 
V 
(Note 1) 


VIH 
Input High Voltage 
2.0 
VCC + 0.3 
V 


VILC 
CLK2 Input Low Voltage 
-0.3 
0.8 
V 
(Note 1) 


VIHC 
CLK2 Input High Voltage 
20 MHz 
VCC - 
0.8 VCC + 0.3 
V 
25 MHz and 33 MHz 
3.7 
VCC + 0.3 
V 


VOL 
Output Low Voltage 
IOL = 4 mA: A2-A31, 
00-031 
0.45 
V 
IOL = 5 mA: 8EO#-8E3#, 
W/R#, 
0.45 
V 
O/C#, 
M/lO#, 
LOCK#, 
AOS#, 
HLOA 


VOH 
Output High Voltage 
IOH = 1 mA: A2-A31, 
00-031 
2.4 
V 
IOH = 0.9 mA: 8EO#-8E3#, 
W/R#, 
2.4 
V 
O/C#, 
M/IO#, 
LOCK#, 
AOS#, 
HLOA 


III 
Input Leakage Current 
±15 
p.A 
OV ~ VIN ~ Vcc 
(For All Pins except 8S16#, 
PEREQ, 8USY #, 
and ERROR#) 


IIH 
Input Leakage Current 
200 
p.A 
VIH = 2.4V (Note 2) 


(PEREQ Pin) 


IlL 
Input Leakage Current 
-400 
p.A 
VIL = 0.45 (Note 3) 
(8S16#, 
BUSY#, 
and ERROR# 
Pins) 


ILO 
Output 
Leakage Current 
±15 
p.A 
0.45V 
~ VOUT ~ VCC 


Icc 
Supply Current 
(Note 4) 
CLK2 = 40 MHz: with 20 MHz Intel386™ 
OX 
260 
mA 
Icc Typ. = 200 mA 
CLK2 = 50 MHz: with 25 MHz Intel386™ 
OX 
320 
mA 
Icc Typ. = 240 mA 


CLK2 = 66 MHz: with 33 MHz Intel386™ 
OX 
390 
mA 
Icc Typ. = 300 mA 


CIN 
Input or 1/0 Capacitance 
10 
pF 
Fc = 1 MHz 


COUT 
Output Capacitance 
12 
pF 
Fc = 1 MHz 


CCLK 
CLK2 Capacitance 
20 
pF 
Fc = 1 MHz 


NOTES: 
1. The min value, -0.3, 
is not 100% tested. 


2. PEREa input has an internal pulldown resistor. 
3. BS16#, BUSY# and ERROR# inputs each have an internal pullup resistor. 
4. CHMOS IV Technology. 
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The A.C. specifications, given in Tables 3-3, 3-4, and 
3-5, consist of output delays, input setup require- 
ments and input hold requirements. All A.C. specifi- 
cations are relative to the CLK2 rising edge crossing 
the 2.0V level. 


A.C. spec measurement is defined by Figure 3-1. In- 
puts must be driven to the voltage levels indicated 
by Figure 3-1 when A.C. specifications are mea- 
sured. Intel386 OX output delays are specified with 
minimum and maximum limits, measured as shown. 


I ne minimum Intel386 DX delay times are hold times 
provided to external circuitry. Intel386 OX input set- 
up and hold times are specified as minimums, defin- 
ing the smallest acceptable sampling window. Within 
the sampling window, a synchronous input signal 
must be stable for correct Intel386 OX operation. 


Outputs NA#, 
W/R#, 
O/C#, 
M/IO#, 
LOCK#, 


BEO#-BE3#, 
A2-A31 
and HLOA only change at 
the beginning of phase one. 00-031 
(write cycles) 
only change at the beginning of phase two. The 
READY#, HOLD, BUSY#, ERROR#, PEREQ and 
00-031 
(read cycles) inputs are sampled at the be- • 
ginning of phase one. The NA#, BS16#, INTR and 
NMI inputs are sampled at the beginning of phase 
two. 


OUTPUTS 


(A2-A31, 
D/c-, 
BEO--B£3-, 
[ 
ADS_, w/IO_. 
W/R_, 
LOCK-, 
HLOA) 


INPUTS 
(NU,BS16_, 
[ 
INTR, NWI) 


INPUTS 


(READY-, 
HOLD, BUSY-, 
[ 
ERROR_, PEREO, 00-031) 
FLT_ 
LEGEND: 
@- WAXIWUW OUTPUT DELAY SPEC. 
@- WINIWUW OUTPUT DELAY SPEC. 
©- WINIWUW INPUT SETUP SPEC. 
@- WINIWUW INPUT HOLD SPEC. 


C 
NOTE 1 


1.5V 
VALID INPUT 
1.5V 


NOTES: 
1. Input waveforms 
have tr S; 2.0 ns from 0.8V to 2.0V. 
2. See section 
9.5.8 for typical 
output 
rise time versus 
load capacitance. 


33 MHz 
Ref. 


Symbol 
Parameter 
Intel386TM OX 
Unit 
Fig. 
Notes 


Mln 
Max 


Operating 
Frequency 
8 
33.3 
MHz 
Half of CLK2 Frequency 


t1 
CLK2 Period 
15.0 
62.5 
ns 
3-3 


t2a 
CLK2 High Time 
6.25 
ns 
3-3 
at2V 


t2b 
CLK2 High Time 
4.5 
ns 
3-3 
at3.7V 


t3a 
CLK2 Low Time 
6.25 
ns 
3-3 
at2V 


t3b 
CLK2 Low Time 
4.5 
ns 
3-3 
at 0.8V 


t4 
CLK2 Fall Time 
4 
ns 
3-3 
3.7V to 0.8V (Note 3) 


t5 
CLK2 Rise Time 
4 
ns 
3-3 
0.8V to 3.7V (Note 3) 


t6 
A2-A31 
Valid Delay 
4 
15 
ns 
3-5 
CL = 50 pF 


t7 
A2-A31 
Float Delay 
4 
20 
ns 
3-6 
(Note 1) 


t8 
BEO#-BE3#, 
LOCK# 
Valid Delay 
4 
15 
ns 
3-5 
CL = 50pF 


t9 
BEO#-BE3#, 
LOCK# 
Float Delay 
4 
20 
ns 
3-6 
(Note 1) 


t10 
W/R#, 
M/IO#, 
D/C#, 
Valid Delay 
4 
15 
ns 
3-5 
CL = 50 pF 


t10a 
ADS# 
Valid Delay 
4 
14.5 
ns 
3-5 
CL = 50 pF 


t11 
W/R#, 
M/IO#, 
D/C#, 
ADS# 
Float Delay 
4 
20 
ns 
3-6 
(Note 1) 


t12 
00-031 
Write Data Valid Delay 
7 
24 
ns 
3-5a 
CL = 50 pF, (Note 4) 


t12a 
00-031 
Write Data Hold Time 
2 
3-5b 
CL = 50 pF 


t13 
00-031 
Float Delay 
4 
17 
ns 
3-6 
(Note 1) 


t14 
HLDA Valid Delay 
4 
20 
ns 
3-6 
CL = 50pF 


t15 
NA # Setup Time 
5 
ns 
3-4 


t16 
NA # Hold Time 
2 
ns 
3-4 


t17 
BS16# 
Setup Time 
5 
ns 
3-4 


t18 
BS16# 
Hold Time 
2 
ns 
3-4 


t19 
READY # Setup Time 
, 
7 
ns 
3-4 


t20 
READY # Hold Time 
4 
ns 
3-4 


intel~ 


3.2.2 A.C. SPECIFICATION 
TABLES 
(Continued) 
Functional 
Operating 
Range: Vcc = 5V ±5%; 
TCASE = O·C to + 100·C 


33 MHz 
Ref. 


Symbol 
Parameter 
Intel386TM OX 
Unit 
Fig. 
Notes 


Mln 
Max 


t21 
00-031 
Read Setup Time 
5 
ns 
3-4 


t22 
00-031 
Read Hold Time 
3 
ns 
3-4 


t23 
HOLO Setup Time 
11 
ns 
3-4 


t24 
HOLO Hold Time 
2 
ns 
3-4 


t25 
RESET Setup Time 
5 
ns 
3-7 


t26 
RESET Hold Time 
2 
ns 
3-7 


t27 
NMI, INTR Setup Time 
5 
ns 
3-4 
(Note 2) 


t28 
NMI, INTR Hold Time 
5 
ns 
3-4 
(Note 2) 


t29 
PEREa, 
ERROR #, FLT # , BUSY # Setup Time 
5 
ns 
3-4 
(Note 2) 


t30 
PEREa, 
ERROR#, 
FLT#. 
BUSY# 
Hold Time 
4 
ns 
3-4 
(Note 2) 


1. Float condition occurs when maximum output current becomes less than ILO in magnitude. Float delay is not 100% 
tested. 
2. These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing purposes, 
to assure recognition within a specific CLK2 period. 
3. Rise and fall times are not tested. 
4. Min. time not 100% tested. 


• 


3.2.2 
A.C. SPECIFICATION 
TABLES 
(Continued) 
Functional 
Operating 
Range: Vcc = 5V ± 5%; TCASE = O°C to + 100°C 


25 MHz 
Ref. 
Symbol 
Parameter 
Intel386TM 
OX 
Unit 
Fig. 
Notes 


Mln 
Max 


Operating 
Frequency 
4 
25 
MHz 
Half of CLK2 Frequency 


t1 
CLK2 Period 
20 
125 
ns 
3-3 


t2a 
CLK2 High Time 
7 
ns 
3-3 
at2V 


t2b 
CLK2 High Time 
4 
ns 
3-3 
at3.7V 


t3a 
CLK2 Low Time 
7 
ns 
3-3 
at2V 


t3b 
CLK2 Low Time 
5 
ns 
3-3 
at 0.8V 


t4 
CLK2 Fall Time 
7 
ns 
3-3 
3.7V to 0.8V 


t5 
CLK2 Rise Time 
7 
ns 
3-3 
0.8V to 3.7V 


t6 
A2-A31 
Valid Delay 
4 
21 
ns 
3-5 
CL = 50 pF 


t7 
A2-A31 
Float Delay 
4 
30 
ns 
3-6 
(Note 1) 


t8 
BEO#-BE3# 
Valid Delay 
4 
24 
ns 
3-5 
CL = 50 pF 


t8a 
LOCK # Valid Delay 
4 
21 
ns 
3-5 
CL = 50 pF 


t9 
BEO#-BE3#, 
LOCK# 
Float Delay 
4 
30 
ns 
3-6 
(Note 1) 


t10 
W/R#, 
M/IO#, 
D/C#, 
ADS# 
Valid Delay 
4 
21 
ns 
3-5 
CL = 50 pF 


t11 
W/R#, 
M/IO#, 
D/C#, 
ADS# 
Float Delay 
4 
30 
ns 
3-6 
(Note 1) 


t12 
DO-D31 
Write Data Valid Delay 
7 
27 
ns 
3~5a 
CL = 50 pF 


t12a 
DO-D31 
Write Data Hold Time 
2 
3-5b 
CL = 50 pF 


t13 
DO-D31 
Float Delay 
4 
22 
ns 
3-6 
(Note 1) 


t14 
HLDA Valid Delay 
4 
22 
ns 
3-6 
CL = 50 pF 


t15 
NA # Setup Time 
7 
ns 
3-4 


t16 
NA # Hold Time 
3 
ns 
3-4 


t17 
BS16# 
Setup Time 
7 
ns 
3-4 


t18 
BS16# 
Hold Time 
3 
ns 
3-4 


t19 
READY # Setup Time 
9 
ns 
3-4 


t20 
READY # Hold Time 
4 
ns 
3-4 


3.2.2 
A.C. SPECIFICATION 
TABLES 
(Continued) 
Functional 
Operating 
Range: Vcc = 5V ± 5%; TCASE = O·C to + 100·C 


25 MHz 
Ref. 
Symbol 
Parameter 
Intel386™ 
OX 
Unit 
Fig. 
Notes 


Min 
Max 


t21 
00-031 
Read Setup Time 
7 
ns 
3-4 


t22 
00-031 
Read Hold Time 
5 
ns 
3-4 


t23 
HOLO Setup Time 
15 
ns 
3-4 


t24 
HOLO Hold Time 
3 
ns 
3-4 


t25 
RESET Setup Time 
10 
ns 
3-7 


t26 
RESET Hold Time 
3 
ns 
3-7 


t27 
NMI, INTR Setup Time 
6 
ns 
3-4 
(Note 2) 


t28 
NMI, INTR Hold Time 
6 
ns 
3-4 
(Note 2) 


t29 
PEREa, 
ERROR # , FLT #, BUSY # Setup Time 
6 
ns 
3-4 
(Note 2) 


t30 
PEREa, 
ERROR #, FLT #, BUSY # Hold Time 
5 
ns 
3-4 
(Notes 2,3) 


1. Float 
condition 
occurs 
when 
maximum 
output 
current 
becomes 
less than 
ILO in magnitude. 
Float 
delay 
is not 
100% 
tested. 
2. These 
inputs 
are allowed 
to be asynchronous 
to CLK2. The setup 
and hold specifications 
are given for testing 
purposes, 
to assure 
recognition 
within 
a specific 
CLK2 period. 
3. 
Symbol 
Parameter 
Mln 
TC = O·C 
t30 
PEREa, 
ERROR"', 
FL T "', BUSY", 
Hold Time 
4 
Tc = + 100·C 
t30 
PEREa, 
ERROR"', 
FL T "', BUSY'" 
Hold Time 
5 
• 


20 MHz 
Ref. 


Symbol 
Parameter 
Intel386™ 
OX 
Unit 
Fig. 
Notes 


Min 
Max 


Operating 
Frequency 
4 
20 
MHz 
Half of CLK2 
Frequency 


t1 
CLK2 Period 
25 
125 
ns 
3-3 


t2a 
CLK2 High Time 
8 
ns 
3-3 
at2V 


t2b 
CLK2 High Time 
5 
ns 
3-3 
at (Vcc 
- 
0.8V) 


t3a 
CLK2 Low Time 
8 
ns 
3-3 
at2V 


t3b 
CLK2 Low Time 
6 
ns 
3-3 
at 0.8V 


t4 
CLK2 Fall Time 
8 
ns 
3-3 
(Vcc 
- 
0.8V) to 0.8V 


t5 
CLK2 Rise Time 
, 
8 
ns 
3-3 
0.8V to (VCC - 
0.8V) 


ts 
A2-A31 
Valid Delay 
4 
30 
ns 
3-5 
CL = 120 pF 


t7 
A2-A31 
Float Delay 
4 
32 
ns 
3-6 
(Note 1) 


t8 
BEO#-BE3#, 
LOCK# 
4 
30 
ns 
3-5 
CL = 75 pF 
Valid Delay 


tg 
BEO#-BE3#, 
LOCK# 
4 
32 
ns 
3-6 
(Note 1) 
Float Delay 


tlO 
W/R#, 
M/IO#, 
D/C#, 
6 
28 
ns 
3-5 
CL = 75 pF 
ADS# 
Valid Delay 


tll 
W/R#, 
MIIO#, 
D/C#, 
6 
30 
ns 
3-6 
(Note 1) 
ADS # Float Delay 


t12 
00-031 
Write Data 
4 
38 
ns 
3-5c 
CL = 120 pF 
Valid Delay 


t13 
00-031 
Float Delay 
4 
27 
ns 
3-6 
(Note 1) 


t14 
HLDA Valid Delay 
6 
28 
ns 
3-6 
CL = 75 pF 


t15 
NA# 
Setup Time 
9 
ns 
3-4 


t16 
NA # Hold Time 
14 
ns 
3-4 


t17 
BS16# 
Setup Time 
13 
ns 
3-4 


t18 
BS16# 
Hold Time 
21 
ns 
3-4 


t19 
READY # Setup Time 
12 
ns 
3-4 


t20 
READY # Hold Time 
4 
ns 
3-4 


t21 
00-031 
Read 
11 
ns 
3-4 
Setup Time 


t22 
00-031 
Read 
6 
ns 
3-4 
Hold Time 


t23 
HOLD Setup Time 
17 
ns 
3-4 


t24 
HOLD Hold Time 
5 
ns 
3-4 


t25 
RESET Setup Time 
12 
ns 
3-7 


intel~ 


3.2.2 
A.C. SPECIFICATION 
TABLES 
(Continued) 
Functional 
Operating 
Range: Vcc = 5V ± 5%; TCASE = DOCto + 1DDoC 


20 MHz 
Ref. 


Symbol 
Parameter 
Intel386TM 
OX 
Unit 
Fig. 
Notes 


Mln 
Max 


t26 
RESET Hold Time 
4 
ns 
3-7 


t27 
NMI, INTR Setup Time 
16 
ns 
3-4 
(Note 2) 


t28 
NMI, INTR Hold Time 
16 
ns 
3-4 
(Note 2) 


t29 
PEREQ, ERROR#, 
FLT#, 
14 
ns 
3-4 
(Note 2) 
BUSY # Setup Time 


t30 
PEREQ, ERROR #, FLT #, 
5 
ns 
3-4 
(Note 2) 
BUSY # Hold Time 


NOTES: 
1. Float condition occurs when maximum output current becomes less than ILO in magnitude. Float delay is not 100% 
tested. 
2. These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing purposes, 
to assure recognition within a specific CLK2 period. 
• 


Intel386 
OX CPU0----, 
OUTPUT 
..L 


~~ 


CL ~ 
120 pF on A2-A31, 
DO-031 
CL ~ 
75 pF on BEO#-BE3#, 
W/R#, 
M/IO#, 
O/C#, 
AOS#, 


LOCK#, 
HLOA 
CL includes 
all parasitic 
capacitances. 
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Figure 3-5a. Write Data Valid Delay Timing 
(25 MHz, 33 MHz) 
Figure 3-5b. Write Data Hold Timing 
(25 MHz, 33 MHz) 
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NOTE: 
This graph will not be linear outside 
of the CL range shown. 


3.2.6 TYPICAL 
OUTPUT 
VALID 
DELAY 
VERSUS 
LOAD CAPACITANCE 
AT MAXIMUM 
OPERATING 
TEMPERATURE 
(CL = 75 pF) 


nom +9 


.. 
nom +6 


-.5 
>-...-' 
.... 
nom +3 
0 
0::;...> 
•... 
nom 
::> 
0.. 
•... 
::>0 
nom -3 


nom-6 
75 
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150 


NOTE: 
This graph will not be linear outside 
of the CL range 
shown. 


3.2.7 TYPICAL 
OUTPUT 
VALID 
DELAY 
VERSUS 
LOAD CAPACITANCE 
AT MAXIMUM 
OPERATING 
TEMPERATURE 
(CL = 50 pF) 


nom+9 
.. 
-5 
>- 
nom +6 
'" 
...J... 
C 
C:; 
nom+3 
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::> 
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NOTE: 
This graph 
will not be linear outside 
of the CL range shown. 


3.2.8 TYPICAL 
OUTPUT 
RISE TIME VERSUS 
LOAD CAPACITANCE 
AT MAXIMUM 
OPERATING 
TEMPERATURE 
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NOTE: 
This graph will not be linear outside 
of the CL range 
shown. 
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Intel387™ 
OX 
MATH COPROCESSOR 


• 
High Performance 
80-Blt Internal 
Architecture 


• 
Implements 
ANSI/IEEE 
Standard 
754- 
1985 for Binary Floating-Point 
Arithmetic 


• 
Expands 
Intel386TM DX CPU Data 
Types 
to Include 32-, 64-, 80-Bit 
Floating 
Point, 32-, 64-Blt Integers 
and 
18-Dlgit BCD Operands 


• 
Directly 
Extends 
Intel386™ 
DX CPU 
Instruction 
Set to Include 
Trigonometric, 
Logarithmic, 
Exponential 
and Arithmetic 
Instructions 
for All Data Types 


• 
Upward 
Object-Code 
Compatible 
from 
8087 and 80287 


• 
Full-Range 
Transcendental 
Operations 
for SINE, COSINE, TANGENT, 
ARCTANGENT 
and LOGARITHM 


• 
Built-In Exception 
Handling 


• 
Operates 
Independently 
of Real, 
Protected 
and Virtual-8086 
Modes of 
• 
the Intel386™ 
DX Microprocessor 


• 
Eight 80-Blt Numeric 
Registers, 
Usable 
as Individually 
Addressable 
General 
Registers 
or as a Register 
Stack 


• 
Available 
In 68-Pin PGA Package 


• 
One Version 
Supports 
16 MHz-33 
MHz 
Speeds 


(See 
Packaging 
Spec: 
Order 
#231369) 


The Intel387™ 
OX Math CoProcessor 
(MCP) is an extension 
of the Intel386™ 
microprocessor 
architecture. 
The combination 
of the Intel387 
OX MCP with the Intel386™ 
OX Microprocessor 
dramatically 
increases 
the 
processing 
speed of computer 
application 
software 
which utilize mathematical 
operations. 
This makes an ideal 
computer 
workstation 
platform 
for applications 
such as financial 
modeling 
and spreadsheets, 
CAD/CAM, 
or 
graphics. 


The Intel387 
OX Math CoProcessor 
adds over seventy 
mnemonics 
to the Intel386 
OX Microprocessor 
instruc- 
tion set. Specific 
Intel387 
OX MCP math operations 
include 
logarithmic, 
arithmetic, 
exponential, 
and trigono- 


metric 
functions. 
The 
Intel387 
OX MCP supports 
integer, 
extended 
integer, 
floating 
point 
and 
BCD 
data 
formats, 
and fully conforms 
to the ANSI/IEEE 
floating 
point standard. 


The Intel387 
OX Math CoProcessor 
is object code compatible 
with the Intel387 
SX MCP, and upward 
object 
code compatible 
from the 80287 
and 8087 math coprocessors. 
Object 
code for Intel386 
DX/lntel387 
OX is 
also 
compatible 
with the Intel486™ 
microprocessor. 
The 
Intel387 
OX MCP is manufactured 
on 1 micron, 
CHMOS 
IV technology 
and packaged 
in a 68-pin 
PGA package. 
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GENERAL 
REGISTERS 
31 
15 
0 
SEGMENT 
REGISTERS 
15 
0 


EAX 
AX 


AH 
AL 


EBX 
BX 


BH 
BL 


ECX 
CX 


CH 
CL 


EDX 
DX 


DH 
DL 


ESI 
SI 


EDI 
DI 


EBP 
BP 


ESP 
SP 


CS 


SS 


DS 


ES 


FS 


GS 


31 
0 


I 
: EF~GS: 
I 


79 
78 
64 
63 


RO 
Sign 
Exponent 


R1 


R2 


R3 


R4 


R5 


R6 


R7 


Tag 
Field 
1 
0 


Control 
Registe 


Status 
Register 


Tag Word 


Instruction 
Pointer (in i386™ 
DX CPU) 


Data Pointer (in i386TM DX CPU) 


The Intel387™ 
OX Math Coprocessor provides 
arithmetic instructions for a variety of numeric data 
types in Intel386™ OX Microprocessor systems. It 
also 
executes 
numerous 
built-in transcendental 
functions (e.g. tangent, sine, cosine, and log func- 
tions). The Intel387 OX MCP effectively extends the 
register and instruction set of a Intel386 OX Micro- 
processor system for existing data types and adds 
several new data types as well. Figure 1.1 shows the 
model of registers visible to programs. Essentially, 
the Intel387 OX MCP can be treated as an additional 
resource or an extension to the Intel386 OX Micro- 
processor. The Intel386 OX Microprocessor togeth- 
er with a Intel387 OX MCP can be used as a single 
unified system. 


The Intel387 OX MCP works the same whether the 
Intel386 OX Microprocessor is executing in real-ad- 
dress mode, protected mode, or virtual-8086 mode. 
All memory access is handled by the Intel386 OX 
Microprocessor; the Intel387 OX MCP merely oper- 
ates on instructions and values passed to it by the 
Intel386 OX Microprocessor. Therefore, the Intel387 
OX MCP is not sensitive to the processing mode of 
the Intel386 OX Microprocessor. 


In real-address mode and virtual-8086 mode, the In- 
tel386 OX Microprocessor and Intel387 OX MCP are 
completely upward compatible with software for 
8086/8087, 
80286/80287 
real-address mode, and 
Intel386 OX Microprocessor and 80287 Coproces- 
sor real-address mode systems. 


In protected mode, the Intel386 OX Microprocessor 
and Intel387 OX MCP are completely upward com- 
patible with software for 80286/80287 
protected 
mode, and Intel386 OX Microprocessor and 80287 
Coprocessor protected mode systems. 


The only differences of operation that may appear 
when 8086/8087 
programs are ported to a protect- 


ed-mode Intel386 OX Microprocessor and Intel387 
OX MCP system (not using virtual-8086 mode), is in 
the format of operands for the administrative instruc- 
tions FLOENV, FSTENV, FRSTOR and FSAVE. 
These instructions are normally used only by excep- 
tion handlers and operating systems, not by applica- 
tions programs. 


The Intel387 OX MCP contains three functional units 
that can operate in parallel to increase system per- 
formance. The Intel386 OX Microprocessor can be 
transferring commands and data to the MCP bus 
control 
logic for the next instruction while the MCP 
floating-point 
unit is performing the current numeric 
instruction. 


• 


The 
MCP adds to the 
Intel386 
OX Microprocessor 
system 
additional 
data types, registers, 
instructions, 
and interrupts 
specifically 
designed 
to facilitate 
high- 
speed 
numerics 
processing. 
To 
use the 
MCP 
re- 
quires 
no special 
programming 
tools, 
because 
all 
new instructions 
and data types are directly 
support- 
ed by the Intel386 
OX CPU assembler 
and compilers 
for 
high-level 
languages. 
All 8086/8088 
develop- 
ment tools that support 
the 8087 can also be used 
to develop 
software 
for the Intel386 
OX Microproc- 
essor and Intel387 
OX Math Coprocessor 
in real-ad- 
dress 
mode 
or virtual-8086 
mode. All 80286 
devel- 
opment 
tools 
that 
support 
the 80287 
can also 
be 
used to develop 
software 
for the Intel386 
OX Micro- 


procE<ssor and Intel387 
OX Math Coprocessor. 


All communication 
between 
the Intel386 
OX Micro- 
processor 
and the 
MCP is transparent 
to applica- 
tions 
software. 
The CPU automatically 
controls 
the 
MCP whenever 
a numerics 
instruction 
is executed. 
All physical 
memory 
and virtual 
memory 
of the CPU 
are available 
for storage 
of the instructions 
and op- 
erands 
of programs 
that use the MCP. All memory 
addressing 
modes, 
including 
use of displacement, 
base register, 
index register, 
and scaling, 
are avail- 
able for addressing 
numerics 
operands. 


Section 
6 at the end of this data sheet lists by class 
the instructions 
that the MCP adds to the instruction 
set of the Intel386 
OX Microprocessor 
system. 


Table 2.1 lists the seven data types that the Intel387 
OX MCP supports 
and presents 
the format 
for each 
type. Operands 
are stored 
in memory 
with the least 
significant 
digit at the lowest 
memory 
address. 
Pro- 


grams 
retrieve 
these 
values 
by generating 
the low- 
est address. 
For maximum 
system 
performance, 
all 
operands 
should 
start at physical-memory 
address- 
es evenly divisible 
by four (doubleword 
boundaries); 


operands 
may begin at any other addresses, 
but will 
require extra memory cycles to access the entire op- 
erand. 


Internally, 
the Intel387 
OX MCP holds all numbers 
in 
the extended-precision 
real format. 
Instructions 
that 
load operands 
from 
memory 
automatically 
convert 


operands 
represented 
in memory 
as 16-, 32-, or 64- 
bit integers, 
32- or 64-bit floating-point 
numbers, 
or 


18-digit 
packed 
BCO numbers 
into extended-preci- 
sion real format. 
Instructions 
that store operands 
in 
memory 
perform 
the inverse type conversion. 


2.2 Numeric Operands 


A typical 
MCP instruction 
accepts 
one or two oper- 
ands and produces 
a single 
result. 
In two-operand 
instructions, 
one operand 
is the contents 
of an MCP 
register, 
while the other may be a memory 
location. 


The operands 
of some 
instructions 
are predefined; 


for example 
FSQRT always takes the square root of 
the number 
in the top stack element. 


Moat SlgnltlCllnt Byte = HIg"..t 
Addreeaed 
Byte 
oeta 
Ranga 
Pracl.lon 
017 
0/7 
017 
017 
017 
017 
017 
017 
017 
01 
Format. 
7 


Word 
Integer 
± 1()4 
16 Bits 
1(TWO 
S 


COMPLEMENT, 


1S 
0 


Short 
Integer 
±109 
32 Bits 
llTWOS 


COMPLEMENT, 


31 
0 


±1018 
64 Bits 
IITWO 
S 
Long 
Integer 
COMPLEMENT, 


63 
0 


~ 
X 
~,/.Clll>ldl~.CI, 
.•• d'J 
MAGNITUDE 
0.1 
Packed 
BCD 
±10±18 
18 Digits 
du 
eI•• 
dlUI 
d9 
I da 
0, 
0, .' 


U, 
eI, 
I Ui 
I d, 


79 
72 
0 


Single Pree:Islon 
± 10±38 
24 Bits 
)l, BIASED 
I 
$IGNIFICAND 
I 
5 
EXPONENT 
" 
2~-1" 
0 


Double 
Precision 
± 10±308 
53 Bits 
51 
BIASED 
I 
SIGNIFICAND 
I 
EXPONENT 


~3 
52\..... I .• 
0 


Extended 
10±4932 
64 Bits 
;r 
BIASED 
101 
$IGNIFICAND 
I 
PrecisiOn 
EXPONENT 


9 
14 63' 
0 


NOTES: 
(1) S = Sign bit (0 = positive, 
1 = negative) 
(2) dn = Decimal 
digit (two per byte) 
(3) X = Bits have no significance; 
Intel387™ 
OX MCP ignores 
when 
loading, 
zeros when 
storing 
(4)'" 
= Position 
of implicit 
binary point 
(5) I = Integer 
bit of significand; 
stored 
in temporary 
real, implicit 
in single and double 
precision 
(6) Exponent 
Bias (normalized 
values): 


Single: 
127 (7FH) 
Double: 
1023 (3FFH) 
Extended 
Real: 16383 
(3FFFH) 


(7) Packed 
BCD: (-1)5 
(017 ...00) 
(8) Real: (-1)5 
(2E-BIA5) (Fa Fl"') 
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15 
0 
---------------------------- 
TAG (7) I 
TAG (6) I 
TAG (5) I 
TAG (4) I 
TAG (3) I 
TAG (2) I 
TAG (1) I 
TAG (0) 


NOTE: 
The index i of tag(i) is not 
top-relative. 
A program 
typically 
uses the "top" 
field of Status 
Word to determine 
which 
tag (i) 
field refers 
to logical 
top of stack. 


TAG VALUES: 
00 = Valid 
01 = Zero 
10 = QNaN, 
SNaN, 
Infinity, 
Denormal 
and Unsupported 
Formats 
11 = Empty 


2.3 Register Set 


Figure 1.1 shows 
the Intel387 
OX MCP register 
set. 


When an MCP is present 
in a system, 
programmers 
may use these 
registers 
in addition 
to the registers 
normally 
available 
on the Intel386 
OX CPU. 


Intel387 
OX MCP computations 
use the MCP's data 
registers. 
These 
eight 
80-bit 
registers 
provide 
the 
equivalent 
capacity 
of twenty 
32-bit 
registers. 
Each 
of the eight data registers 
in the MCP is 80 bits wide 
and 
is divided 
into 
"fields" 
corresponding 
to 
the 
MCPs extended-precision 
real data type. 


The Intel387 
OX MCP register 
set can be accessed 
either as a stack, with instructions 
operating 
on the 
top one or two stack elements, 
or as a fixed register 
set, with instructions 
operating 
on explicitly 
designat- 
ed registers. 
The TOP field in the status word identi- 
fies the current top-of-stack 
register. A "push" 
oper- 
ation decrements 
TOP by one and loads a value into 
the new top register. 
A "pop" 
operation 
stores 
the 
value 
from 
the current 
top register 
and then 
incre- 


ments TOP by one. Like the Intel386 
OX Microproc- 
essor 
stacks 
in memory, 
the 
MCP 
register 
stack 
grows 
"down" 
toward 
lower-addressed 
registers. 


Instructions 
may address 
the 
data 
registers 
either 
implicitly 
or explicitly. 
Many instructions 
operate 
on 
the register 
at the TOP of the stack. These 
instruc- 
tions 
implicitly 
address 
the 
register 
at which 
TOP 
points. 
Other 
instructions 
allow 
the programmer 
to 
explicitly 
specify 
which 
register 
to user. This explicit 
register 
addressing 
is also relative 
to TOP. 


The 
tag word 
marks 
the 
content 
of each 
numeric 
data register, 
as Figure 2.1 shows. 
Each two-bit 
tag 
represents 
one of the eight numerics 
registers. 
The 
principal 
function 
of the tag word is to optimize 
the 
MCPs performance 
and stack handling 
by making 
it 
possible 
to distinguish 
between 
empty and nonemp- 
ty register 
locations. 
It also enables 
exception 
han- 
dlers to check the contents 
of a stack location 
with- 
out the 
need to perform 
complex 
decoding 
of the 
actual data. 


t.lCP BUSY 


TOP OF STACK POINTER 


CONDITION CODE 


EXCEPTION FLAGS: 


PRECISION 


UNDERFLOW 


OVERFLOW 


ZERO DIVIDE 
DENORt.lALIZED 
OPERAND 


INVALID OPERATION 


ES is set if any unmasked 
exception 
bit is set; cleared 
otherwise. 
See Table 
2.2 for interpretation 
of condition 
code. 
TOP values: 
000 = Register 
0 is Top of Stack 
001 = 
Register 
1 is Top of Stack 


111 = 
Register 
7 is Top of Stack 
For definitions 
of exceptions, 
refer 
to the 
section 
entitled 
"Exception 
Handiing" 


Figure 2.2. MCP Status Word 


Bit 6 is the stack flag (SF). This bit is used to distin- 
guish invalid operations 
due to stack overflow 
or un- 
derflow from other kinds of invalid operations. 
When 
SF is set, 
bit 9 (C1) 
distinguishes 
between 
stack 
overflow 
(C1 = 1) and underflow 
(C1 = 0). 


The 16-bit status word (in the status register) 
shown 
in Figure 2.2 reflects 
the overall state of the MCP. It 
may be read and inspected 
by CPU code. 


Bit 15, the B-bit (busy bit) is included 
for 8087 com- 
patibility 
only. 
It reflects 
the contents 
of the ES bit 
(bit 
7 of 
the 
status 
word), 
not 
the 
status 
of 
the 
BUSY # output 
of the Intel387 
OX MCP. 


Bits 13-11 
(TOP) point to the Intel387 
OX MCP reg- 
ister that is the current 
top-of-stack. 


The four 
numeric 
condition 
code 
bits (C3-CO) 
are 
similar 
to the flags 
in a CPU; instructions 
that 
per- 
form 
arithmetic 
operations 
update 
these 
bits to re- 
flect the outcome. 
The effects 
of these 
instructions 
on the condition 
code are summarized 
in Tables 
2.2 
through 
2.5. 


Bit 7 is the error summary 
(ES) status bit. This bit is 
set if any unmasked 
exception 
bit is set; it is clear 
otherwise. 
If this bit is set, the ERROR# 
signal 
is 
asserted. 


Figure 2.2 shows the six exception 
flags in bits 5-0 
of the status word. 
Bits 5-0 
are set to indicate 
that 
the MCP has detected 
an exception 
while executing 
an instruction. 
A later 
section 
entitled 
"Exception 
Handling" 
explains 
how they are set and used. 


Note that when a new value is loaded into the status 
word 
by the 
FLOENV 
or FRSTOR 
instruction, 
the 
value of ES (bit 7) and its reflection 
in the B-bit (bit 
15) are 
not 
derived 
from 
the 
values 
loaded 
from 
memory but rather are dependent 
upon the values of 
the exception 
flags (bits 5-0) 
in the status word and 
their corresponding 
masks in the control 
word. If ES 
is set in such a case, 
the ERROR # output 
of the 
MCP is activated 
immediately. 
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Instruction 
CO (5) 
I 
C3 (Z) 
C1 (A) 
C2 (C) 


FPREM, FPREM1 
Three least significant 
bits 
Reduction 
(see Table 2.3) 
of quotient 
0= 
complete 
02 
00 
01 
orO/Uti 
1 = incomplete 


FCOM, FCOMP, 
FCOMPP, FTST, 
Result of comparison 
Zero 
Operand 
is not 
FUCOM, FUCOMP, 
(see Table 2.4) 
orO/Uti 
comparable 
FUCOMPP, 
FICOM, 
(Table 2.4) 


FICOMP 


FXAM 
Operand 
class 
Sign 
Operand 
class 
(see Table 2.5) 
orO/Uti 
(Table 2.5) 


FCHS, FABS, FXCH, 
FINCSTP, 
FDECSTP, 
Zero 
Constant 
loads, 
UNDEFINED 
orO/Uti 
UNDEFINED 
FXTRACT, 
FLD, 
FILD, FBLD, 
FSTP (ext real) 


FIST, FBSTP, 
FRNDINT, 
FST, 
FSTP, FADD, FMUL, 
Roundup 
FDIV, FDIVR, 
UNDEFINED 
UNDEFINED 
FSUB, FSUBR, 
orO/Uti 


FSCALE, 
FSORT, 


FPATAN, 
F2XM1, 


FYL2X,FYL2XP1 


FPTAN, FSIN 
Roundup 
Reduction 
FCOS, FSINCOS 
UNDEFINED 
orO/Uti, 
0= 
complete 
undefined 
1 = incomplete 


if C2 = 
1 


FLDENV, 
FRSTOR 
Each bit loaded from memory 


FLDCW, FSTENV, 
FSTCW, FSTSW, 
UNDEFINED 
FCLEX, FINIT, 
FSAVE 


O/Utl 
When 
both 
IE and SF bits of status 
word 
are set, indicating 
a stack 
exception, 
this 
bit 


distinguishes 
between 
stack overflow 
(C1 = 
1) and underflow 
(C1 = 0). 


Reduction 
If FPREM 
or FPREM1 
produces 
a remainder 
that 
is less than the modulus, 
reduction 
is 


complete. 
When 
reduction 
is incomplete 
the 
value 
at the 
top 
of the 
stack 
is a partial 


remainder, 
which can be used as input to further 
reduction. 
For FPTAN, 
FSIN, FCOS, and 
FSINCOS, 
the reduction 
bit is set if the operand 
at the top of the stack is too large. In this 


case the original 
operand 
remains 
at the top of the stack. 


Roundup 
When the PE bit of the status word is set, this bit indicates 
whether 
the last rounding 
in the 
instruction 
was upward. 


UNDEFINED 
Do not rely on finding 
any specific 
value in these bits. 


Condition 
Code 
Interpretation 
after FPREM and FPREM1 
C2 
C3 
C1 
CO 


Incomplete 
Reduction: 


1 
X 
X 
X 
further interation 
required 
for complete 
reduction 


01 
oa 
02 
o MOD8 
a 
a 
a 
a 
a 
1 
a 
1 
Complete 
Reduction: 
1 
a 
a 
2 
a 
1 
1 
a 
3 
ca, C3, C1 contain three least 


a 
a 
1 
4 
significant 
bits of quotient 


a 
1 
1 
5 
1 
a 
1 
6 
1 
1 
1 
7 


Order 
C3 
C2 
CO 


TOP > Operand 
a 
a 
a 
TOP < Operand 
a 
a 
1 
TOP = Operand 
1 
a 
a 
Unordered 
1 
1. 
1 


C3 
C2 
C1 
CO 
Value at TOP 
a 
a 
a 
a 
+ Unsupported 
a 
a 
a 
1 
+ NaN 
a 
a 
1 
a 
~ Unsupported 
a 
a 
1 
1 
- 
NaN 
a 
1 
a 
a 
+ Normal 
a 
1 
a 
1 
+ Infinity 
a 
1 
1 
a 
- 
Normal 
a 
1 
1 
1 
- 
Infinity 
1 
a 
a 
a 
+a 
1 
a 
a 
1 
+ Empty 
1 
a 
1 
a 
-a 
1 
a 
1 
1 
- 
Empty 
1 
1 
a 
a 
+ Denormal 
1 
1 
1 
a 
- 
Denormal 
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Because 
the MCP operates 
in parallel with the CPU, 
any errors 
detected 
by the 
MCP may be reported 
after 
the 
CPU 
has 
executed 
the 
ESC 
instruction 


which 
caused 
it. To allow identification 
of the failing 
numeric 
instruction, 
the Intel386 
DX Microprocessor 


and 
Intel387 
DX Math 
CoProcessor 
contains 
two 
pointer 
registers 
that supply the address 
of the fail- 


ing numeric instruction 
and the address of its numer- 
ic memory 
operand 
(if appropriate). 


The 
instruction 
and data 
pointers 
are provided 
for 
user-written 
error handlers. 
These 
registers 
are ac- 
tually located 
in the Intel386 
DX CPU, but appear to 


be located 
in the MCP because 
they are accessed 


by the ESC instructions 
FLDENV, 
FSTENV, 
FSAVE, 


and FRSTOR. 
(In the 8086/8087 
and 80286/80287, 
these 
registers 
are located 
in the MCP.) Whenever 


tion, it saves the address of the instruction 
(including 


any prefixes 
that 
may be present), 
the address 
of 


the operand 
(if present), 
and the opcode. 


The instruction 
and data pointers 
appear 
in one of 


four 
formats 
depending 
on the operating 
mode 
of 


the Intel386 
DX Microprocessor 
(protected 
mode or 


real-address 
mode) and depending 
on the operand- 


size attribute 
in effect 
(32-bit operand 
or 16-bit oper- 


and). When the Intel386 
DX Microprocessor 
is in vir- 


tual-8086 
mode, the real-address 
mode formats 
are 


used. 
(See 
Figures 
2.3 through 
2.6.) The 
ESC in- 


structions 
FLDENV, 
FSTENV, 
FSAVE, and FRSTOR 


are used to transfer 
these 
values 
between 
the 
In- 


tel386 
DX Microprocessor 
registers 
and 
memory. 


Note that the value of the data pointer is undefined 
if 


the prior ESC instruction 
did not have a memory 
op- 


erand. 


32-BIT PROTECTED 
MODE FORMAT 
15 
7 
·, 


RESERVED 
CONTR~L 
WORD 
-, 


RESERVED 
STATU~WORD 


, 


RESERVED 
TAG~ORD 


IPOFFSET 
, 


I 


1 


00000 
OPCODE 10..0 
CSSELECTOR 


·, 


DATA OPERAND 
OFFSET 


· 


RESERVED 
OPERAND 
~ELECTOR 
,-- 


Figure 2.3. Protected 
Mode Intel387™ 
OX MCP Instruction 
and 
Data Pointer 
Image in Memory, 
32·Bit Format 


32-BIT REAL-ADDRESS 
MODE FORMAT 
23 
15 
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OX MCP 
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Image In Memory, 
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RESERVED 


RESERVED" 


ROUNDING CONTROL 


PRECISION CONTROL 


EXCEPTION tolASKS: 


PRECISION 


UNDERFLOW 


OVERFLOW 


ZERO DIVIDE 
DENORtolALIZED OPERAND 


INVALID OPERATION 


Precision Control 
0(}-24 
bits (single precision) 
o1-(reserved) 
1(}-S3 bits (double precision) 
11-64 
bits (extended precision) 


" "0" AFTER RESET OR FINIT; 
CHANGEABLE 
UPON LOADING THE 
CONTROL WORD (CW). 
PROGRAtolS 
tolUST IGNORE THIS BIT. 


Rounding Control 
O(}-Round to nearest or even 
01-Round 
down (toward - 00) 
1(}-Round 
up (toward + 00) 
11-{;hop 
(truncate toward zero) 


The MCP provides 
several 
processing 
options 
that 
are selected 
by loading a control 
word from memory 
into the control 
register. 
Figure 2.7 shows the format 
and encoding 
of fields in the control 
word. 


The 
low-order 
byte of this control 
word 
configures 
the MCP error and exception 
masking. 
Bits 5-0 
of 
the control word contain 
individual 
masks for each of 
the six exceptions 
that the MCP recognizes. 


The high-order 
byte of the control 
word configures 
the 
MCP operating 
mode, 
including 
precision 
and 
rounding. 


• 
Bit 12 no longer 
defines 
infinity 
control 
and is a 
reserved 
bit. Only affine 
closure 
is supported 
for 
infinity arithmetic. 
The bit is initialized to zero after 
RESET or FINIT and is changeable 
upon loading 
the CWo Programs 
must ignore this bit. 


• 
The rounding 
control 
(RC) bits (bits 11-10) 
pro- 
vide for directed 
rounding 
and true chop, as well 
as the 
unbiased 
round 
to 
nearest 
even 
mode 
specified 
in the IEEE standard. 
Rounding 
control 


affects 
only 
those 
instructions 
that 
perform 
rounding 
at the end of the operation 
(and thus 
can 
generate 
a 
precision 
exception); 
namely, 
FST, FSTP, FIST, all arithmetic 
instructions 
(ex- 
cept 
FPREM, 
FPREM1, 
FXTRACT, 
FABS, 
and 
FCHS), and all transcendental 
instructions. 


• 
The precision 
control 
(PC) bits (bits 9-8) 
can be 
used to set the MCP internal 
operating 
precision 
of the significand 
at less than the default 
of 64 
bits (extended 
precision). 
This can be useful 
in 
providing 
compatibility 
with early generation 
arith- 
metic processors 
of smaller precision. 
PC affects 
only the instructions 
ADD, SUB, 
DIV, MUL, and 
SORT. For all other instructions, 
either the preci- 
sion 
is determined 
by the 
opcode 
or extended 
precision 
is used. 


Several 
interrupts 
of the Intel386 
DX CPU are used 
to report exceptional 
conditions 
while executing 
nu- 
meric programs 
in either real or protected 
mode. Ta- 
ble 2.6 shows these 
interrupts 
and their causes. 


Interrupt 
Cause of Interrupt 
Number 


7 
An ESC instruction 
was encountered 
when EM or TS of the Intel386TM OX CPU control 
register zero (CRO) was set. EM = 1 indicates 
that software 
emulation 
of the instruction 
is 
required. When TS is set, either an ESC or WAIT instruction 
causes interrupt 
7. This 
indicates 
that the current MCP context 
may not belong to the current task. 


9 
An operand 
of a coprocessor 
instruction 
wrapped 
around an addressing 
limit (OFFFFH for 
small segments, 
OFFFFFFFFH 
for big segments, 
zero for expand-down 
segments) 
and 
spanned 
inaccessible 
addresses(1). 
The failing numerics 
instruction 
is not restartable. 
The 
address of the failing numerics 
instruction 
and data operand 
may be lost; an FSTENV does 
not return reliable addresses. 
As with the 80286/80287, the segment 
overrun exception 
should be handled by executing 
an FNINIT instruction 
(Le. an FINIT without 
a preceding 
WAIT). The return address on the stack does not necessarily 
point to the failing instruction 
nor to the following 
instruction. 
The interrupt 
can be avoided 
by never allowing 
numeric 
data to start within 108 bytes of the end of a segment. 


13 
The first word or doubleword 
of a numeric operand 
is not entirely within the limit of its 
segment. 
The return address pushed onto the stack of the exception 
handler points at the 
ESC instruction 
that caused the exception, 
including 
any prefixes. The Intel387™ 
OX MCP 
has not executed 
this instruction; 
the instruction 
pointer and data pointer register refer to a 
previous, 
correctly 
executed 
instruction. 


16 
The previous 
numerics 
instruction 
caused an unmasked 
exception. 
The address of the 
faulty instruction 
and the address of its operand 
are stored in the instruction 
pointer and 
data pointer registers. 
Only ESC and WAIT instructions 
can cause this interrupt. 
The 
Intel386™ 
OX CPU return address pushed onto the stack of the exception 
handler points 
to a WAIT or ESC instruction 
(including 
prefixes). This instruction 
can be restarted 
after 
clearing the exception 
condition 
in the MCP. FNINIT, FNCLEX, FNSTSW, 
FNSTENV, 
and 
FNSAVE cannot cause this interrupt. 


1. An operand 
may wrap 
around 
an addressing 
limit when 
the segment 
limit is near .an addressing 
limit and the operand 
is near the largest 
valid 
address 
in the 
segment. 
Because 
of the wrap-around, 
the beginning 
and ending 
addresses 
of such 
an operand 
will be at opposite 
ends 
of the 
segment. 
There 
are two ways 
that such 
an operand 
may also 
span 
inaccessible 
addresses: 
1) if the segment 
limit is not equal 
to the addressing 
limit (e.g. addressing 
limit is FFFFH 
and segment 
limit is FFFDH) 
the operand 
will span 
addresses 
that are not within 
the segment 
(e.g. an a·byte 
operand 
that 
starts 
at valid 
offset 
FFFC 
will 
span 
addresses 
FFFC-FFFF 
and 
0000-0003; 
however 
addresses 
FFFE 
and 
FFFF 
are 
not valid, 
because 
they exceed 
the limit); 
2) if the operand 
begins 
and ends 
in present 
and accessible 
pages 
but intermediate 
bytes 
of the operand 
fall in a 
not-present 
page 
or a page to which 
the procedure 
does 
not have 
access 
rights. 


2.5 Exception 
Handling 


The Intel387 
OX MCP detects 
six different 
exception 
conditions 
that 
can occur 
during 
instruction 
execu- 
tion. Table 2.7 lists the exception 
conditions 
in order 
of precedence, 
showing 
for each the cause and the 
default 
action 
taken 
by the MCP if the exception 
is 
masked 
by its corresponding 
mask bit in the control 
word. 


tion 
and the 
address 
of any 
memory 
operand 
re- 
quired by that instruction. 


Any 
exception 
that 
is not 
masked 
by the 
control 
word 
sets the corresponding 
exception 
flag of the 
status word, sets the ES bit of the status word, and 
asserts 
the 
ERROR II 
signal. 
When 
the 
CPU 
at- 
tempts 
to execute 
another 
ESC instruction 
or WAIT, 
exception 
7 occurs. 
The 
exception 
condition 
must 
be resolved 
via an interrupt 
service 
routine. 
The In- 
tel386 
OX Microprocessor 
saves the address 
of the 
floating-point 
instruction 
that 
caused 
the 
excep- 


Intel387 
OX MCP initialization 
software 
must 
exe- 
cute an FNINIT 
instruction 
(Le. an FINIT without 
a 
preceding 
WAIT) to clear ERROR II. After a hardware 
RESET,.the 
ERROR II output is asserted 
to indicate 
that a Intel387 
OX MCP is present. 
To accomplish 
this, the IE and ES bits of the status 
word 
are set, 
and 
the 
1M bit in the 
control 
word 
is reset. 
After 
FNINIT, 
the status word and the control 
word have 
the same values 
as in an 80287 after RESET. 


• 


This 
section 
summarizes 
the 
differences 
between 
the Intel387 
OX MCP and the 80287. 
Any migration 


from the 8087 directly 
to the Intel387 
OX MCP must 


also take into account 
the differences 
between 
the 


8087 and the 80287 as listed in Appendix 
A. 


Many changes 
have been designed 
into the Intel387 


OX MCP to directly 
support 
the 
IEEE standard 
in 


hardware. 
These 
changes 
result 
in increased 
per- 
formance 
by eliminating 
the need for software 
that 


supports 
the standard. 


The 
Intel387 
OX MCP supports 
only affine 
closure 


for infinity arithmetic, 
not projective 
closure. 
Bit 12 of 


the 
Control 
Word 
(CW) 
no 
longer 
defines 
infinity 


control. 
It is a reserved 
bit; but it is initialized 
to zero 


after RESET or FINIT and is changeable 
upon load- 


ing the CW. Programs 
must ignore this bit. 


intel~ 


Operands 
for FSCALE 
and FPATAN 
are no longer 


restricted 
in range 
(except 
for 
± 00); 
F2XM1 
and 


FPT AN accept 
a wider range of operands. 


The 
results 
of transcendental 
operations 
may 
be 


slightly 
different 
from those 
computed 
by 80287. 


In the case of FPTAN, the Intel387 
OX MCP supplies 


a true tangent 
result in ST(1), and (always) a floating 


point 1 in ST. 


Software 
cannot 
change 
entries 
of the tag word to 


values 
(other than empty) that do not reflect 
the ac- 


tual register 
contents. 


After 
reset, 
FIN IT, and incomplete 
FPREM, 
the 
In- 


tel387 
OX MCP resets 
to zero the 
condition 
code 


bits C3-CO of the status word. 


In conformance 
with the IEEE standard, 
the Intel387 


OX MCP does not support 
the special 
data formats: 


pseudozero, 
pseudo-NaN, 
pseudoinfinity, 
and 
un- 


normal. 


Exception 
Cause 
Default Action 
(If exception 
Is masked) 


Invalid 
Operation 
on a signaling 
NaN, unsupported 
format, 
Result is a quiet NaN, integer 


Operation 
indeterminate 
form (0' 
00, 0/0, (+ 00) + (- 
00), etc.), or 
indefinite, 
or BCD indefinite 


stack overflow/underflow 
(SF is also set). 


Denormalized 
At least one of the operands 
is denormalized, 
I.e. it has 
Normal processing 


Operand 
the smallest 
exponent 
but a nonzero significand. 
continues 


Zero Divisor 
The divisor is zero while the dividend 
is a noninfinite, 
Result is 00 
nonzero 
number. 


Overflow 
The result is too large in magnitude 
to fit in the specified 
Result is largest finite value 


format. 
or 00 


Underflow 
The true result is nonzero but too small to be 
Result is denormalized 
or 


represented 
in the specified 
format, and, if underflow 
zero 
exception 
is masked, de normalization 
causes loss of 
accuracy. 


Inexact 
The true result is not exactly representable 
in the 
Normal processing 


Result 
specified 
format 
(e.g. 1/3); the result is rounded 
continues 


(Precision) 
according 
to the rounding 
mode. 


2.7.2 EXCEPTIONS 


A number of differences exist due to changes in the 
IEEE standard and to functional improvements to 
the architecture of the Intel387 DX MCP: 


1. When the overflow or underflow exception is 
masked, the Intel387 DX MCP differs from the 
80287 in rounding when overflow or underflow 
occurs. The Intel387 DX MCP produces results 
that are consistent with the rounding mode. 


2. When the underflow exception is masked, the 
Intel387 DX MCP sets its underflow flag only if 
there is also a loss of accuracy during denormali- 
zation. 
3. Fewer invalid-operation exceptions due to de- 
normal 
operands, 
because 
the 
instructions 
FSQRT, FDIV, FPREM, and conversions to BCD 
or to integer normalize denormal operands be- 
fore proceeding. 


4. The FSQRT, FBSTP, and FPREM instructions 
may cause underflow, because they support de- 
normal operands. 
5. The denormal exception can occur during the 
transcendental instructions and the FXTRACT· 
instruction. 


6. The denormal exception no longer takes prece- 
dence over all other exceptions. 
7. When the denormal exception is masked, the In- 
tel387 DX MCP automatically normalizes denor- 
mal operands. The 8087/80287 performs unnor- 
mal arithmetic, which might produce an unnor- 
mal result. 


8. When the operand is zero, the FXTRACT in- 
struction reports a zero-divide exception and 
leaves - 
00 in ST(1). 


9. The status word has a new bit (SF) that signals 
when invalid-operation exceptions are due to 
stack underflow or overflow. 


10. FLD extended precision no longer reports denor- 
mal exceptions, because the instruction is not 
numeric. 


11. FLD single/double precision when the operand 
is denormal converts the number to ex1ended 
precision and signals the denormalized operand 
exception. When loading a signaling NaN, FLD 
single/double precision signals an invalid-oper- 
and exception. 


12. The Intel387 DX MCP only generates quiet 
NaNs (as on the 80287); however, the Intel387 
DX MCP distinguishes between quiet NaNs and 
signaling NaNs. Signaling NaNs trigger excep- 
tions when they are used as operands; quiet 
NaNs do not (except for FCOM, FIST, and 
FBSTP which also raise IE for quiet NaNs). 
13. When stack overflow occurs during FPTAN and 
overflow is masked, both ST(O)and ST(1) con- 
tain quiet NaNs. The 80287/8087 
leaves the 
original operand in ST(1) intact. 


14. When the scaling factor is ± 00, the FSCALE 
(ST(O), ST(1)) instruction behaves as follows 
(ST(O)and ST(1) contain the scaled and scaling 
operands respectively): 
• FSCALE(O,00) generates the invalid operation 
exception. 
• FSCALE(finite, - 00) generates zero with the 
same sign as the scaled operand. 


• FSCALE(finite, + 00) 
generates 
00 
with the 
same sign as the scaled operand. 


The 8087/80287 returns zero in the first case 
and raises the invalid-operation exception in the 
other cases. 
15. The Intel387 DX MCP returns signed infinity/ 
zero as the unmasked response to massive 
overflow/underflow. The 8087 and 80287 sup- 
port a limited range for the scaling factor; within 
this range either massive overflow/underflow do 
not occur or undefined results are produced. 


In the following description of hardware interface, 
the # symbol at the end of a signal name indicates 
that the active or asserted state occurs when the 
signal is at a low voltage. When no # is present after 
the signal name, the signal is asserted when at the 
high voltage level. 


In the following signal descriptions, the Intel387 DX 
Math Coprocessor pins are grouped by function as 
follows: 
1. Execution control-CPUCLK2, 
NUMCLK2, CKM, 


RESETIN 
2. MCP handshake-PEREQ, 
BUSY#, ERROR# 
3. Bus interface 
pins-D31-DO, 
W/R#, 
ADS#, 


READY#, READYO# 
4. Chip/Port 
Select-STEN, 
NPS1#, 
NPS2, 


CMDO# 


5. Power supplies-Vcc, 
Vss 


Table 3.1 lists every pin by its identifier, gives a brief 
description of its function, and lists some of its char- 
acteristics. All output signals are tristate; they leave 
floating state only when STEN is active. The output 
buffers of the bidirectional data pins D31-DO are 
also tristate; they leave floating state only in read 
cycles when the MCP is selected (Le. when STEN, 
NPS1#, and NPS2 are all active). 


Figure 3.1 and Table 3.2 together show the location 
of every pin in the pin grid array. 
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Pin 
Function 
Active 
Inputl 
Referenced 
Name 
State 
Output 
To 


CPUCLK2 
Intel386™ 
OX CPU CLocK 2 
I 
NUMCLK2 
Intel387™ 
OX MCP CLocK 2 
I 
CKM 
Intel387™ 
OX MCP CLocKing 
Mode 
I 
RESETIN 
System reset 
High 
I 
CPUCLK2 


PEREQ 
Processor 
Extension 
High 
0 
CPUCLK2/STEN 
REQuest 
, 


8USY# 
8usy status 
Low 
0 
CPUCLK2/STEN 
ERROR# 
Error status 
Low 
0 
NUMCLK2/STEN 


031-00 
Data pins 
High 
I/O 
CPUCLK2 
W/R# 
Write/Read 
bus cycle 
Hi/Lo 
I 
CPUCLK2 
AOS# 
ADdress 
Strobe 
Low 
I 
CPUCLK2 
REAOY# 
8us ready input 
Low 
I 
CPUCLK2 
REAOYO# 
Ready output 
Low 
0 
CPUCLK2/STEN 


STEN 
STatus ENable 
High 
I 
CPUCLK2 
NPS1 # 
MCP select 
# 1 
Low 
I 
CPUCLK2 
NPS2 
MCP select 
# 2 
High 
I 
CPUCLK2 
CMOO# 
CoMmanD 
Low 
I 
CPUCLK2 


Vcc 
I 
Vss 
I 


NOTE: 
STEN 
is referenced 
to only when 
getting 
the output 
pins into or out of tristate 
mode. 


AOS# 
- 
K7 
018 
- 
A8 
STEN 
- 
L4 
8USY# 
- 
K2 
019 
- 
89 
W/R# 
- 
K4 
CKM 
- 
J11 
020 
- 
810 
CPUCLK24 
- 
K10 
021 
- 
A10 
Vcc 
- 
A6, A9, 84, 


CMOO# 
- 
L8 
022 
- 
811 
E1, F1, F10, 
DO 
- 
H2 
023 
- 
C10 
J2, K5, 


01 
- 
H1 
024 
- 
010 
L7 
02 
- 
G2 
025 
- 
011 
03 
- 
G1 
026 
- 
E10 
VSS 
- 
82,87, 
C11, 
04 
- 
02 
027 
- 
E11 
E2, F2, F11, 
05 
- 
01 
028 
- 
G10 
J1,J10,L5 
06 
- 
C2 
029 
- 
G11 
07 
- 
C1 
030 
- 
H10 
NO CONNECT 
- 
K9 
08 
- 
81 
031 
- 
H11 
TIE HIGH 
- 
K3,L9* 


09 
- 
A2 
ERROR# 
- 
L2 
010 
- 
83 
NPS1# 
- 
L6 
011 
- 
A3 
NPS2 
- 
K6 
012 
- 
A4 
NUMCLK2 
- 
K11 
013 
- 
85 
PEREQ 
- 
K1 
014 
- 
A5 
REAOY# 
- 
K8 
015 
- 
86 
REAOYO# 
- 
L3 
016 
- 
A7 
RESETIN 
- 
L10 
017 
- 
88 
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Figure 3.1. Intel387TM OX MCP Pin Configuration 
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3.1.1 Intel386™ 
DX CPU CLOCK 
2 (CPUCLK2) 


This input uses the Intel386 
OX CPU CLK2 signal to 
time the bus control 
logic. Several 
other 
MCP sig- 
nals are referenced 
to the rising edge of this signal. 


When 
CKM = 
1 (synchronous 
mode) 
this pin also 
clocks 
the data 
interface 
and control 
unit and the 
floating-point 
unit 
of 
the 
MCP. 
This 
pin 
requires 
MOS-Ievel 
input. The signal on this pin is divided 
by 
two to produce 
the internal 
clock 
signal CLK. 


3.1.2 Intel387™ 
DX MCP CLOCK 
2 (NUMCLK2) 


When CKM = 0 (asynchronous 
mode) this pin pro- 
vides the clock for the data interface 
and control 
unit 
and the floating-point 
unit of the MCP. In this case, 


the ratio of the frequency 
of NUMCLK2 
to the fre- 


quency of CPUCLK2 
must lie within the range 10:16 


to 14:10. When CKM = 1 (synchronous 
mode) this 


pin is ignored; CPUCLK2 
is used instead for the data 


interface 
and control 
unit and the floating-point 
unit. 


This pin requires 
TIL-Ievel 
input. 


3.1.3 Intel387™ 
DX MCP CLOCKING 
MODE 
(CKM) 


This pin is a strapping 
option. When it is strapped 
to 


Vcc, the MCP operates 
in synchronous 
mode; when 


strapped 
to Vss, the MCP operates 
in asynchronous 


mode. 
These 
modes 
relate 
to clocking 
of the data 


interface 
and control 
unit and the floating-point 
unit 


only; the bus control 
logic always operates 
synchro- 


nously with respect 
to the Intel386 
OX Microproces- 


sor. 


3.1.4 SYSTEM 
RESET 
(RESETIN) 


A LOW to HIGH transition on this pin causes the 
MCP to terminate its present activity and to enter a 
dormant state. RESETIN must remain HIGH for at 
least 40 NUMCLK2 periods. The HIGH to LOW tran- 
sitions of 
RESETIN must be synchronous with 
CPUCLK2, so that the phase of the internal clock of 
the bus control logic (which is the CPUCLK2 divided 
by 2) is the same as the phase of the internal clock 
of the Intel386 OX CPU. After RESETIN goes LOW, 
at least 50 NUMCLK2 periods must pass before the 
first MCP instruction is written into the Intel387 OX 
MCP. This pin should be connected to the Intel386 
OX CPU RESET pin. Table 3.3 shows the status of 
other pins after a reset. 


Pin Value 
Pin Name 


HIGH 
REAOYO#, BUSY# 


LOW 
PEREa, ERROR# 


Tri-State OFF 
031-00 


3.1.5 PROCESSOR 
EXTENSION 
REQUEST 
(PEREQ) 


When active, this pin signals to the Intel386 OXCPU 
that the MCP is ready for data transfer to/from its 
data FIFO. When all data is written to or read from 
the data FIFO, PEREa is deactivated. This signal 
always goes inactive before BUSY# goes inactive. 
This signal is referenced to CPUCLK2. It should be 
connected to the Intel386 OX CPU PEREa input. 


3.1.6 BUSY STATUS 
(BUSY#) 


When active, this pin signals to the Intel386 OXCPU 
that the MCP is currently executing an instruction. 
This signal is referenced to CPUCLK2. It should be 
connected to the Intel386 OX CPU BUSY# pin. 


This pin reflects the ES bits of the status register. 
When active, it indicates that an unmasked excep- 
tion has occurred (except that, immediately after a 
reset, it indicates to the Intel386 OX Microprocessor 
that a Intel387 OX MCP is present in the system). 
This signal can be changed to inactive state only by 
the 
following 
instructions 
(without 
a 
preceding 
WAIT): FNINIT, FNCLEX, FNSTENV, and FNSAVE. 
This signal is referenced to NUMCLK2. It should be 
connected to the Intel386 OX CPU ERROR# pin. 


These bidirectional pins are used to transfer data 
and opcodes between the Intel386 OX CPU and In- 
tel387 OXMCP.They are normally connected direct- 
ly to the corresponding Intel386 OX CPU data pins. 
HIGH state indicates a value of one. DOis the least 
significant 
data 
bit. Timings are 
referenced 
to 
CPUCLK2. 


~.1.9 WRITE/READ 
BUS CYCLE 
(W/R#) 


This signal indicates to the MCP whether the In- 
tel386 OX CPU bus cycle in progress is a read or a 
write cycle. This pin should be connected directly to 
the Intel386 OX CPU W/R# 
pin. HIGH indicates a 
write cycle; LOW, a read cycle. This input is ignored 
if any of the signals STEN, NPS1#, or NPS2 is inac- 
tive. 
Setup 
and 
hold times 
are 
referenced 
to 
CPUCLK2. 


This input, in conjunction with the READY# input 
indicates when the MCP bus-control logic may sam- 
ple W/R# 
and the chip-select signals. Setup and 
hold times are referenced to CPUCLK2. This pin 
should be connected to the Intel386 OX CPU AOS# 
pin. 


• 


This input indicates to the MCP when a Intel386 DX 
CPU bus cycle is to be terminated. It is used by the 
bus-control logic to trace bus activities. Bus cycles 
can be extended indefinitely until terminated by 
READY#. This input should be connected to the 
same signal that 
drives the 
Intel386 DX CPU 
READY# input. Setup and hold times are refer- 
enced to CPUCLK2. 


This pin is activated at such a time that write cycles 
are terminated after two clocks (except FLDENV 
and FRSTOR) and read cycles after three clocks. In 
configurations where no extra wait states are re- 
quired, this pin must directly or indirectly drive the 
Intel386 DX CPU READY# input. Refer to section 
3.4 "Bus Operation" for details. This pin is activated 
only during bus cycles that select the MCP.This sig- 
nal is referenced to CPUCLK2. 


3.1.13 STATUS ENABLE (STEN) 


This pin serves as a chip select for the MCP. When 
inactive, this pin forces BUSY#, PEREa, ERROR#, 
and READYO# outputs into floating state. D31-DO 
are normally floating and leave floating state only if 
STEN is active and additional conditions are met. 
STEN also causes the chip to recognize its other 
chip-select inputs. STEN makes it easier to do on- 
board testing (using the overdrive method) of other 
chips in systems containing the MCP. STEN should 
be pulled up with a resistor so that it can be pulled 
down when testing. In boards that do not use on- 
board testing, STEN should be connected to Vcc. 
Setup and hold times are relative to CPUCLK2. Note 
that STEN must maintain the same setup and hold 
times as NPS1#, NPS2, and CMDO# (I.e. if STEN 
changes state during a Intel387 DX MCP bus cycle, 
it should change state during the same CLK period 
as the NPS1#, NPS2, and CMDO# signals). 


3.1.14 MCP Select #1 (NPS1#) 


When active (along with STEN and NPS2) in the first 
period of a Intel386 DX CPU bus cycle, this signal 
indicates that the purpose of the bus cycle is to com- 


municate with the MCP. This pin should be connect- 
ed directly to the Intel386 OX CPU M/IO# 
pin, so 
that the MCP is selected only when the Intel386 DX 
CPU performs I/O cycles. Setup and hold times are 
referenced to CPUCLK2. 


3.1.15 MCP SELECT #2 (NPS2) 


When active (along with STEN and NPS1#) in the 
first period of an Intel386 DX CPU bus cycle, this 
signal indicates that the purpose of the bus cycle is 
to communicate with the MCP. This pin should be 
connected directly to the Intel386 DX CPU A31 pin, 
so that the MCP is selected only when the Intel386 
DX CPU uses one of the I/O addresses reserved for 
the MCP (800000F8 or 800000FC). Setup and hold 
times are referenced to CPUCLK2. 


During a write cycle, this signal indicates whether an 
opcode (CMDO# active) or data (CMDO# inactive) 
is being sent to the MCP. During a read cycle, it 
indicates whether the control 
or status register 
(CMDO# active) or a data register (CMDO# inactive) 
is being read. CMDO# should be connected directly 
to the A2 output of the Intel386 DX Microprocessor. 
Setup and hold times are referenced to CPUCLK2. 


As shown by the block diagram on the front page, 
the MCP is internally divided into three sections: the 
bus control logic (BCL), the data interface and con- 
trol unit, and the floating point unit (FPU). The FPU 
(with the support of the control unit which contains 
the sequencer and other support units) executes all 
numerics instructions. The data interface and control 
unit is responsible for the data flow to and from the 
FPU and the control registers, for receiving the in- 
structions, decoding them, and sequencing the mi- 
croinstructions, and for handling some of the admin- 
istrative instructions. The BCL is responsible for the 
Intel386 DX CPU bus tracking and interface. The 
BCL is the only unit in the Intel387 DX MCP that 
must run synchronously with the Intel386 DX CPU; 
the rest of the MCP can run asynchronously with 
respect to the Intel386 DX Microprocessor. 


The BCl communicates solely with the CPU using 
I/O bus cycles. The BCl appears to the CPU as a 
special peripheral device. It is special in two re- 
spects: the CPU initiates I/O automatically when it 
encounters ESC instructions, and the CPU uses re- 
served I/O addresses to communicate with the BCL. 
The BCl does not communicate directly with memo- 
ry. The CPU performs all memory access, transfer- 
ring input operands from memory to the MCP and 
transferring outputs from the MCP to memory. 


The data interface and control unit latches the data 
and, subject to BCl control, directs the data to the 
FIFO or the instruction decoder. The instruction de- 
coder decodes the ESC instructions sent to it by the 
CPU and generates controls that direct the data flow 
in the FIFO. It also triggers the microinstruction se- 
quencer that controls execution of each instruction. 
If the ESC instruction is FINIT, FClEX, 
FSTSW, 
FSTSW AX, or FSTCW, the control executes it inde- 
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pendently of the FPU and the sequencer. The data 
interface and control unit is the one that generates 
the BUSY#, PEREO and ERROR# signals that syn- 
chronize Intel387 OX MCP activities with the In- 
tel386 OXCPU. It also supports the FPU in all opera- 
tions that it cannot perform alone (e.g. exceptions 
handling, transcendental operations, etc.). 


The FPU executes all instructions that involve the 
register stack, including arithmetic, logical, transcen- 
dental, constant, and data transfer instructions. The 
data path in the FPU is 84 bits wide (68 significant 
bits, 15 exponent bits, and a sign bit) which allows 
internal operand transfers to be performed at very 
high speeds. 


As an extension to the Intel386 OX Microprocessor, 
the Intel387 OX Math Coprocessor can be connect- 
ed to the CPU as shown by Figure 3.3. A dedicated 
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• 


STEN 
NPS1# 
NPS2 
CMDO# 
W/R# 
Bus Cycle Type 


0 
x 
x 
x 
x 
MCP not selected 
and all 
outputs in floating 
state 
1 
1 
x 
x 
x 
MCP not selected 
1 
x 
0 
x 
x 
MCP not selected 
1 
0 
1 
0 
0 
CW or SW read from MCP 
1 
0 
1 
0 
1 
Opcode 
write to MCP 
1 
0 
1 
1 
0 
Data read from MCP 
1 
0 
1 
1 
1 
Data write to MCP 


communication 
protocol 
makes possible 
high-speed 
transfer 
of opcodes 
and operands 
between 
the In- 
tel386 
OX CPU and Intel387 
OX MCP. The Intel387 
OX MCP is designed 
so that 
no additional 
compo- 
nents are required 
for interface 
with the Intel386 
OX 
CPU. The Intel387 
OX MCP shares 
the 32-bit wide 
local bus of the Intel386 
OX CPU and most control 
pins of the Intel387 
OX MCP are connected 
directly 
to pins of the Intel386 
OX Microprocessor. 


3.3.1 BUS CYCLE 
TRACKING 


The AOS# 
and REAOY# 
signals allow the MCP to 
track the beginning 
and end of the Intel386 
OX CPU 
bus cycles, 
respectively. 
When AOS# 
is asserted 
at 
the same 
time 
as the 
MCP chip-select 
inputs, 
the 
bus cycle is intended 
for the MCP. To signal the end 
of a bus cycle for the MCP, READY # may be assert- 
ed directly 
or indirectly 
by the MCP or by other bus- 
control 
logic. Refer to Table 3.4 for definition 
of the 
types of MCP bus cycles. 


3.3.2 MCP ADDRESSING 
. 


The 
NPS1 #, 
NPS2 
and 
STEN 
signals 
allow 
the 
MCP to identify 
which 
bus cycles 
are intended 
for 
the 
MCP. 
The 
MCP 
responds 
only 
to 
1/0 
cycles 
when bit 31 of the 1/0 address 
is set. In other words, 
the 
MCP acts 
as an 1/0 
device 
in a reserved 
1/0 
address 
space. 


Because 
A31 is used 
to select 
the 
MCP for data 
transfers, 
it is not possible 
for a program 
running on 
the Intel386 
OX CPU to address 
the MCP with an 1/ 
o instruction. 
Only 
ESC instructions 
cause 
the 
In- 
tel386 
OX Microprocessor 
to communicate 
with the 
MCP. The 
Intel386 
OX CPU BS16# 
input must be 
inactive 
during 1/0 cycles when A31 is active. 


The 
CMOO# 
and 
W/R# 
signals 
identify 
the 
four 
kinds 
of bus cycle: 
control 
or status 
register 
read, 
data read, opcode 
write, data write. 


3.3.4 CPU/MCP 
Synchronization 


The pin pairs BUSY#, 
PEREa, 
and ERROR# 
are 
used for various aspects 
of synchronization 
between 
the CPU and the MCP. 


BUSY # 
is used to synchronize 
instruction 
transfer 
from 
the 
Intel386 
OX CPU to the 
MCP. When 
the 
MCP 
recognizes 
an 
ESC 
instruction, 
it 
asserts 
BUSY #. For most ESC instructions, 
the Intel386 
OX 
CPU waits for the MCP to deassert 
BUSY # before 
sending 
the new opcode. 


The 
MCP uses the PEREa 
pin of the 
Intel386 
OX 
CPU to signal that the MCP is ready for data transfer 
to or from its data FIFO. The MCP does not directly 
access 
memory; 
rather, 
the Intel386 
OX Microproc- 
essor 
provides 
memory 
access 
services 
for 
the 
MCP. Thus, 
memory 
access 
on behalf 
of the MCP 
always obeys the rules applicable 
to the mode of the 
Intel386 
OX CPU, whether 
the Intel386 
OX CPU be 
in real-address 
mode or protected 
mode. 


Once the Intel386 
OX CPU initiates 
an MCP instruc- 
tion that 
has operands, 
the Intel386 
OX CPU waits 
for PEREa 
signals 
that 
indicate 
when 
the 
MCP is 
ready for operand 
transfer. 
Once all operands 
have 
been transferred 
(or if the instruction 
has no oper- 
ands) the Intel386 
OX CPU continues 
program 
exe- 
cution while the MCP executes 
the ESC instruction. 


In 8086/8087 
systems, 
WAIT 
instructions 
may be 
required 
to achieve 
synchronization 
of both 
com- 
mands and operands. 
In 80286/80287, Intel386 
OX 
Microprocessor 
and Intel387 
OX Math Coprocessor 
systems, 
WAIT instructions 
are required 
only for op- 
erand synchronization; 
namely, 
after MCP stores 
to 
memory 
(except 
FSTSW and FSTCW) or loads from 
memory. 
Used this way, WAIT ensures 
that the val- 
ue has already 
been written 
or read by the MCP be- 
fore the CPU reads or changes 
the value. 


Once it has started to execute 
a numerics 
instruction 
and has transferred 
the operands 
from the Intel386 
OX CPU, the MCP can process 
the instruction 
in par- 
allel with and independent 
of the host CPU. When 
the 
MCP detects 
an exception, 
it asserts 
the 
ER- 
ROR# 
signal, which 
causes 
a Intel386 
OX CPU in- 
terrupt. 


3.3.5 SYNCHRONOUS 
OR ASYNCHRONOUS 
MODES 


The internal 
logic of the Intel387 
OX MCP (the FPU) 
can either operate 
directly 
from the CPU clock 
(syn- 
chronous 
mode) or from a separate 
clock (asynchro- 
nous 
mode). 
The 
two 
configurations 
are 
distin- 
guished 
by the CKM pin. In either case, the bus con- 
trol logic (BCl) 
of the MCP is synchronized 
with the 
CPU clock. 
Use of asynchronous 
mode 
allows 
the 
Intel386 
OX CPU and the FPU section of the MCP to 
run at different 
speeds. 
In this case, the ratio of the 
frequency 
of 
NUMClK2 
to 
the 
frequency 
of 
CPUClK2 
must lie within 
the range 
10:16 to 14:10. 
Use of synchronous 
mode eliminates 
one clock gen- 
erator from the board design. 


In configurations 
where 
no extra wait states 
are re- 
quired, READYO# 
can be used to drive the Intel386 
OX CPU READY # input. If this pin is used, it should 
be connected 
to the logic that ORs all READY 
out- 
puts from peripherals 
on the Intel386 
OX CPU bus. 
READYO# 
is asserted 
by the MCP only during 
I/O 
cycles 
that 
select 
the 
MCP. 
Refer 
to section 
3.4 
"Bus 
Operation" 
for details. 


With 
respect 
to the bus interface, 
the Intel387 
OX 
MCP is fully synchronous 
with the 
Intel386 
OX Mi- 
croprocessor. 
Both 
operate 
at the 
same 
rate, 
be- 
cause each generates 
its internal 
ClK 
signal 
by di- 
viding CPUClK2 
by two. 


The 
Intel386 
OX CPU initiates 
a new bus cycle 
by 
activating 
ADS#. 
The MCP recognizes 
a bus cycle, 
if, during 
the 
cycle 
in which 
ADS# 
is activated, 
STEN, 
NPS1 #, and NPS2 are all activated. 
Proper 
operation 
is achieved 
if NPS1 # is connected 
to the 
M/IO# 
output of the Intel386 
OX CPU, and NPS2 to 
the A31 output. 
The Intel386 
OX CPU's A31 output 
is guaranteed 
to be inactive 
in all bus cycles that do 
not address 
the MCP (i.e. I/O cycles to other devic- 
es, 
interrupt 
acknowledge, 
and 
reserved 
types 
of 
bus cycles). 
System 
logic 
must 
not signal 
a 16-bit 
bus cycle via the Intel386 
OX CPU BS16# 
input dur- 


ing 110 cycles 
when A31 is active 


During the ClK 
period 
in which 
ADS # is activated, 
the 
MCP also examines 
the W/R# 
input 
signal 
to 
determine 
whether 
the cycle is a read or a write cy- 
cle and 
examines 
the 
CMDO# 
input 
to determine 
whether 
an opcode, 
operand, 
or control/status 
reg- 
ister transfer 
is to occur. 


The Intel387 
OX MCP supports 
both pipelined 
and 
nonpipelined 
bus cycles. A nonpipelined 
cycle is one 
for which the Intel386 
OX CPU asserts 
ADS# 
when 
no other 
MCP bus cycle 
is in progress. 
A pipelined 
bus cycle is one for which the Intel386 
OX CPU as- 
serts 
ADS# 
and 
provides 
valid 
next-address 
and 
• 
control 
signals as soon as in the second 
ClK 
period 
after the ADS# 
assertion 
for the previous 
Intel386 
OX CPU bus cycle. Pipelining 
increases 
the availabil- 
ity of the bus by at least one ClK 
period. The MCP 
supports 
pipelined 
bus cycles 
in order 
to optimize 
address 
pipelining 
by the Intel386 
OX CPU for mem- 
ory cycles. 


Bus operation 
is described 
in terms 
of an abstract 
state machine. Figure 3.4 illustrates 
the states 
and 
state transitions 
for MCP bus cycles: 


• 
TI is the idle state. 
This is the state 
of the bus 
logic after 
RESET, 
the state 
to which 
bus logic 
returns 
after 
evey 
nonpipelined 
bus cycle, 
and 
the state to which bus logic returns after a series 
of pipelined 
cycles. 


• 
TRS is the 
READY # 
sensitive 
state. 
Different 
types of bus cycle may require a minimum 
of one 
or two successive 
TRS states. 
The bus logic re- 
mains in TRS state 
until READY # is sensed, 
at 
which point the bus cycle terminates. 
Any number 
of wait states 
may be implemented 
by delaying 
READY #, thereby 
causing 
additional 
successive 
TRS states. 


• 
T p is the first state for every pipelined 
bus cycle. 


The READYO# output of the Intel387 DX MCP indi- 
cates when a bus cycle for the MCP may be.termi- 
nated if no extra wait states are required. For all 
write 
cycles 
(except those 
for 
the 
instructions 
FlDENV and FRSTOR), READYO# is always as- 
serted in the first TRSstate, regardless of the num- 
ber of wait states. For all read cycles and write cy- 
cles for FlDENV and FRSTOR, READYO# is al- 
ways asserted in the second TRSstate, regardless 
of the number of wait states. These rules apply to 
both pipelined and nonpipelined cycles. Systems de- 
signers must use READYO# in one of the following 
ways: 
1. Connect it (directly or through logic that ORs 
READY 
signals 
from 
other 
devices) 
to 
the 
READY# inputs of the Intel386 DX CPU and In- 
tel387 DX MCP. 
2. Use it as one input to a wait-state generator. 


The following sections illustrate different types of 
MCP bus cycles. 


Because 
different 
instructions 
have 
different 
amounts of overhead before, between, and after op- 
erand transfer cycles, it is not possible to represent 
in a few diagrams all of the combinations of succes- 
sive operand transfer cycles. The following bus-cy- 
cle diagrams show memory cycles between MCP 
operand-transfer cycles. Note however that, during 
the instructions FlDENV, 
FSTENV, FSAVE, and 
FRSTOR, some consecutive accesses to the MCP 
do not have intervening memory accesses. For the 
timing relationship between operand transfer cycles 
and opcode write or other overhead activities, see 
Figure 3.8. 


Figure 3.5 illustrates bus activity for consecutive 
nonpipelined bus cycles. 


3.4.1.1 Write Cycle 


At the second clock of the bus cycle, the Intel387 
DX MCP enters the TRS (READY#-sensitive) state. 
During this state, the Intel387 DX MCP samples the 
READY# input and stays in this state as long as 
READY# is inactive. 


In write cycles, the MCP drives the READYO# sig- 
nal for one ClK period beginning with the second 
ClK of the bus cycle; therefore, the fastest write 
cycle takes two ClK cycles (see cycle 2 of Figure 
3.5). For the instructions FlDENV 
and FRSTOR, 
however, the MCP forces a wait state by delaying 
the activation of READYO# to the second TRS cy- 
cle (not shown in Figure 3.5). 


When READY# is asserted the MCP returns to the 
idle state, in which ADS# could be asserted again 
by the Intel386 DX Microprocessor for the next cy- 
cle. 


3.4.1.2 Read Cycle 


At the second clock of the bus cycle, the MCP en- 
ters the TRSstate. See Figure 3.5. In this state, the 
MCP samples the READY# input and stays in this 
state as long as READY# is inactive. 


At the rising edge of ClK in the second clock period 
of the cycle, the MCP starts to drive the D31-DO 
outputs and continues to drive them as long as it 
stays in TRSstate. 


In read cycles that address the MCP, at least one 
wait state must be inserted to insure that the In- 
tel386 DX CPU latches the correct data. Since the 
MCP starts driving the system data bus only at the 
rising edge of elK in the second clock period of the 
bus cycle, not enough time is left for the data signals 
to propagate and be latched by the Intel386 DX CPU 
at the falling edge of the same clock period. The 
MCP drives the READYO# signal for one ClK peri- 
od in the third ClK of the bus cycle. Therefore, if the 
READYO# output is used to drive the Intel386 DX 
CPU READY# input, one wait state is inserted auto- 
matically. 


Because one wait state is required for MCP reads, 
the minimum is three ClK cycles per read, as cycle· 
3 of Figure 3.5 shows. 


When READY# is asserted the MCP returns to the 
idle state, in which ADS# could be asserted again 
by the Intel386 DX CPU for the next cycle. The tran· 
sition from TRSstate to idle state causes the MCPto 
put the tristate D31-DO outputs into the floating 
state, allowing another device to drive the system 
data bus. 
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CYCLE 3 
NON-PIPELINED 
lo4CP READ 


T1 
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CYCLE 4 
NON-PIPELINED 
lo4E1040RYWRITE 


T1 
TRS 


Cycles 
1 & 2 represent 
part of the operand 
transfer 
cycle for instructions 
involving 
either 
4-by1e or 8-by1e operand 
loads. 
Cycles 
3 & 4 represent 
part of the operand 
transfer 
cycle 
for a store operation. 
'Cycles 
1 & 2 could 
repeat 
here or TI states 
for various 
non-operand 
transfer 
cycles 
and overhead. 


Because 
all the activities 
of the 
Intel387 
DX MCP 
bus interface 
occur 
either 
during 
the TRS state 
or 
during the transitions 
to or from that state. the only 
difference 
between 
a pipelined 
and a nonpipelined 
cycle 
is the manner 
of changing 
from one state 
to 
another. 
The exact 
activities 
in each 
state 
are de- 
tailed in the previous 
section 
"Nonpipelined 
Bus Cy- 
cles". 


When 
the 
Intel386 
DX CPU asserts 
ADS# 
before 
the end of a bus cycle, 
both ADS# 
and READY# 
are active during a TRS state. This condition 
causes 
the MCP to change 
to a different 
state 
named 
Tp. 
The MCP activities 
in the transition 
from a TRS state 
to a Tp state 
are exactly 
the same as those 
in the 
transition 
from a TRS state to a TI state in non pipe- 
lined cycles. 


Tp state 
is metastable; 
therefore, 
one clock 
period 
later the MCP returns 
to TRS state. 
In consecutive 
pipelined 
cycles, 
the MCP bus logic uses only TRS 
and Tp states. 


Figure 3.6 shows 
the fastest 
transition 
into and out 
of the 
pipelined 
bus cycles. 
Cycle 
1 in this 
figure 
represents 
a nonpipelined 
cycle. (Nonpipelined 
write 
cycles 
with only one TRS state 
(i.e. no wait states) 
are always 
followed 
by another 
nonpipelined 
cycle. 
because 
READY # 
is asserted 
before 
the 
earliest 
possible 
assertion 
of ADS# 
for the next cycle.) 


Figure 3.7 shows the pipelined 
write and read cycles 
with one additional 
TRS states 
beyond 
the minimum 
required. 
To 
delay 
the 
assertion 
of 
READY # 
re- 
quires external 
logic. 


• 


3.4.3 BUS CYCLES 
OF MIXED 
TYPE 


When the Intel387 DX MCP bus logic is in the TRS 
state, it distinguishes between nonpipelined and 
pipelined cycles according to the behavior of ADS# 
and 
READY #. 
In 
a 
nonpipelined 
cycle, 
only 
READY # is activated, and the transition is from TRS 
to idle state. In a pipelined cycle, both READY # and 
ADS # are active and the transition is first from TRS 
state to Tp state then, after one clock period, back 
to TRSstate. 


3.4.4 BUSY # AND PEREQ TIMING 
RELATIONSHIP 


Figure 3.8 shows the activation of BUSY # at the 
beginning of instruction execution and its deactiva- 
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CYCLE 2 
PIPELINED 
tolCP WRITE 


Tp 
TRS 
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tion after execution of the instruction is complete. 
When possible, the Intel387 DX MCP may deacti- 
vate BUSY # prior to the completion of the current 
instruction allowing the CPU to transfer the next in- 
struction's opcode and operands. PEREa 
is activat- 


ed in this interval. If ERROR # 
(not shown in the 


diagram) is ever asserted, it would occur at least six 
CPUCLK2 
periods after the deactivation of PEREa 


and at least six CPUCLK2 periods before the deacti- 
vation of BUSY #. Figure 3.8 shows also that STEN 
is activated at the beginning of a bus cycle. 


CYCLE 3 
PIPELINED 
tolEtolORY READ 


Tp 
TRS 


CYCLE 4 
NON-PIPELINED 
tolCP WRITE 


TI 
TRS 


240448-11 


Cycle 
1-Cycle 
4 represent 
the operand 
transfer 
cycle 
for an instruction 
involving 
a transfer 
of two 32-bit 
loads 
in total. 


The opcode 
write cycles 
and other 
overhead 
are not shown. 
Note 
that the next cycle 
will be a pipelined 
cycle 
if both 
READY# 
and ADS# 
are sampled 
active 
at the end of a TRS 


state of the current 
cycle. 


NPS2, 


NPS1N. 
W/ION 


NOTE: 
1. Cycles 
between 
operand 
write to the MCP and storing 
result. 


NOTES: 
1. Instruction 
dependent. 


2. PEREa 
is an asynchronous 
Input to the 
Intel386™ 
OX Microprocessor, 
it may not be asserted 
(instruction 
depen- 
dent). 
3. More operand 
transfers. 


4. Memory 
read (operand) 
cycle 
is not shown. 


• 


NOTICE: This is a production data sheet. The specifi- 
cations are subject to change without notice. 


• WARNING: Stressing the device beyond the "Absolute 
Maximum 
Ratings" 
may 
cause 
permanent 
damage. 


These are stress ratings 
only. Operation 
beyond 
the 
"Operating 
Conditions" 
is not recommended 
and ex- 


tended 
exposure 
beyond 
the 
"Operating 
Conditions" 


may affect device reliability. 


Case Temperature 
Te 
Under Bias 
- 65°C to + 110°C 


Storage Temperature 
- 65°C to + 150°C 


Voltage 
on Any Pin with 
Respect 
to Ground 
-0.5 
to Vcc 
+ 0.5V 


Power Dissipation 
1.5W 


Symbol 
Parameter 
Min 
Max 
Units 
Test Conditions 


Vil 
Input LO Voltage 
-0.3 
+0.8 
V 
(Note 1) 


VIH 
Input HI Voltage 
2.0 
Vcc 
+ 0.3 
V 
(Note 1) 


VCl 
CPUCLK2 
Input LO Voltage 
-0.3 
+0.8 
V 
. 


VCH 
CPUCLK21nput 
HI Voltage 
3.7 
VCC +0.3 
V 


VOL 
Output LO Voltage 
0.45 
V 
(Note 2) 


VOH 
Output HI Voltage 
2.4 
V 
(Note 3) 


Icc 
Supply Current 
NUMCLK2 
= 32 MHz(4) 
160 
mA 
Icc typo = 95 mA 
NUMCLK2 
= 40 MHz(4) 
180 
mA 
Ice typo = 105 mA 


- 
NUMCLK2 
= 50 MHz(4) 
210 
mA 
Ice typo = 125 mA 
NUMCLK2 
= 66.6 MHz(4) 
250 
mA 
I.cc typo = 150 mA 
III 
Input Leakage Current 
±15 
p.A 
OV s VIN s Vec 


ILO 
I/O Leakage Current 
±15 
p.A 
0.45V s Vo s Vcc 


CIN 
Input Capacitance 
10 
pF 
fc = 1 MHz 


Co 
I/O or Output Capacitance 
12 
pF 
fc = 1 MHz 


CClK 
Clock Capacitance 
15 
pF 
Ic = 1 MHz 


NOTES: 
1. This parameter is for all inputs, including NUMClK2 but excluding CPUClK2. 
2. This parameter is measured at IOLas follows: 


data = 4.0 mA 
READYO*' = 2.5 mA 
ERROR*', BUSY*', PEREa = 2.5 mA 
3. This parameter is measured at IOHas follows: 


data = 1.0 mA 
READYO*, = 0.6 mA 
ERROR*" BUSY*', PEREa = 0.6 mA 
4. lee is measured at steady state, maximum capacitive loading on the outputs, CPUClK2 at the same frequency as 
NUMClK2. 


intel~ 


i387 OX 16·33 
1386 OX System 
Execution 
Frequency 
(MHz) 
Frequency 
(MHz) 
Min 
Max 


16 MHz 
10.0 MHz 
22.4 MHz 


20 MHz 
12.5 MHz 
28.0 MHz 
25 MHz 
15.6 MHz 
33.0 MHz 
33 MHz 
20.6 MHz 
33.0 MHz 


NOTE: 
The external clock frequencies for the i367 DX and i366 DX are 
equal to twice the interface and execution frequencies show 
above. 


Table 
4.2b. Timing 
Requirements 
of the Execution 
Unit 
Tc = O·Cto + 85·C, Vcc = 5V ±5% 


16 MHz-33 
MHz 
Test 
Figure 
Pin 
Symbol 
Parameter 
Mln (ns) 
Max (ns) 
Conditions 
Reference 


NUMCLK2 
t1 
Period 
15 
125 
2.0V 
4.1 
NUMCLK2 
t2a 
High Time 
6.25 
2.0V 
NUMCLK2 
t2b 
High Time 
4.5 
3.7V 
NUMCLK2 
t3a 
Low Time 
6.25 
2.0V 
NUMCLK2 
t3b 
Low Time 
4.5 
0.8V 
NUMCLK2 
t4 
Fall Time 
6 
3.7V to 0.8V 
NUMCLK2 
t5 
Rise Time 
6 
0.8V to 2.7V 


Table 
4.2c. Timing 
Requirements 
of the Bus Interface 
Unit 
Tc = O·Cto + 85·C, Vcc = 5V ±5% 
(All measurements 
made at 1.5V and 50 pF unless 
otherwise 
specified) 


16 MHz-33 
MHz 
Test 
Figure 
Pin 
Symbol 
Parameter 
Mln (ns) 
Max (ns) 
Conditions 
Reference 


CPUCLK2 
t1 
Period 
15 
125 
2.0V 
4.1 
CPUCLK2 
t2a 
High Time 
6.25 
2.0V 
CPUCLK2 
t2b 
High Time 
4.5 
3.7V 
CPUCLK2 
t3a 
Low Time 
6.25 
2.0V 
CPUCLK2 
t3b 
Low Time 
4.5 
0.8V 
CPUCLK2 
t4 
Fall Time 
6 
3.7Vto 
0.8V 
CPUCLK2 
t5 
Rise Time 
6 
0.8Vto 
3.7V 


NUMCLK2/ 
Ratio 
10/16 
14/10 
CPUCLK2 


READYO# 
t7 
Out Delay 
4 
17 
4.2 
READYO#(1) 
t7 
Out Delay 
4 
15 
CL = 25 pF 
PEREa 
t7 
Out Delay 
4 
25 
BUSY# 
t7 
Out Delay 
4 
21 
BUSy#(1) 
t7 
Out Delay 
4 
19 
CL = 25 pF 
ERRORI' 
t7 
Out Delay 
4 
25 


D31-DO 
t8 
Out Delay 
0 
37 
4.3 
D31-DO 
t10 
Setup Time 
8 
D31-DO 
t11 
Hold Time 
8 
D31-DO(2) 
t12 
Float Time 
3 
19 


• 


Table 4.2c. Timing Requirements of the Bus Interface Unit (Continued) 
Tc = O·Cto +S5°C, Vcc = 5V ±5% 
(All measurements made at 1.5V and 50 pF unless otherwise specified) 


16 MHz-33 MHz 
Test 
Figure 
Pin 
Symbol 
Parameter 
Min (ns) 
Max (ns) 
Conditions 
Reference 


PEREQ(2) 
t13 
Float Time 
1 
30 
4.5 
BUSy#(2) 
t13 
Float Time 
1 
30 
ERROR#(2) 
t13 
Float Time 
1 
30 
READYO#(2) 
t13 
Float Time 
1 
30 


ADS# 
t14 
Setup Time 
13 
4.3 
ADS# 
t15 
Hold Time 
4 
W/R# 
t14 
Setup Time 
13 
W/R# 
t15 
Hold Time 
4 


READY# 
t16 
Setup Time 
7 
READY# 
t17 
Hold Time 
4 
CMDO# 
t16 
Setup Time 
13 
CMDO# 
t17 
Hold Time 
2 
NPS1# 
t16 
Setup Time 
13 
NPS2 
NPS1# 
t17 
Hold Time 
2 
NPS2 
STEN 
t16 
Setup Time 
13 
STEN 
t17 
Hold Time 
2 


RESETIN 
t18 
Setup Time 
5 
4.4 
RESETIN 
t19 
Hold Time 
3 


NOTES: 
1. Not tested 
at 25 pF. 
2. Float delay 
is not tested. 
Float condition 
occurs 
when 
maximum 
output 
current 
becomes 
less than 
ILa in magnitude. 


NOTE: 
This 
graph 
will 
not 
be linear 
outside 
of the 
CL range 
shown. 


Figure 4.0a. Typical Output Valid Delay vs Load 
Capacitance at Max Operating Temperature 


NOTE: 
This 
graph 
will 
not 
be linear 
outside 
of the 
CL range 
shown. 


Figure 4.0b. Typical Output Rise Time vs Load 
Capacitance at Max Operating Temperature 
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SETUP 
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TIt.4E 
rTIt.4E 


1.~ 
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INPUTS .••---- 
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Figure 4.1. CPUCLK2/NUMCLK2 
Waveform 
and Measurement 
Points for 
Input/Output 
A.C. Specifications 


(eLK) 
(PH2) 
\ 
•.•__ 
(_PH_l_) 
__ 
/ 
,'"" 
• 


(CLK)\ 
(PH1) 
/ 
(PH2) 
\ 
(PHI) 
/ 
(PH2) 
~ 


NPS1,. NPS2. 
STEN. 
CIlOO, 


(CLK) 
/ 
(PHI or PH2) 
\ 
(PH1 or PH2) F 


1'9 r- --1 
1,8 
"'5'" 
NOTE: 
The second 
internal 
processor 
phase following 
RESET 
high to low transition 
is PH2. 
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Pin 
Symbol 
Parameter 
Mln 
Max 
Units 


RESETIN 
t30 
Duration 
40 
NUMCLK2 


RESETIN 
t31 
RESETIN 
Inactive to 1st Opcode Write 
50 
NUMCLK2 


BUSYII 
t32 
Duration 
6 
CPUCLK2 


BUSY II, ERROR II 
t33 
ERROR II (In) Active to BUSY II Inactive 
6 
CPUCLK2 


PEREa, 
ERROR II 
t34 
PEREa 
Inactive to ERROR II Active 
6 
CPUCLK2 


READY II, BUSY II 
t35 
READY II Active to BUSY II Active 
4 
4 
CPUCLK2 


READY II 
t36 
Minimum Time from Opcode 
Write to 
6 
CPUCLK2 
Opcode/Operand 
Write 


READY II 
t37 
Minimum Time from Operand 
Write to 
8 
CPUCLK2 
Operand 
Write 


1ST OPCODE 
WRITE 
.. 


1ST OPERAND 
2ND OPERAND 
WRITE 
WRITE (NOTE 
1) 


ADSI 


READYI 


BUSYI 


PEREQ 
I 
H 


• In NUMCLK2's 
•• or last operand 


NOTE: 
1. Memory 
read (operand) 
cycle 
is' not shown. 


Instruction 
Optional 


First Byte 
Second 
Byte 
Fields 


11011 
OPA 
I 
1 
MOD 
1 
I 
OPB 
RIM 
SIB 
I 
DISP 


11011 
MF 
I 
OPA 
MOD 
OPB 
RIM 
SIB 
I 
DISP 


11011 
d 
P 
OPA 
1 
1 
OPB 
ST(i) 


11011 
0 
0 
1 
1 
1 
1 
I 
OP 


11011 
0 
1 
1 
1 
1 
1 1 
OP 


5.0 
Intel387TM 
OX MCP EXTENSIONS 
TO THE Intel386™ 
OX CPU 
INSTRUCTION 
SET 


Instructions 
for the Intel387 
DX MCP assume one of 
the 
five 
forms 
shown 
in the 
following 
table. 
In all 
cases, 
instructions 
are at least two bytes 
long and 
begin 
with the 
bit pattern 
11011 B, which 
identifies 


the 
ESCAPE 
class 
of instruction. 
Instructions 
that 
refer to memory 
operands 
specify 
addresses 
using 


the Intel386 
DX CPU addressing 
modes. 


OP 
= 
Instruction 
opcode, 
possible 
split 
into 
two 
fields OPA and OPB 


MF = Memory 
Format 
00-32-bit 
real 
01-32-bit 
integer 
10---64-bit 
real 
11-16-bit 
integer 


P = Pop 
o-Do 
not pop stack 
1-Pop 
stack after operation 


d = Destination 
O-Destination 
is ST(O) 
1-Destination 
is ST(i) 


R XOR d = O-Destination 
(op) Source 
R XOR d = 1-Source 
(op) Destination 


ST(i) = Register 
stack element i 
000 = Stack top 
001 = Second 
stack element 


111 = Eighth stack element 


MOD (Mode field) and RIM 
(Register/Memory 
spec- 
ifier) 
have 
the 
same 
interpretation 
as 
the 
corre- 


sponding 
fields 
of the 
Intel386 
DX Microprocessor 
instructions 
(refer to Intel38(JTM OX Microprocessor 
Programmer's 
Reference 
Manual). 


SIB (Scale 
Index 
Base) 
byte 
and 
DISP 
(displace- 
ment) are optionally 
present 
in instructions 
that have 
MOD and 
RIM 
fields. 
Their 
presence 
depends 
on 
the values of MOD and RIM, 
as for Intel386 
DX Mi- 
croprocessor 
instructions. 


The instruction 
summaries 
that 
follow 
assume 
that 
the instruction 
has been prefetched, 
decoded, 
and is 
ready for execution; 
that bus cycles 
do not require 
wait 
states; 
that 
there 
are no local 
bus HOLD 
re- 


quest 
delaying 
processor 
access 
to the 
bus; 
and 
that 
no exceptions 
are detected 
during 
instruction 
execution. 
If the instruction 
has MOD and RIM fields 
that call for both base and index registers, 
add one 
clock. 


intel~ 


Encoding 
Clock 
Count 
Range 


Instruction 
Byte 
Byte 
Optional 
32-Blt 
I 
32-Blt 
I 
64-Blt 
I 
16-Blt 
0 
1 
Bytes 
2-6 
Real 
Integer 
Real 
Integer 


DATA 
TRANSFER 


FLD 
~ 
Load" 


Integer Ireal 
memory 
to ST(O) 
ESC MF 1 
MOD 000 RIM 
SIB/DISP 
9-18 
26-42 
16-23 
42-53 


Long integer 
memory 
to ST(O) 
ESC111 
MOD 101 RIM 
SIB/DISP 
26-54 


Extended 
real memory 
to ST(O) 
ESC011 
MOD 101 RIM 
SIB/DISP 
12-43 


BCD memory 
to ST(O) 
! 
ESC111 
MOD 100 RIM 
SIB/DISP 
45-97 


ST(i) to ST(O) 
I 
ESC 001 
I 
11000 ST(i) 
I 
7-12 


FST 
~ Store 


ST(O) to integer/real 
memory 
I 
ESCMF 
1 
I 
MOD 010 RIM 
I 
SIB/DISP 
25-43 
57-76 
32-44 
58-76 


ST(O) to ST(I) 
I 
ESC10l 
I 
11010 
ST(i) 
I 
7-11 


FSTP 
~ 
Store and Pop 


ST(O) to integer/real 
memory 
ESCMFl 
I 
MODOll 
RIM 
I 
SIB/DISP 
25-43 
57-76 
32-44 
58-76 


ST(O) to long integer 
memory 
ESClll 
MOD 111 RIM 
SIB/DISP 
60-82 


ST(O) to extended 
real 
ESCOll 
MOD 111 RIM 
SIB/DISP 
46-52 


ST(O) to BCD memory 
ESClll 
MOD 110 RIM 
SIB/DISP 
112-190 


ST(O) to ST(I) 
I 
ESC10l 
I 
11011 ST(i) 
I 
7-11 


FXCH = Exchange 


ST(i) and ST(O) 
I 
ESC 001 
I 
11001 
ST(I) 
I 
10-17 


COMPARISON 


FCOM 
~ Compare 


Integer/real 
memory 
to ST(O) 
ESCMFO 
I 
MOD 010 RIM 
I 
SIB/DISP 
13-25 
34-52 
14-27 
39-62 


ST(I) to ST(O) 
I 
ESCOOO 
I 
11010 
ST(i) 
I 
13-21 


FCOMP 
~ Compare 
and pop 


Integer/real 
memory 
to ST 
ESC MFO 
MODOll 
RIM 
I 
SIB/DISP 
13-25 
34-52 
14-27 
39-62 


ST(i) to ST(O) 
I 
ESCOOO 
I 
11011 ST(i) 
I 
13-21 


FCOMPP 
= Compare 
and pop twice 


ST(l) 
to ST(O) 
I 
ESC 110 
I 
11011001 
I 
13-21 


FTST 
~ Test ST(O) 
I 
ESC 001 
I 
11100100 
I 
17-25 


FUCOM = Unordered 
compare 
I 
ESC 101 
I 
111ooST~) 
I 
13-21 


FUCOMP 
= Unordered 
compare 


and pop 
I 
ESC101 
I 
11101 STO) 
I 
13-21 


FUCOMPP 
= Unordered 
compare 
and pop twice 
I 
ESC010 
I 
11101001 
I 
13-21 


FXAM 
~ 
Examine 
ST(O) 
I 
ESCOOl 
I 
11100101 
I 
24-37 


CONSTANTS 


FLDZ = Load + 0.0 into ST(O) 
I 
ESC 001 
I 
11101110 
I 
10-17 


FLD1 
~ 
Load + 1.0 into ST(O) 
I 
ESC 001 
I 
11101000 
I 
15-22 


FLDPI 
~ 
Load pi into ST(O) 
I 
ESC 001 
I 
11101011 
I 
26-36 


FLDL2T 
= Load 1092(10) into ST(O) 
I 
ESC 001 
I 
11101001 
I 
26-36 


NOTE: 
a. When 
loading 
single- 
or double-precision 
zero from 
memory, 
add 5 clocks. 


• 


CONSTANTS 
(Continued) 


FLDL2E 
~ 
Load log2(e) 
into ST(O) 


FLDLG2 
= Load log10(2) into ST(O) 


FLDLN2 
~ 
Load log.(2) 
into ST(O) 


ARITHMETIC 


FADD 
~ Add 


Integer/real 
memory 
with ST(O) 


STeil and ST(O) 


FSUB· 
Subtract 


Integer/real 
memory 
with ST(O) 


STeil and ST(O) 


FMUL = Multiply 


Integer/real 
memory 
with ST(O) 


STeil and ST(O) 


FDIV = Divide 


Integer/real 
memory 
with ST(O) 


STeil and ST(O) 


FSQRTI 
~ 
Square 
root 


FSCALE 
~ Scale 
ST(O) by ST(l) 


FPREM 1 = Partial 
remainder 


(IEEE) 


FABS = Absolute 
value 
of ST(O) 


FCHS 
~ Change 
sign of ST(O) 


SIB/DISP 
19-32 
43-71 
23-53 
46-74 


ESCdPO 
11001 
R/M 
17-50e 


SIB/DISP 
77-85 
101-114' 
81-91 
105-1249 


ESC d P 0 
1111 RR/M 
77-80h 


ESC 001 
11111010 
97-111 


ESC 001 
11111101 
44-82 


ESCOOl 
11111000 
56-140 


ESCOOl 
11110101 
81-168 


ESCOOl 
11111100 
41-62 


ESC 001 
11110100 
42-63 


ESCOOl 
11100001 
14-21 


ESCOOl 
11100000 
17-24 


ESC 001 


ESC 001 


ESC 001 


11101020 


11101100 


11101~ 


NOTES: 
b. Add 3 clocks 
to the range 
when 
d = 1. 


c. Add 
1 clock 
to each 
range when 
R = 1. 
d. Add 3 clocks 
to the range when 
d = O. 


e. typical 
= 52 (When 
d = 0, 46-54, 
typical 
= 49). 


1. Add 1 clock 
to the range when 
R = 1. 


g. 135-141 
when 
R = 1. 
h Add 3 clocks 
to the range when 
d = 1. 
i. -0';; 
ST(O)';; +00. 


26-36 


25-35 


26-38 


I 
Encoding 
Instruction 
Byte 
Byte 
Optional 
Clock Count Range 


0 
1 
Bytes 2-6 


TRANSCENDENTAL 


FCOSk = Cosine of ST(O) 
I 
ESCOOl 
11111111 
I 
122-680 


FPTANk ~ Partial tangent of ST(O) 
I 
ESCOOl 
11110010 
I 
162-430i 


FPATAN ~ Partial arctangent 
I 
ESCOOl 
11110011 
I 
250-420 


FSINk = Sine of ST(O) 
I 
E$COO1 
11111110 
I 
121-680 


FSINCOSk = Sine and cosine of ST(O) 
I 
ESCOOl 
11111011 
I 
150-650 


F2XMli = 2ST(O)- 1 
I 
ESCOOl 
11110000 
I 
167-410 


FYL2xm = ST(l) • log2(ST(0)) 
I 
ESC001 
11110001 
I 
99-436 


FYL2XP1n ~ ST(l) • 1092(ST(0)+ 1.0) 
I 
ESC001 
11111001 
I 
210-447 


PROCESSORCONTROL 


FINIT = Initialize MCP 
I 
ESC011 
I 
11100011 
I 
33 


FSTSW AX ~ Store status word 
I 
ESC111 
I 
11100000 
I 
13 


FLDCW = Load control word 
ESCOOl 
MOD 101 RIM 
SIB/DISP 
19 


FSTCW ~ Store control word 
ESC10l 
MODlll 
RIM 
SIB/DISP 
15 


FSTSW = Store status word 
ESC10l 
MOD '1' 
RIM 
SIB/DISP 
15 


FCLEX = Clear exceptions 
I 
ESCOll 
I 
11100010 
I 
11 


FSTENV ~ Store environment 
I 
ESCOOl 
I 
MOD110R/M 
SIB/DISP 
103-104 


FLDENV ~ Load environment 
I 
ESC001 
I 
MOD 100 RIM 
SIB/DISP 
71 


FSAVE ~ Save state 
ESC101 
I 
MOD 110 RIM 
SIB/DISP 
375-376 


FRSTOR = Restore state 
I 
ESC10l 
I 
MOD 100 RIM 
SIB/DISP 
308 


FINCSTP ~ Increment stack pointer 
I 
ESCOOl 
I 
11110111 
I 
21 


FDECSTP = Decrement stack pointer 
I 
ESC001 
I 
11110110 
I 
22 


FFREE = Free ST(i) 
I 
ESC10l 
I 
11000 ST(I) 
I 
18 


FNOP = No operations 
I 
ESC001 
I 
11010000 
I 
12 


NOTES: 
j. These 
timings 
hold for operands 
in the range Ixl < .,,/4. For operands 
not in this range, 
up to 76 additional 
clocks 
may be 


needed 
to reduce 
the operand. 


k. 0 ,;; I ST(O) I < 263. 
I. -1.0 
,;; ST(O) ,;; 1.0. 
m.O 
,;; ST(O) < 00, 
- 
00 < ST(l) 
< + 00. 


n.O 
,;; IST(O)I < (2 - 
SQRT(2))/2, 
- 
00 < ST(l) 
< + 00. 


APPENDIX A 
COMPATIBiliTY 
BETWEEN 
THE 80287 AND THE 8087 


The 80286/80287 
operating 
in Real-Address 
mode 
will 
execute 
808618087 
programs 
without 
major 
modification. 
However, 
because 
of differences 
in the 
handling 
of numeric 
exceptions 
by the 80287 
MCP 
and the 8087 MCP, exception-handling 
routines may 
need to be changed. 


This appendix 
summarizes 
the differences 
between 
the 
80287 
MCP and the 
8087 
MCP, and provides 
details 
showing 
how 8086/8087 
programs 
can 
be 
ported 
to the 80286/80287. 


1. The MCP signals exceptions 
through 
a dedicated 
ERROR # line to the 80286. The MCP error signal 
does not pass through 
an interrupt 
controller 
(the 
8087 
INT signal 
does). 
Therefore, 
any interrupt- 
controller-oriented 
instructions 
in numeric 
excep- 
tion handlers 
for the 8086/8087 
should 
be delet- 
ed. 


2. The 
8087 
instructions 
FENI/FNENI 
and 
FDISII 
FNDISI perform 
no useful function 
in the 80287. 
If 
the 80287 encounters 
one of these opcodes 
in its 
instruction 
stream, 
the 
instruction 
will effectively 
be ignored-none 
of the 80287 internal 
states will 
be updated. 
While 
8086/8087 
containing 
these 
instructions 
may 
be 
executed 
on 
the 
80286/80287, 
it is unlikely 
that 
the 
exception- 
handling 
routines 
containing 
these 
instructions 
will be completely 
portable 
to the 80287. 


3. Interrupt 
vector 
16 must point to the numeric 
ex- 
ception 
handling 
routine. 


4. The ESC instruction 
address 
saved in the 80287 
includes 
any leading 
prefixes 
before the ESC op- 
code. 
The 
corresponding 
address 
saved 
in the 
8087 does not include 
leading 
prefixes. 


5. In Protected-Address 
mode, 
the 
format 
of 
the 
80287's 
saved instruction 
and address 
pointers 
is 
different 
than 
for the 
8087. 
The 
instruction 
op- 
code 
is not saved in Protected 
mode-exception 
handlers 
will 
have 
to 
retrieve 
the 
opcode 
from 
memory 
if needed. 


6. Interrupt 
7 will occur in the 80286 when executing 
ESC instructions 
with either TS (task switched) 
or 
EM (emulation) 
of the 80286 MSW set (TS = 1 or 
EM = 1). If TS is set, then a WAIT instruction 
will 
also 
cause 
interrupt 
7. 
An 
exception 
handler 
should 
be included 
in 80286/80287 
code to han- 
dle these 
situations. 


7. Interrupt 
9 will occur if the second 
or subsequent 


words 
of a floating-point 
operand 
fall outside 
a 
segment's 
size. Interrupt 
13 will occur if the start- 


ing address 
of a numeric 
operand 
falls outside 
a 


segment's 
size. An exception 
handler 
should 
be 


included 
in 80286/80287 
code 
to 
report 
these 
programming 
errors. 


8. Except 
for the processor 
control 
instructions, 
all 
of the 80287 
numeric 
instructions 
are automati- 


cally synchronized 
by the 80286 CPU-the 
80286 
automatically 
tests 
the 
BUSY # 
line 
from 
the 
80287 to ensure that the 80287 has completed 
its 
previous 
instruction 
before 
executing 
the 
next 


ESC instruction. 
No explicit WAIT instructions 
are 
required 
to assure 
this 
synchronization. 
For the 
8087 
used with 8086 
and 8088 
processors, 
ex- 


plicit WAITs 
are required 
before 
each numeric 
in- 


struction 
to 
ensure 
synchronization. 
Although 
8086/8087 
programs 
having 
explicit 
WAIT 
in- 
structions 
will 
execute 
perfectly 
on 
the 
80286/80287 
without 
reassembly, 
these WAIT in- 


structions 
are unnecessary. 


9. Since the 80287 
does 
not require 
WAIT 
instruc- 


tions 
before 
each 
numeric 
instruction, 
the 
ASM286 
assembler 
does not automatically 
gener- 


ate these WAIT instructions. 
The ASM86 
assem- 
bler, however, 
automatically 
precedes 
every ESC 
instruction 
with a WAIT 
instruction. 
Although 
nu- 
meric 
routines 
generated 
using 
the 
ASM86 
as- 


sembler 
will 
generally 
execute 
correctly 
on the 
80286/80287, 
reassembly 
using ASM286 
may re- 


sult in a more compact 
code image. 


The processor 
control 
instructions 
for the 80287 


may be coded 
using either 
a WAIT 
or No-WAIT 
form of mnemonic. 
The WAIT forms 
of these 
in- 
structions 
cause ASM286 
to precede 
the ESC in- 
struction 
with a CPU WAIT instruction, 
in the iden- 


tical manner 
as does ASM86. 


The following 
list represents 
the key differences 
be- 


tween 
this and the -003 versions 
of the Intel387™ 
Math 
Coprocessor 
Data 
Sheet. 
Please 
review 
this 
summary 
carefully. 


1. Corrected 
typographical 
errors. 


2. Corrected 
clock 
ratio "PIN" 
name on Table 
4.2c 
to NUMCLK/CPUCLK. 
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This Application Note should be used in conjunction 
with the 386 DX microprocessor Data Sheet (Order 
Number 231630-011) and the 386 DX Hardware Refer- 
ence Manual (Order Number 231732-004). A list of re- 
lated references is provided in the appendix for getting 
more information on high speed design issues. 


The 386 DX Microprocessor is an advanced 32-bit mi- 
croprocessor designed using Intel's CHMOS IV process 
for applications which require very high performance. 
It is optimized for multitasking operating systems. The 
32-bit register and data paths support 32-bit address 
and data types allowing up to four gigabytes of physical 
memory and 64 terabytes of virtual memory to be ad- 
dressed. The integrated memory management and pro- 
tection architecture includes address translation regis- 
ters, advanced multitasking hardware and a protection 
mechanism to support operating systems. In addition, 
the 386 DX microprocessor allows the simultaneous 
running 
of 
DOS 
with 
other 
operating 
systems. 


Instruction pipelining, on chip address translation and 
high bus bandwidth ensure short average instruction 
execution times and high system throughput. To facili- 
tate high performance system hardware designs, the 
386 DX microprocessor bus interface offers address 
pipelining, dynamic data bus sizing and direct byte en- 
able signals for each byte of the data bus. 


This Application Note is intended to show how to com- 
plete a successful design of a 'Core' system using the 
386 DX-33, the 33 MHz clock version. A Core system 
is a minimum system configuration, in this case com- 
prising the CPU, the 82385 32-bit Cache controller, 
• 
Dynamic and Static RAM and an I/O mechanism with 
which to communicate with the CPU. 


The Application Note examines the design techniques 
necessary when executing a design at this frequency. 
Many of the methods used at lower frequencies, such as 
16MHz and 20 MHz, are no longer valid at this higher 
frequency. Phenomena, whose effects are negligible at 
the lower frequencies, must be taken into account in the 
design. The physical positioning of components relative 
to each other plays a significant part in the success of 
the design, since transmission line effects (reflection, 
radiation) are no longer negligible. 
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SECTION 
II. HIGH SPEED SYSTEM 
DESIGN 
CONSIDERATIONS 


This section is included as a brief overview of general 
issues that are applicable to both higher and lower fre- 
quencies of circuit design. 


The CHMOS IV 386 DX CPU differs from previous 
HMOS microprocessors in that its power dissipation is 
primarily capacitive; there is almost no DC power dissi- 
pation. Power dissipation depends mostly on frequency. 
This fact is used in designs where power consumption is 
critical. 


Power dissipation can be distinguished as either inter- 
nal (logic) power or 110 (bus) power. Internal power 
varies with operating frequency and to some extent 
with wait states and software. Internal power increases 
with supply voltage also. Process variations in manu- 
facturing affect internal power, although to a lesser ex- 
tent than with NMOS processes. 


I/O power, which accounts for roughly one-fifth of the 
total power dissipation, varies with frequency and volt- 
age. It also depends on capacitive bus load. Capacitive 
bus loadings for all output pins are specified in the 386 
DX CPU data sheet. The 386 DX CPU output valid 
delays will increase if these loadings are exceeded. The 
addressing pattern of the software can affect I/O power 
by changing the effective frequency at the address pins. 
The variation in frequency at the data pins tends to be 
smaller; thus varying data patterns should not cause a 
significant change in power dissipation. 


Power and ground planes must be used in 386 DX CPU 
systems to minimize noise. Power and ground lines 
have inherent inductance and capacitance, therefore an 
impedance z = (L/C) , V•. The total characteristic im- 
pedance for the power supply can be reduced by adding 
more lines. This effect is illustrated in 2.1 which shows 
that two lines in parallel have half the impedance of 
one. To reduce the impedance even further, the user 
should add more lines. In the limit, an infinite number 
of parallel lines, or a plane, results in the lowest imped- 
ance. Planes also provide the best distribution of power 
and ground. 


The 386 DX CPU has 20 VCC pins and 21 Vss 
(ground) pins. All power and ground pins must be con- 
nected to a plane. Ideally, the 386 DX CPU is located 
at the center of the board, to take full advantage of 
these planes. Although the 386 DX CPU generally de- 
mands less power than the 80286, the possibility of 
power surges is increased due to higher frequency and 
pin count. Peak-to-peak noise on Vcc relative to Vss 
should be maintained at no more than 400 mY, and 
preferably to no more than 200 mY. 


The switching activity of one device can propagate to 
other devices through the power supply. For example, 
in the TTL NAND gate of Figure 2.2, both Q3 and Q4 
transistors are on for a short time when the output is 
switching. This increased load causes a negative spike 
on Vcc and a positive spike on ground. 


• 


In synchronous systems in which many gates switch 
simultaneously, 
the result is signifcant noise on the 
power and ground lines. 


Decoupling capacitors placed across the device between 
Vcc and ground reduce Voltage spikes by supplying the 
extra current needed during switching. These capaci- 
tors should be placed close to their devices because the 
inductance or connection lines negates their effect. 


When selecting decoupling capacitors, the user should 
provide 0.01 microfarads for each device and O. 1 mi- 
crofarads for every 20 gates. Radio-frequency capaci- 
tors must be used; they should be distributed evenly 
over the board to be most effective. In addition, the 
board should be decoupled from the external supply 
line with a 2.2 microfarad capacitor. 


o 
=O.1p.F 


~ 
=1.0.F 


Chip capacitors (surface-mount) are preferable because 
they exhibit lower inductance and require less total 
board space. They should be connected as in Figure 2.3. 
Leaded capacitors can also be used if the leads are kept 
as short as possible. Six leaded capacitors are required 
to match the effectiveness of one chip capacitor, but 
because only a limited number can fit around the 386 
DX, the configuration in Figure 2.4 results. 
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At high signal frequencies, the transmission line prop- 
erties of signal paths in a circuit must be considered. 
Reflections, interference, and noise become significant 
in comparison to the high-frequency signals. They can 
cause false signal transitions, data errors, and input 
voltage level violations. These errors can be transient 
and therefore difficult to debug. In this section, some 
high-frequency design issues are discussed. Their effects 
and ways to minimize will be introduced in the next 
section. 


Input voltage level violations are usually due to voltage 
spikes that raise input voltage levels above the maxi- 
mum limit (overshoot) and below the minimum limit 
(undershoot). These voltage levels can cause excess cur- 
rent on input gates that results in permanent damage to 
the device. Even if no damage occurs, most devices are 
not guaranteed to function as specified if input voltage 
levels are exceeded. 


Signal lines are terminated to minimize signal reflec- 
tions and prevent overshoot and undershoot. 
If the 
round-trip signal path delay is greater than the rise time 
or fall time of the signal, terminate the line. If the line is 
not terminated, the signal reaches its high or low level 
before reflections have time to dissipate, and overshoot 
and undershoot 
occur. There are a few termination 
techniques that are used in different applications, these 
will be discussed in the next section. 


Interference is the result of electrical activIty in one 
conductor causing transient voltages to appear in an- 
other conductor. It increases with frequency and close- 
ness of the two conductors. 


There are two types of interference to consider in high 
frequency circuits: electromagnetic interference (EMI) 
and electrostatic interference (ESI). 


EMI (also called crosstalk) is caused by the magnetic 
field that exists around any current carrying conductor. 
The magnetic flux from one conductor can induce cur- 
rent in another conductor, resulting in transient volt- 
age. Several precautions can minimize EMI. 


Running 
a ground line between two adjacent lines 
wherever they traverse a long section of the circuit 
board. The ground line should be grounded at both 
ends. 


Running ground line between the lines of an address 
bus or a data bus if either of the following conditions 
exist. 
The bus is on an external layer of the board. 
The bus is on an internal layer but not sandwiched 
between power and ground planes that are at most 
10 mils away. 


Avoiding closed loops in signal paths (see Figure 2.5). 
Closed loops cause excessive current and create induc- 
tive noise, especially in the circuitry enclosed by a loop. 


ESI is caused by the capacitive coupling of two adjacent 
conductors. The conductors act as the plates of a capac- 
itor; a charge built up on one induces the opposite 
charge on the other. 


Separating signal lines so that capacitive coupling be- 
comes negligible. 


Running a ground line between two lines to cancel the 
electrostatic fields. 


Latchup is a condition in a CMOS circuit in which 
Vcc becomes shorted to Vss. Intel's CHMOS IV pro- 
cess is immune to latchup under normal operating con- 
ditions. Latchup can be triggered when the voltage lim- 
its on I/O pins are exceeded, causing internal PN junc- 
tions to become forward biased. The following guide- 
lines help prevent latchup: 


Observing the maximum rating for input voltage on 
I/O pins. 


Never applying power to an 386 DX CPU pin or a 
device connected to an 386 DX CPU pin before apply- 
ing power to the 386 DX CPU itself. 


Preventing overshoot and undershoot on I/O pins by 
adding line termination 
and by designing to reduce 
noise and reflection on signal lines. 


• 


The thermal specification for the 386 DX CPU defines 
the maximum case temperature. This section describes 
how to ensure that an 386 DX CPU system meets this 
specification. 


Thermal specifications for the 386 DX CPU are de- 
signed to guarantee a tolerable temperature at the sur- 
face of the 386 DX CPU chip. This temperature (called 
the junction temperature) can be determined from ex- 
ternal measurements using the known thermal charact- 
cristics of the package. Two equations for calculating 
junction temperature are as follows: 


Tj = Ta + (@ja • PD) and 


Tj = Tc + (@jc • PD) 


Tj = Junction Temperature 
@ja = Junction to ambient temperature coeff. 
Tc = Case Temperature 
Ta = Ambient Temperature 
@jc = Junction to Case 
PD = Power Dissapation temperature coeff. 


Case temperature calculations offer several advantages 
over ambient temperature calculations. 


Case temperature is easier to measure accurately than 
ambient temperature because the measurement is local- 
ized to a single point (top center of the package). 


The worst-case junction temperature (Tj) is lower when 
calculated with case temperature for the following rea- 
sons: 


The junction-to-case 
thermal 
coefficient (@jc) is 
lower than the junction-to-ambient 
thermal coeffi- 
cient (@jJ; therefore, calculated junction tempera- 
ture varies less with power dissipation (PD). 
@jc is not affected by airflow in the system; @ja 
varies with air flow. 


With the case-temperature 
specification, the designer 
can either set the ambient temperature or use fans to 
control case temperature. Finned heat sinks or conduc- 
tive cooling may also be used in environments where 
the use of fans is precluded. To approximate the case 
temperature 
for various environments, the two equa- 


tions above should be combined by setting the junction 
temperature equal for both, resulting in this equation: 


The current data sheet should be consulted to deter- 
mine the values of @ja (for the system's air flow) and 
ambient temperature 
that will yield the desired case 
temperature. 
Whatever the conditions are, the case 
temperature is easy to verify. 


As a general rule, any interconnection is considered a 
transmission line when the time required for the signal 
to travel the length of the interconnection is greater 
than one-eighth of the signal rise time. (True K. M. , 
"Reflection: Computations and Waveforms, The Inter- 
face Handbook", Fairchild Corp, Mountain View, CA, 
1975, Ch. 3). As frequencies increase, designers must 
account for the negative effects associated with trans- 
mission lines. The section that follows will attempt to 
describe these effects and provide some suggestions for 
minimizing their negative effect on the system. 


Before describing each effect, it is important to know 
how to characterize a trace on different types of trans- 
mision lines. This includes knowing the characteristic 
impedance of a trace, Zo, and the propagation delay for 
a given trace, tpd' These parameters will be used in 
determining what effects must be accounted for and to 
select component values used in minimizing the effects. 


Although many types of transmission lines (conduc- 
tors) exist, those most commonly used on the printed 
circuit boards are microstrip lines, strip lines, printed 
circuit traces, side-by-side conductors and flat conduc- 
tors. 


The micro strip trace consists of a signal plane that is 
seperated from a ground plane by a dielectric as shown 
in Figure 2.6. G-IO fiber-glass epoxy, which is most 
common, has an er = 5 where er is the dielctric con- 
stant of the insulation. Let: 
w = the width of the signal line (inches) 
t = the thickness of copper 
h = the height of dielectric for controlled imped- 
ance (inches) 


The characteristic impedance Zo, is a function of dielec- 
tric constant and the geometry of the board. This is 
given by: 


where e,. is the relative dielectric constant of the board 
material. 


The propagation delay (t~ 
associated with the trace is 
a function of the dielectnc only. 


A strip line is a strip conductor centered in a dielectric 
medium between two voltage planes. The characteristic 
impedance is given by: 


Micro Slrip 
fE--- 
w ~I 
~ 
I 


where b = distance between the planes for the con- 
trolled impedance as shown in Figure 2.10 


Typical values of the characteristic 
impedance and 
propagation delay of these types of lines are: 


Zo = 500 


tpd = 2 nslft 
(or 6 in/ns) 


The first effect is reflection. As the name indicates it is 
the reflection of a signal as it propagates down the 
trace. The reflection results from a mismatch in imped- 
ance. The impedance of a transmission line is a function 
of the geometry of the line, its distance from the ground 
plane, and the loads long the line. Any discontinuity in 
the impedance will cause reflections. 
____________ 
J 
Ip: 


GrOUnd~ 
Plane 
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Impedance mismatch occurs between the transmission 
line characteristic impedance and the input or output 
impedance of the devices that are connected to the line. 
The result is that the signals are reflected back and 
forth on the line. These reflections can attentuate or 
reinforce the signal depending upon the phase relation- 
ships. The results of these reflections include overshoot, 
undershoot, ringing and other undesirable effects. 


At lower edge rates, the effects of these reflections are 
not severe. However at higher rates, the rise time of the 
signal is short with respect to the propagation delay. 
Thus it can cause problems as shown in Figure 2-8. 


Overshoot occurs when the voltage level exceeds the 
maximum (upper) limit of the output voltage, while un- 
dershoot occurs when the level passes below the mini- 
mum (lower) limit. These conditions can cause excess 
current on the input gates which results in permanent 
damage to the device. 


The amount of reflection voltage can be easily calculat- 
ed. Figure 2-9 shows a system exhibiting reflections. 


intel~ 


The magnitude of a reflection is usually represented in 
terms of a reflection coefficient. This is illustrated in 
the following equations: 


T = v,/v; = Reflected voltage/Incident voltage 


Tload = (Zload 
- 
ZO)/(Zload 
+ Zo) 


Tsou,ce 
= (Zsou,ce 
- 
Zo)/(Zsou,ce 
+ Zo) 


Reflections voltage Vr is given by Vi, the voltage inci- 
dent at the point of the reflections, and the reflection 
coefficient. 


The model transmission line can now be completed. In 
Figure 2-9, the voltage seen at point A is given by the 
following equation: 


This voltage Va enters the transmission line at "A" and 
appears at "B" delayed by tpd. 


where x = distance along the transmission line from 
point "A" and H(t) is the unit step function. The wave- 
form encounters the loads ZL, and this may cause re- 
flection. The reflected wave enters the transmission line 
at "B" and appears at point "An after time delay (tp<J): 


This phenomenon continues infinitely, but it is negligi- 
ble after 3 or 4 reflections. Hence: 


Each reflected waveform is treated as a seperate source 
that is independent of the reflection coefficient at that 
point and the incident waveform. Thus the waveform 
from any point and on the transmission line and at any 
given time is as follows: 


V(x,t) = (Zo/(Zo+Zs)) 
(Vs(t-(x/v)) 
H(t-(x/v)) 
+ 
T1 [Vs(t-«2L-x)/v) 
H(t-(t-«2L-x)/v)))) 
+ 
T1Ts [Vs(t-«2L+x)/v) 
H(t-(t-«2L+x)/v)))] 
+ 


T12Ts[Vs(t-«4L-x)/v) 
H(t-(t-«4L-x)/v)))) 
+ 
T12Ts2 [Vs(t-«4L 
+x)/v) 
H(t- (t-«4L 
+x)/v)))] 


+ ... I 


Each reflection is added to the total voltage through the 
unit step function H(t). The above equation can be re- 
written as follows: 


V(x,t) = (Zo/(Zo+ 
Zs)) (Vs(t- (t-\pdx) H(t-tpdx) 
+ 
T1 [Vs(t-tpd(2L-x)) 
H(t-\pd(2L-x))) 
+ 
T1Ts [Vs(t-tpd(2L+x)) 
H(t-tpd(2L+x))) 
+ ... I 


Impedance discontinuity problems are managed by im- 
posing limits and control during the routing phase of 
the design. Design rules must be observed to control 
trace geometry, including specification of the trace 
width and spacing for each layer. This is very impor- 
tant because it ensures the traces are smooth and con- 
stant without sharp turns. 


There are several techniques which can be employed to 
further minimize the effects caused by an impedance 
mismatch during the layout process: 
I. Impedance Matching 


2. Daisy Chaining 
3. Avoid 90· Comers 
4. Minimize the Number of Vias 


Impedance matching is the process of matching the im- 
pedance of the the source or load to the impedance of 
the trace. This matching is accomplished using a tech- 
nique called termination. Termination makes the effec- 
tive source or load impedance, seen by the trace, to be 
approximately equal to the characteristic impedance of 
the trace. Before terminating a line one must determine 
if termination is required. This is done by a simple cal- 
culation. If the propagation delay down a trace from 
source to destination is greater than or equal to one- 
third the signals rise time, termination is needed. (i. e. • 
Tpd ;::,'/3 tr). The rise time is the 0%-100% rise time 
specified for the source. If this value is specified for 
10%-90% or 20%-80%, it must be scaled by multiply- 
ing the specified value by 1.25or 1.67, respectively. The 
propagation delay is caculated by multiplying the trace 
propagation delay, tpd' descibed earlier by the trace 
length. 


Once it is determined that termination is needed, use 
the equation described earlier to calculate the trace's 
characteristic impedance. The specification sheets for 
the load can be consulted to determine the load imped- 
ance, ZL. These values are needed to select the compo- 
nent values used to terminate. 


The next chore is selecting the type of termination to 
use. In this section we will examine 4 different tech- 
niques and point out the advantages and disadvantages. 
Figure 2.10 shows the four types of termination and the 
corresponding component values. 


Parallel termination, shown in Figure 2-IO(a), is a good 
technique to maintain the waveform. The waveform at 
the load is a perfect image of the waveform at the 
source. In addition there is no added propagation delay 
associated with this technique. The disadvantage of this 
technique is that it requires a fair amount of additional 
power and it is not suggested for characteristic imped- 
ances of less than 100 ohms because of the large d.c. 
current required. 


Thevenin termination, shown in Figure 2-1O(b), is an- 
other 
option. This technique 
also requires a large 


amount of power, but does not have the restrictions for 
characteristic impedance. This technique is very good 
at removing overshoot and undershoot while not add- 
ing any additional delay. Another advantage is that the 
trace can be biased toward Vcc or GND by simpling 
selecting the appropriate resistor values. This can help 
maintain fast edges on important signal transitions. 


Name 


Parallel 


Name 


Series 


Advantages 


Waveform 
at receiver is almost 
perfect 
image of input 


Bipolar/Advanced 
CMOS 


No added TpD 


Good overshoot 
and undershoot 
suppression 


Bipolar or Bipolar/CMOS 
systems 


No addedTpD 


R = 2Zo 


Figure 2-10(a). Termination 
Techniques 


Advantages 


Low power consumption 


CM08-CMOS 
Systems 


Easy to adjust signal 
amplitude 
to match 
switching 
threshold 


Low-medium 
power 
dissipation 
(capacitor 
blocks D.C. coupling 
of 
signal) 


No added delays 


High-speed 
CMOS families 


R = Zoo C = 200 pF-500 
pF 


Figure 2-10(b). Termination 
Techniques 


Disadvantages 


High power dissipation 


Zo ~ 1oon, else D.C. 
current limit 


Disadvantages 


AddedTpD 


Series termination, shown in Figure 2-1O(b), is a very 
easy technique of matching impedance. It only requires 
on resistor and very little additional power is required. 
In addition the resistor value can be selected to provide 
constructive or destructive reflections and thus alter the 
signal amplitude to match the switching threshold. The 
major disadvantage of this technique is the added delay 
it introduces. 


The fourth technique is A.C. termination, 
shown in 
Figure 2-1O(b).It requires a small amount of additional 
power, this is decreased over parallel termination by the 
introduction of the capacitor, and adds no extra delay 
to the path. The major disadvantage is that it requires 
two extra components. 


After examing the systems needs and selecting a termi- 
nation technique, the impedance values determined ear- 
lier, Zo and ZL, can be used to determine the compo- 
nent values to implement the termination. These values 
should be seen as a starting point and may be altered to 
remove a specific problem experienced on a signal or to 
bias signals in an appropriate fashion. 


Another technique of minimizing reflections is to daisy- 
chain signals, shown in Figure 2-11. This means to run 
a single trace from a source and to distribute the loads 
along this trace. The alternative is to run multiple 
traces from the source to each load. Each trace will 
have reflections of its own and these will be transmitted 
down the other traces once they have returned to the 
source. To manage such a system separate termination 
would be required for each branch. To eliminate these 
multiple terminators from T-connections, high frequen- 
cy designs are routed as daisy chains. 


Because each gate provides its own impedance load 
along the chain, it is necessary to distribute these loads 
evenly along the length of the chain. Hence, the imped- 
ance along the chain will change in a series of steps and 
is easier to match. The overall speed of this line is faster 
and predictable. Also all loads should be placed at 
equal distances (regular intervals). 


Eliminating 90° angles also minimizes reflections. It is 
much more desirable to use 45° or 135°angles as shown 
in Figure 2-12. 


Another impedance source that degrades high frequen- 
cy circuit performance is the via. Expert layout tech- 
niques can reduce vias to avoid reflection sites on 
PCBs. 


Following these guidelines will not guarantee elimina- 
tion of all reflections, but they will minimize the num- 
ber and size. 


Cross talk is another negative effect of transmission 
lines. It is a problem at high frequencies because, as 
operating frequency increase, the signal wavelength be- 
come comparable to the length of the interconnections 
on the PC board. In general, interference such as cross 
talk, occurs when electrical activity in one conductor 
causes a transient voltage to appear in another conduc- 
tor. Main factors that increase interference in any cir- 
cuit are: 
I. Variation of current and voltage in the lines causes 
frequency interference. This interence increases with 
increase in frequency. 
2. Coupling occurs when conductors are in close prox- 
imity. 


Cross talk is the phenomenom of a signal in one trace 
producing a similar signal in an adjacent trace. It may 
not be a carbon copy of the original signal. It may only 
be occasional noise that corrupts the integrity of the 
second signal. The easiest way to minimize crosstalk is 
to eliminate or at least minimize the number of parallel 
traces. Parallel traces can be on a single layer or on 
adjacent signal layers. 


There are three ways that parallel traces can couple and 
thereby produce a signal or at least influence the signal 
on a second trace. These methods of coupling are in- 
ductive, radiative, and capacitive. Inductive coupling is 
where the two traces act as inductors. The field pro- 
duced by a signal in one trace induces a current in the 
second trace. Radiative coupling occurs when the two 
parallel traces act as a dipole, an antenna. One radiates 
a signal and the other receives it, thus corupting the 
signal already present on the trace. The final method is 
capacitive coupling. Two parallel traces separated by a 
dielectric act as a capacitor. If both traces are in a high 
state and one transitions to a low. The capacitor will try 
to maintain the high and thus cause a slow transition 
time on the second trace. These effects can be mini- 
mized by reducing the number of parallel traces. 
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When laying out a board for an high speed 386 DX 
based system, several guidelines should be followed to 
minimize crosstalk. Some of them are as follows: 
I. To reduce crosstalk, it is necesary to minimize the 
common impedance paths. 
2. Run a ground line between two adjacent lines. The 
lines should be grounded at both ends. 
3. Seperate the address and data busses by a ground 
line. This technique may however be expensive due 
to large number of address and data lines. 


4. Remove closed loop signal paths which create induc- 
tive noise. 
5. Capacitive coupling can be reduced by reducing the 
number of parellel traces. Parallel traces can be mini- 
mized by insuring that signals on adjacent signal lay- 
ers run orthogonal, perpendicular. Ground planes or 
traces can be inserted to provide shielding. A ground 
plane between signal layers eliminates any coupling 
that could occur. On a single trace, a ground trace 
can be run between traces to prevent coupling. 


In some instances it is necessary to run traces parallel 
to each other. In these cases try to make the distance as 
short as possible and choose signals in which the tran- 
sition time is not as critical so that the coupling effects 
do not produce problems. In addition the coupling can 
be minimized by increasing the spacing between paral- 
lel traces. 


Skew is another effect of transmission lines. This is very 
important in a synchronous system. Long traces add 
propagation delay. A longer trace or a load placed fur- 
ther down a trace will experience more delay than a 
short trace or loads very close to the source. This must 
be taken into account when doing the worst case timing 
analysis. In a system where events must occur synchro- 
nous to a clock signal, it is important to make sure the 
signal is available to all input a sufficient amount of 
time prior to the corresponding clock edge. When per- 
forming the component placement this is one of the 
considerations that must be accounted for. 


These guidelines have always been recommended for 
board design; however, they are much more important 
at higher frequencies. At the slower frequencies design- 
ers could ignore these practices occassionally and not 
experience difficulties. This is not the case at higher 
frequencies. 


To maintain proper logic levels, all digital signal out- 
puts have a maximum load, they are capable of driving. 
DC loading is the constant current required by an input 
in either the high or the low state. It limits the ability of 
a device driving the bus to maintain proper logic levels. 
For a 386 DX based system, a careful analysis must be 
performed to ensure that in a worst case situation no 
loading limits are exceeded. Even if a bus is loaded 
slightly beyond its worst case limit, it might cause prob- 
lems if a batch of parts whose input loading is close to 
maximum is encountered. Proper logic level will then 
fail to be maintained and unreliable operation may re- 
sult. Marginal loading problems are particularly insidi- 
ous, since the effect is often erratic operation and non 
repetitive errors that are extremely difficult to track 
down. For both the high and low logic levels, the sum 
of the currents required by all the inputs and the leak- 
age currents of all outputs (drivers) on the bus must be 
added together. This sum must be less than the output 
capability of the weakest driver. Since the 386 DX is a 
CHMOS device having negligible dc loading, the main 
contributors to dc loading will be the TTL devices. 


The AC or capacitive loading is caused by the input 
capacitance of each device and limits the speed at 
which a device driving a bus signal can change the state 
from high to low or low to high. Designers of micro- 
processor systems have traditionally calculated load ca- 
pacitance of their systems by determining the number 
of devices and their individual capacitance loading at- 
tached to a signal plus the amount of trace capacitance. 
Typically, the trace capacitance was a set "lumped" 
number of pf (i.e. 2 pf to 3 pf per inch) when it is 
thought of at all. This lumped method is a general rule- 
of-thumb which generates a good first pass approxima- 
tion. For low frequency designs, the lumped method 
works since system and component margins are large 
enough to cover any minor differences due to the ap- 
proximation. 


For high frequency designs, the component and system 
margins are no longer available to the designer. With 
less than I ns of margin, even the amount of trace ca- 
pacitance can make a circuit path critical. 


A more accurate calculation of capacitive loading can 
be derived by modeling the device loads and system 
traces as a series of Transmission Lines Theory. Trans- 
mission Line Theory provides a more accurate picture 
of system loading in high frequency systems. In addi- 
tion, it allows new factors such as inductance and the 
effect of reflections upon the quality of the signal wave- 
form to be factored into consideration. 


A derating curve is a graph that plots the output buffer 
against the capacitive load. The curve is used to analyze 
a signal delay without necessitating a simulation every 
time the processor's loading' changes. This graph as- 
sumes the lumped capacitance model to calculate the 
total capacitance. The delay in the graph should be 
added to the specified AC timing value for the device 
that is driving the load. The derating curve is different 
for different devices because each device has different 
output buffers. 


A derating curve is generated by tying the chip's output 
buffers to a range of capacitors. The voltage and resist- 
ance values chosen for the output buffers are at the 
highest specified temperature 
and are rising (worst 
case) values. The value of the capacitors centres around 
the AC timing values for the chip. For 33 MHz and 
above, this is 50 pF. Since the AC timing specifications 
are measured for a signal reaching 1.5 V. A curve is 
then drawn from kthe range of time and capacitance 
values, with 50 pF representing the average and with 
nominal or zero derating. These curves are valid only 
for 50 pF -ISO pF load range. Beyond this range the 
output buffers are not characterized. The the derating 
curve for the 386 DX are shown in 2-13. These curves 
use the lumped capacitance model for circuit capaci- 
tance measurements 
and must be modified slightly 
when doing worst-case calculations that involve trans- 
mission line effects. 
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NOTE: 
This graph will not be linear outside of the CL range 
shown. 


Figure 2·13. Typical 
Output Valid Delay 
Versus Load Capacitance 
at Maximum 
Operating 
Temperature 
(CL = 120 pF) 
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For performance at high frequencies, the clock signal 
(CLK2) for the 386 DX CPU must be free of noise and 
within the specifcations listed in the 386 DX CPU data 
sheet. Achieving the proper clock routing around a 
33 MHz printed circuit board is delicate because a myr- 
iad of problems, some of them subtle, can arise design 
guidelines are not followed. For example, fast clock 
edges cause reflections from high impedance termina- 
tions. These reflections can cause significant signal deg- 
radation in systems operating at 33 MHz clock rates. 
This 
section covers some design guidelines which 
should be observed to properly layout 
the clock lines 
for efficient 386 DX operation. 
• Since the rise/fall time of the clock signal is typical- 
ly in the range of 2-4 ns, the reflections at this speed 
could result in undesirable noise and unacceptable 
signal degradation. 
The degree of reflections de- 
pends on the impedance of the traces of the clock 
connections. These reflections can be optimized by 
terminating the CLK2 output with proper termina- 
tions and by keeping length of the traces as short as 
possible. The preferred method is to connect all of 


the loads via a single trace as shown in Figure 2-14, 
thus avoiding the extra stubs associated with each 
load. The loads should be as close to one another as 
possible. Multiple clock sources should be for dis- 
tributed loads. 
• A less desirable method is the star connectton layout 
in which the clock traces branch to the load as close- 
ly as posssible (Figure 2-15). In this layout, the stubs 
should be kept as short as possible. The maximum 
allowable length of the traces depends upon the fre- 
quency and the total fanout, but the length of all the 
traces 
in the 
star 
connection 
should 
be equal. 


Lengths of less than one inch are recommended. In 
this method the CLK2 signal is terminated by a se- 
ries resistor. The resistor value is calculated by mea- 
suring the total capacitive load on the CLK2 signal 
and referring to Figure 2-16. If the total capacitive 
load is less than 80 pF, the user should add capaci- 
tors to make up the diference. Because of the high 
frequency of CLK2, the terminating resistor must 
have low inductance; carbon resistors are recom- 
mended. 


• Use an oscilloscope to compare the CLK2 waveform 
with those in Figure 2-17. 
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TERMINATION 
RESISTOR (OHMS) 


• CL = CIN (386) + CIN (387) + CIN (PALs) + ... + CBOARD. 


CBOARDis calculated from layout and board parameters; thickness, dielectric constant, distance to ground/V cc planes. 


• Termination resistor must be low inductance type. Recommend carbon filled type. 
• 


At higher processor speeds the window of time avail- 
able to perform specific tasks become very small. This 
window can be equated to multiples of the CLK2 peri- 
od. Within this time signals must be supplied from a 
source and reach a destination in time to meet any set- 
up requirements. At 16 MHz the CLK2 period is 31 ns. 
At 33 MHz it shrinks to half this value, 15 ns. The 
longer time allowed the use of slower logic families and 
the delays associated with longer traces. As the window 
decreases system designers have to practice more care 
in the selection of logic families and in the choices 
made for component placement and signal routing on 
PCBs. This section attempts to list the signal paths 
whose worst case timing analysis results in very small 
margins and therefore require closer attention from de- 
signers to guarantee that all a. c. timing specifications 
are met. 


This section also includes a sample design based on 
33 MHz version of the 386 DX. It should not be taken 
as a recommended design. The circuit is used only to 
highlight the design considerations for high speed sys- 
tems. 


Figure 3.1 shows the system block diagram. It has four 
major subsystems. 
I) CPU subsystem 
2) DRAM subsystem 
3) Cache subsystem 
4) ROM and I/O subsystem 


The system has I megabytes of Page-Mode DRAMS 
(60 ns RAS access time), 128 kilobytes of EPROMS 
(200 ns access time), an 8259A-2, and an 82510. The 
cache subsystem is optional. 
Schematics and PAL 
codes are given in appendix A and B respectively. 


The CPU subsystem consists of the 386 DX microproc- 
essor, a clock and reset circuitry, and bus control logic. 
Clean and proper clock is very important in the designs 
at high frequencies. 


This state machine is used to generate three control 
signals, namely RESET, 
REFREQ 
and CLK. 
The 
CLK signal is half of the CPU clock, CLK2 and is used 
mainly in I/O and EPROM subsystem. 


RESET is generated through the input from RESET 
triggering circuitry (as shown in the CPU schematic). 
The min RESET Setup and Hold time for operation at 
33 MHz are 5 ns and 2 ns respectively. 


A 61.44 KHz clock is used to produce a synchronous 
refresh request (REFREQ) signal for the DRAM con- 
troller, 
which 
employ 
a 
transparent, 
distributed, 
DRAM refresh technique that allows the processor and 
cache to run while the refresh cycle is in progress. 


An non-interleaved DRAM system is used in the sam- 
ple board, which simplifies the design. Since the board 
provide caching, the performance of DRAM subsystem 
is outweighed by the simplicity and economy of the 
design. It employs a transparent, distributed, DRAM 
refresh technique which allows the processor and cache 
to run while the refresh cycle is in progress. It uses the 
3-state capability of the 16R8-7 and the 74ACT258 to 
multiplex the refresh address. A further consideration 
is the choice of DRAM devices. If one uses a memory 
device such as the AAA2801 (which supports a CAS# 
before RAS # refresh and provides an internal refresh 
counter) further simplifications can be made in both the 
circuitry and the control logic. 


The state machine is implemented with three 16R8- 
type E-speed PALs (see page 4 of the schematics). 
E-speed PALs must be used since the CLK2 frequency, 
66.67 MHz, is higher than the maximum clock frequen- 
cy of the D-speed PALs. 


In order to generate DRAM control signals with small- 
est delay from the CLK2 edges, all state machines are 
implemented as Moore machines. The state machines 
flip-flops generate most of the DRAM control signals 
directly. This is an expensive design approach in terms 
of hardware but allows signal timings and skews to be 
fine tuned. 


Pages 1-290 through 1-293 show examples of DRAM 
cycles. In order to hide the DRAM page hit-or-miss 
decision time, the DRAM controller always tries to put 
the 386 DX in pipelined mode. The first read cycle 
requires only two wait states since RAS # has been pre- 
charged (see page 1-290). The second cycle takes only 
two clock cycles. The second cycle is a pipelined, page- 
hit read cycle, which is the best case. The third cycle is 
a pipelined, page-hit write cycle. This cycle requires one 
wait state. DRAMs capture data at the falling edge of 
CAS# during Early Write cycles. The 386 DX drives 
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valid write data at the rising edge in the middle of Tip 
(edge C) with a max prop delay of 24 ns (Tl2 max). 
This means that the CAS# is generated after the rising 
edge in the middle of the second T2p (edge A). CAS# 
is, therefore, generated at the end of RAS# hold time 
with respect to CAS# (if the next cycle is a page miss, 
RAS# will go inactive at the end of the current write 
cycle), and so on. 


The fifth cycle is a page miss, which is actually detected 
at the end of the fourth cycle (page 1-291).Since the 
DRAM controller must wait for minimum RAS# pre- 
charge time, the fifth cycle requires three wait states. 
The sixth cycle is also a page miss.This cycle, however, 
requires only two wait states because the miss was de- 
tected early enough in the previous cycle to have 
RAS# precharged by the end of the Tl p. If the seventh 
cycle is another page miss, it will require three wait 
states. 


The eighth cycle is ended with T2i. Consequently, the 
ninth cycle must wait for minimum RAS# precharge 
time and requires three wait states. 


A DRAM refresh cycle is shown on page 1-293.The 
DRAM address multiplexer output is disabled, and the 
refresh address counter output is enabled. The cycle 
does a RAS# only refresh cycle where only RAS# is 
asserted with a proper refresh address. After the refresh 
cycle is completed, a read cycle which has been sus- 
pended due to the refresh is resumed. 


Pages 1-243through 1-253show state diagrams of the 
DRAM controller. The precharge state machine on 
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page 1-244 measures the required RAS# 
precharge 
time 
and 
CAS#-to-RAS# 
precharge 
time. 
The 
CAS#-READY# 
state machine on page 1-244imple- 
ments a pin strap option of having or not having the 
82385. For no cache configuration, the Cache variable 
must be forced low. 


Timing equations are described on pages 1-303 and 
1-304.Their corresponding results are given on pages 
1-305through 1-309. 


Capacitive load on the 386 DX address bus was as- 
sumed to be less than 85 pF. Capacitive load on the 
DRAM address bus was calculated to be less than 
22 pF. 


At 33 MHz DRAM speeds are not fast enough to de- 
sign zero wait state memory systems. A cache can be 
used to take advantage of the higher performance avail- 
able from the higher speed 386 DX microprocessors. 
The cache takes advantage of the faster SRAM while 
keeping system costs down by using the cheaper but 
slower DRAMs. 


Details of the cache subsystem are shown on Figure 3.2 
and 3.3. The 82385 address and data busses are inter- 
faced to the 386 DX address and data busses via 
74AS574s and 74AS646s. Static RAMs (20 ns access 
time) are used for the cache memory. 
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In selecting SRAM there are several types one can 
choose to use. Some SRAM require a latch for the ad- 
dress and a transceiver for the data. Others have an 
OE#, 
output enable, signal and incorporate the trans- 
ceiver on chip. The third type is called integrated 
SRAM and these contain both the latch and the trans- 
ceiver on chip. However, there are two timing paths 
that dictate the speed selection within each type. Figure 
3.4 shows a typical system configuration using each 
type. 
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The critical times for the SRAM are the SRAM OE# 
to data delay and the SRAM address to data delay. The 
following analysis applies to SRAMs with an OE# sig- 
nal as shown in Figure 3.4b. First examine the path of 
OE# 
to data. This path must be completed within 2 
CLK periods. The COE# 
signal from the 385 Cache 
Controller must be valid and the SRAM must drive 
data onto the data bus so that the data setup time of the 
386 DX CPU is met. 


2 X CLK2 period - t25b 82385 COE# 
valid delay 
(max) - SRAM access time (OE# to data) - t21 386 DX 
data setup ~ 0 


Using the specified values from the data sheets reveals 
that the SRAM must have an OE# 
to data delay of 
IOns or less. The other path is for the address to be- 
come available and data to reach the 386 DX CPU. 
This path has 4 CLK2 periods. The 385 Cache Control- 
ler must supply the CALEN signal to pass the address 
to the SRAM and then the SRAM must drive the data 
on the data bus so that the data setup time is met on the 
386 DX CPU. 


4 X CLK2 period - t21b 82385 CALEN valid delay 
(max) - tpd (x373 latch) - SRAM access time (address 
to data) - t21 386 DX data setup ~ 0 


Once again using the data sheet the access time can be 
determined. Depending on the type of transparent latch 
the SRAM needs an address to data access time of 20ns 
or 25ns. If an F series 373 is used the faster 20ns 
SRAM must be used, but if an FCT373a or PCT373a is 
used the 25ns SRAM is sufficient. 


The A20 path is another path with a small margin. The 
reason is the AND gate that many designers insert to 
provide 1MB wraparound of address in real mode. Fig- 
ure 3.5 shows the circuit block diagram. A20 must leave 
the 386 DX and reach the 385 Cache Controller within 
2 CLK2 periods. 


• 


240725-31 
2 X CLK2 period - Is 386 DX address validdelay (max) - tIpAND prop. delay - t7d82385 address setup 
:<0 0 


Figure 3-5. Critical Timing A20 


To meet this timing the propagation delay of the AND 
gate must be less than 6ns. This dictates the use of a 
74AS08 gate or faster device. 


Analysis of the LOCK # path also shows a small mar- 
gin. The reason is the OR gate that many designers 


insert to disable the LOCK # signal to the 385 Cache 
Controller. This allows locked accesses to be cached. 
Figure 3.6 shows the circuit block diagram. LOCK# 
must leave the 386 DX and reach the 385 Cache Con- 
troller within 2 CLK2 periods. 


240725-32 
2 X CLK2 period- te 386 DX LOCK # validdelay (max) - tip OR prop. delay - t7b 82385 
LOCK # setup :<0 0 


Figure 3-6. Critical Timing Lock# 


To meet this timing the propagation delay of the OR 
gate must be less than 6ns. This dictates the use of a 
74AS32 gate or faster device. 


The final path examined here is the NA# 
path. Re- 
cently designers have selected to use an I/O port and 
an OR gate to disable pipelining selectively. Figure 3.7 
shows the circuit block diagram. NA # must leave the 
386 DX and reach the 385 Cache Controller within 2 
CLK2 periods. 


Using the specified values in the appropriate data sheets 
results in the need for the propagation delay of the OR 
gate must be no greater than 5.8ns. This dictates the 
use of a 74AS32 gate or faster device. 


This list is not meant to be exhaustive. It is merely 
meant to highlight a few of the critical timings. Each 
designer should perform a thorough timing analysis of 
the system they are designing to verify that all timing 
requirements are met. 


In addition to the specified timing parameters in the 
data sheets, designers should account for propagation 
delays introduced by the trace and by capacitive load- 
ing. The propagation delay added by the trace is ex- 
plained in the section on transmission line effects and 
supplies an equation to determine the amount of delay. 


240725-33 
2 X CLK2 period· t17 386 DX NA# validdelay (max)- ttp OR prop. delay· t15 82385 
NA# setup;;, 0 


Figure 3-7. Critical Timing NA# 
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Another factor that becomes more important at higher 
frequencies is loading. DC loading and especially ca- 
pacitive loading must be considered during the design 
stage. If the board is to be assembled and tested in 
stages, then the DC loads should be considered for all 
configurations of the board. Most termination 
tech- 
niques require additional current. If a board has a mar- 
ginalloading situation, one is limited in one's choices of 
termination techniques. If a capacitive loading problem 
exists, the timing situations can become extremely diffi- 
cult at higher frequencies. If timing is critical, do not 
overload the capacitance at which a device was tested. 
If a device is overloaded, derating must be taken into 
consideration. 


Capacitive loading also introduces a delay on signals. 
Many components including the 386 DX include a ca- 
pacitive derating curve in the data sheet. To use the 
curve in the 386 DX data sheet, the capacitive load 
must be calculated. This is done by summing the input 
capacitances of all devices driven by a given output 
from the 386 Microprocessor. Find this value on the X- 
axis of the derating curve in the data sheet and move up 
till the derating curve is intersected. Then move at a 
right angle to the left until intersecting the Y-axis. A 
value of nom + or nom - 
something is found. This is 


the nominal value plus or minus some amount. The 
nominal value is the value found in the data sheet. Add 
the offset from the curve to this nominal value to get 
the resulting delay corresponding 
to the capacitive 


loading in the system. Note: The trace capacitance was 
not included in this calculation. It is accounted for in 
the trace propagation delay mentioned earlier. 


When the 82385 is enabled (the CACHE variable of the 
state machine on page 1-244 is forced High), the 
DRAM controller inserts one extra wait state in all 
read cycles. This extra time is needed to allow a cache 
update cycle to occur after each cache read miss cycle. 
During 
a cache update cycle, the read data from 
DRAMs must propagate through the 74AS646 and the 
74F245 (optional) and must be ready for a SRAM write 
cycle with enough setup time. 
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Timing diagrams on pages 1-294 through 1-298 show 
cache and DRAM cycles. 


Timing equations are found on pages 1-310 and 1-311. 
Only tCAS, tRAC, tCAC, tAA, tPC, and tCAP are 
different 
in 
this 
configuration. 
Actual 
values 
for 


DRAM timings are found on page 1-312. 


A block diagram of the I/O-EPROM 
subsystem is 


shown on Figure 3.8. This subsystem has separate ad- 
dress and data busses. The address bus is 14 bits wide, 
and the data bus is 16 bits wide. 


The bus controller 
is designed with B-speed PALs 


which are clocked by the CLK# 
signal (Figure 3.8). 


There are a few unique design issues in this scheme. 


As shown on Figure 3.10, ADS# is now an asynchro- 
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The second issue is its asynchronous nature of the state 
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rising edge of DEN # is synchronized to CLK2 by a 
J-K flip-flop as shown on Figure 3.9. This is important 
to avoid bus contention after an 110 or EPROM read- 
cycle. BSI6# is synchronized to CLK2 by D flip-flops. 


EPROM and I/O cycle timings are shown on pages 
1-299 through 1-302. The worst case is a write cycle to 
the 82510 and may require as many as 14 wait states. 
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PO 


PI6H6A 


a 
ALE 
INT., 


KlOT/R, 


PUUUP 
..., 


P16H6A 
UW 


"DEN, 


UW17 
.,. 
"WCj 


I 


» 
'lJ 
74A.S24S 
I 
l 
8-15 
~ 
2.7 
~ 
l 
0-7 
~ 


27128,A, 
8259A-2 


A13 
007 
1 
07 
A12 
006 
1 
D6 
All 
DOS 1 
05 
Al0 
ggj 
1 
O. 
A9 
03 
A8 
002 
1 
02 
A7 
gg~11 
01 
A6 
DO 
AS 
RD 
A. 
ViR 
A3 
AD 
l07 
A2 
CS 
Al 
Al 
A2 
AO 
INT 
A3 
cr 
INT .•. 
A. 
AS 


""40 
""39 
A6 
A7 
A8 


--€: 


~g 1 
RfS' 
rn 
• 
OS" 
1 
iffil 
oeD 
R1 
OUT2/X2 
elK/Xl 


"5-232 


"5-232 
:J:;- "5- 232 


8 
8 
8 


1.2.4.8 


intel ® 
AP-442 


P 2 
TXD 


P 
3 
RXD 


+5V 


+12V 
-12V 
• 


APPENDIX 
B 
STATE DIAGRAMS 
AND PALCODES 


MEMCS'" 
= MilO"'. 
ADS",. 
IA31-0EI1FFFFFFF 
..OOOOOOOOll 
LMEMCS# 
= MEMes# 
+ mreq 


ClK' WEWCS" 
HIT# + 
ClK . WEWCS' + 
ClK . refresh 


intel~ 


CLK . refreq 
. RAS# . MEMCS# 
+ CLK . refresh' 
RAS# . DRAMRDY# 


ClK 
MEMCSN ° W/RN 
° T2XN + 
lWRoTIPN 
240725-59 


ClK t.4Et.4CS#-W/R#-T2X#+ 


ClK -mreq -TIP# + 
mreq -T2X# • 


RESET_GEN 
flag 
'-r3' 


'RESET_GENERATION_LOGIC 
- 
INTEL CORPORATION' 


Inputs 


CLK2 
pin 
1: 
RESTRIG 
pin 
2: 
CLK_61 
pin 
9: 


" Outputs 


"CLK2 
"signal 
from reset 
circuitry 
"61.44KHz 
clock 


REFREQ 
RFQTMP 
CLK- 
CLK 
RESTMP 
RESET 


pin 
12 i 
pin 
13: 
pin 
16: 
pin 
17: 
pin 
18: 
pin 
19: 


"REFREQ, 
sync 
6I.44KHz 
clock 
"temporary 
stage 
in 
sync 
of 
61.44MHz 
elk 
"CLK' 
"CLK • 
CLK2 / 
2 
"temporary 
stage 
in 
generating 
RESET 
"RESET 


CLK :. 
(lCLK' 
(lRESTMP 
& RESET»); 
CLK- 
:. 
CLK; 
RESTMP :. 
RESTRIG: 
RESET 
:. 
RESTMP: 
RFQTMP :. 
CLK 61; 
REFREQ 
:. 
RFQTMP; 


C 
C 
C 
C 
R 
R 
C 
C 
R 
L 
L 
L 
L 
E 
F 
L 
L 
E 
K 
K 
K 
K 
S 
Q 
K 
K 
S 
2 
- 
T 
T 
- 
T 
6 
M 
M 
M 
1 
P 
P 
P 


[c, 
x, 
1, 
x, x, x, x, x, X} -> [x, X, 
1, x, x, x] : 
[c, 
x, 
I, 
x, x, 
I, 
x, 
X, 
X 
-) 
[x, 
x, 1, I, x, x] : 
[c, 
x, 0, x, x, 
I, 
x, x, xl 
-> [x, x, 0, I, x, x] ; 


[c, 
x, x, x, x, 0, 
1, 
x, x] 
-> [1, x, x, x, x, x] : 
" elk generation 
[c, x, x, 
1, x, x, 0, x, x] 
-> [0, 
1, x, x, x, x] : 
[c, x, x, 0, x, x, x, x, x] 
-> 
[I, 
0, x, x, x, x] : 
240725-48 


PAL Codes: RESET 


inte!® 
AP-442 


[c, 
x, 
x, 
I, 
x, 
I, 
x, 
x, 
x] 
-> [0, 
I, 
x, 
x, 
x, 
xl; 


[c, 
x, 
0, 
x, 
x, 
x, 
x, 
x, 
xl 
-> [x, 
x, 
0, 
x, 
x, 
xl; 
restmp 
gen 
[c, 
x, 
x, 
x, 
x, 
0, 
x, 
x, 
x] 
-> [x, 
x, 
x, 
0, 
x, 
xl; 
reset 
gen 
[c, 
x, 
I, 
x, 
x, 
x, 
x, 
x, 
xl 
-> 
[x, 
x, 
I, 
x, 
x, 
xl; 


[c, 
x, 
x, 
x, 
x, 
I, 
x, 
x, 
x] 
-> 
[x, 
x, 
x, 
I, 
x, 
xl; 


[c, 
0, 
x, 
x, 
x, 
x, 
x, 
x, 
xl 
-> [x, 
x, 
x, 
x, 
0, 
xl; 
5l.44KHz 
elk 
[c, 
x, 
x, 
x, 
x, 
x, 
x, 
0, 
xl 
-> lx, 
x, 
x, 
x, 
x, 
0] ; 
[c, 
I, 
x, 
x, 
x, 
x, 
x, 
x, 
x] 
-> [x, 
x, 
x, 
x, 
I, 
x] ; 


[c, 
x, 
x, 
x, 
x, 
x, 
x, 
I, 
x] 
-> [x, 
x, 
x, 
x, 
x, 
ll; 


end 
RESET_GEN; 


ABEl(tm) 
3.10 
- 
Document 
Generator 
RESET GENERATIONlOGIC - 
INTEL CORPORATION 
Equations 
for 
Hodule 
RESET_GEN 


Device 
RESET_PAL 


!ClK 
:. 
(ClK 
& 
!RESET * ClK 
& RESTHP); 


!ClK- 
:- 
(!ClK); 


!RESTMP :. 
(!RESTRIG); 


!RESET :- 
(!RESTMP); 


!RFQTMP :- 
(!ClK_51); 


!REFREQ :- 
(!RFQTMP); 


• 


ABEL 3.IQ-Document Generator 
RESET_GENERATION_LOGIC-INTEL 
CORPORATION 
Chip diagram for Module RESET_GEN 


ClK2 


RESTRIG 
RESET 


RESTMP 


ClK 


ClK- 


RFOTMP 


REFREO 


_REFREO_E 


ADS- 
M 10- 
All 
A30 
A29 
A6 
mreq 


pin 
1 i 


pin 
2i 


pin 
3; 
pin 
pin 
5; 
pin 
9; 
pin 
11; 


"ADS' 
"M/IO' 
"Addr 
bit 
31 
4; 
"Addr 
bit 
30 
"Addr 
bit 
29 
"Addr 
bit 
6 


IIlatched 
memory chip 
select 


[0, 
1, 
0, 
0, 
0, 
x, 
0, 
0] 
-) 
[0, 
0, 
I, 
I, 
I]; 


[0, 
I, 
0, 
0, 
0, 
x, 
x, 
x] 
-) 
[0, 
x, 
I, 
I, 
I]; 


[I, 
x, 
x, 
x, 
x, 
x, 
I, 
0] 
-) 
[I, 
0, 
x, 
x, 
x] ; 


[I, 
x, 
x, 
x, 
x, 
x, 
x, 
x] 
-) 
[I, 
x, 
x, 
x, 
x] ; 
---CS- 
[x, 
1, 
x, 
x, 
x, 
x, 
x, 
x] 
-) 
[x, 
x, 
I, 
I, 
x] ; 


[x, 
0, 
x, 
x, 
x, 
x, 
x, 
x] 
-) 
[I, 
x, x, x, 
I]; 


[x, 
I, 
0, 
x, 
x, 
x, 
x, 
x] 
-) 
[x, 
x, 
I, 
I, 
I]; 


[x, 
I, 
x, 
0, 
x, 
x, 
x, 
x] 
-) 
[x, 
x, 
I, 
I, 
I]; 


[x, 
I, 
x, 
x, 
0, 
x, 
x, 
x] 
-) 
[x, 
x, 
I, 
I, 
I]; 


[x, 
I, 
1, 
0, 
0, 
x, 
x, 
x] -) [I, 
x, 
I, 
I, 
I]; 


[x, 
1, 
0, 
I, 
0, 
x, 
x, 
x] 
-) 
[I, 
x, 
I, 
I, 
I]; 


[x, 
I, 
0, 
0, 
I, 
x, 
x, 
x] 
-) 
[I, 
x, 
I, 
1, 
I]; 


[x, 
O. 
X, 
x, 
x, 
0, 
x, 
x] 
-) 
[I, 
x, 
x, 
I, 
I]; 


[x, 
0, 
x, 
x, 
x, 
I, 
x, 
x] 
-) 
[I, 
x, 
I, 
x, 
I]; 


[x, 
I, 
I, 
I, 
I, 
x, 
x, 
x] 
-) 
[I, 
x, 
I, 
I, 
0]; 


[0, 
I, 
0, 
0, 
0, 
x, 
x, 
x] 
-) 
[0, 
x, 
I, 
I, 
I]; 


[I, 
I, 
0, 
0, 
0, 
x, 
x, 
x] 
-) 
[I, 
x, 
I, 
I, 
I]; 


[0, 
0, 
Xf 
X, 
x, 
0, 
x, 
x] 
-) 
[I, 
x, 
0, 
I, 
I]; 


[0, 
0, 
x, 
x, 
x, 
I, 
x, 
x] 
-) 
[I, 
x, 
1, 
0, 
I]; 


end 
ADDR.DEC; 
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module 
ADOR.OEC flag 
'-r3' 


t i tl e 
'AOORESS.OECOOE.LOGIC 
- 
INTEL CORPORATION' 


device 
'PI6LS'; 


"ABEL don't 
care 
symbol 


"ABEL clocking 
input 
sybol 


MEMCS- 
pin 
IB; 


59CS- 
pin 
IS; 


-510CS- 
pin 
14; 
<PROM- 
pin 
13; 


LMEMCS- pin 
12; 


"Memory 
chip 
select 
"S259A 
chip 
select 


"S2510 
chip 
select 


"EPROM chip 
select 


"Latched/unlatched 
memory 
chip 
select 


IMEMCS- • 
!AOS- & M 10- 
& IA31 & !A30 & IA29; 
!LMEMCS- • 
(!ADS- 
&·M 10- 
& !A31 & !A30 & !A29) 
, 
mreq; 


I S9CS- 
• 
1M 10- 
& JA6; 


1-510CS- 
• 
1M 10- 
& A6; 
I<PRDM-. 
M.TO- 
& A31 & A30 & A29; 


([ADS-, 
M_IO-, 
A3I, 
A30, 
A29, 
A6, 
mreq, 
MEMCH 
-) 


[MEMCS-, 
LMEMCS-, .59CS-, 
_510CS-, 
EPRDM-]) 


A 
M 
A 
A 
A 
A 
m 
M 
M 
L 
E 
0 
3 
3 
2 
6 
r 
E 
E 
M 
P 


S 
T 
I 
0 
9 
e 
M 
M 
E 
R 
0 
q 
C 
C 
M 
° 
S 
S 
C - 
M 
- 
S 


[I, 
x, 
x, 
x, 
x, 
x, 
0, 
1] 
-) 
[I, 
I, 
x, 
x, 
x] ; 


[I, 
x, 
x, 
x, 
x, 
x, 
I, 
1] 
-) 
[I, 
0, 
x, 
x, 
x] ; 
"LMEMCS- 
[0, 
I, 
0, 
0, 
0, 
x, 
x, 
x] 
-) 
[0, 
x, 
I, 
I, 
I]; 
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PAL Codes: Address 
Decoder 


intel~ 


ABEL(tm) 
3.10 
- 
Document 
Generator 
ADDRESS DECODE LOGIC 
- 
INTEL 
CORPORATION 
Equations 
for 
Module 
AOOR_OEC 


Oev1 ce 
AOOR]AL 


IMEMCs- 
• 
(!AZ9 
& 
!A30 
& 
IA31 
& 
IAOs- 
& M_IO-); 


iLMEMCS- 
• 
(mreq 
, 
!AZ9 
& 
iA30 
& 
iA31 
& 
IAOs- 
& M_ID-); 


!_59CS- 
• 
(!A6 
& 
!M_ID-); 


i_510Cs- 
• 
(A6 
& 
iM_IO-); 


iEPROM- 
• 
(AZ9 
& A30 
& A31 
& M_IO-); 


intel~ 


ABEL 3.IO-Document Generator 
ADDRESS_DECODE_LOGIC-INTEL 
CORPORAnON 
Chip diagram for Module ADDlCJ)EC 


ADS- 


loUO- 


A31 


A30 


A29 


_59CS- 


_510CS- 


EPRDll- 


LllEllCS- 
• 


module 
PAGE)100E.0RAl1_CTRL.I 
flag' 
-r3' 


title 
'PAGE HOOE ORAl1CONTROLLER- 
PAL I, 
INTEL CORPORATION' 


CLKZ 
pin 
CLK 
pin 
MEMCS- 
pin 
LMEMCS- pin 
HIT- 
pin 
CAS- 
pin 
ORAl1ROY- 
refreq 
pin 
RESET 
pin 


I; 
'80386 
CLKZ 
2; 
·Processor 
Clock 
3; 
'Memory 
Chip 
Select 
4; 
'Latched/Unlatched 
Memory Chip 
Select 
5; 
'ORAl1 Page 
Hit 
Signal 
6; 
"Column Address 
Strobe 
pin 
7; 
'ORAl1 Ready 
Signa' 
8; 
"Refresh 
Request 
Signal 
9; 
·Systel'A 
Reset 


Outputs 


RAS- 
pin 
NA- 
pi n 
precharge 
a 
pin 
wait- 
pin 
CAL 
pin 
refresh 
pin 


12 i 
"Row Address 
Strobe 
13; 
"Next 
Address 
Signal 
pin 
14; 
"RAS Precharge 
Signal 
15; 
16; 
"delays 
RAS- until 
refresh 
adress 
is 
val id 
17; 
"Column 
Address 
Latch 
18 i 
"Refresh 
Signal 
(act iye 
once 
refresh 
is 
acknowledged.) 


state_diagram 
[RAS-, 
NA-] 


state 
[I, 
I]: 
if 
precharge 
then 
[I, 
I] 
else 
if 
(CLK & refresh 
& wait-) 
then 
[0, 
I] 
else 
if 
(CLK & !LMEMCS-& !refresh) 
then 
[0, 
0] 
else 
[I, 
I]; 
state 
[0, 
0]: 
if 
RESET then 
[I, 
I] 
else 
if 
CAS- then 
[0, 
0] 
else 
if 
(CLK & !MEMCS- & HIT- 
, 
CLK & MEMCS- & !ORAl1RDY- , 
CLK & refresh 
& !DRAI1ROY-) then 
[I, 
I] 
else 
[0, 
0]; 


state 
[0, 
I]: 
if 
RESET then 
[I, 
I] 
else 
if 
(elK 
& !refresh) 
then 
[I, 
I] 
else 
[0, 
I]; 


state 
[I, 
0]: 
goto 
[I, 
1]; 


state 
[0, 
0]: 
if 
(!RAS-) 
then 
[0, 
I] 
else 
[0, 
0]; 
state 
[0, 
I]: 
if 
(RESET) 
then 
[0, 
0] 
else 
if 
(RAS-) 
then 
[I, 
I] 
else 
[0, 
I]; 
state 
[I, 
I]: 
goto 
[I, 
0]; 


state 
[I, 
0]: 
if 
(CAS-) 
then 
[0, 
0] 
else 
[I, 
0]; 


state_diagram 
[CAL) 


state 
[IJ: 
if 
(!NA- & CAS-) then 
[0) 
else 
[IJ; 
state 
[0]: 
if 
(RESET) then 
[1] else 
ff 
(!CAS-) then 
[1] else 
[0]; 


state[O, 
OJ: 


stater 
I, 
OJ: 


state[l, 
IJ: 


state[O, 
1J: 


if 
(ClK & refreq) 
then [1, 
0] else 
[0, 
OJ; 


ff 
(RESET) then 
[0,0] 
else 


if 
(ClK & MEMCS-)then 
[1, 
1] else 
[I, 
0]; 
if 
(RESET) then 
[O,OJ else 
ff 
(ClK & NA- & !RAS-) then 
[0, 
I] else 
[I, 
I]; 
if 
(RESET) then 
[0,0] 
el se 
if 
(CLK& !refreq) 
then 
[0, 
0] else 
[0, 
I]; 


M l 
C 
0 
r 
R 
N 
E 
M 
A 
R 
e 
A A 
M E 
S 
A 
f 
S - 
C 
M - - 
M r 
S 
C 
R 
e 
S 
0 
q 
y 


[c, 
x, 
X, 
X, 
X, 
x, 
I, 
x, 
1] .) [I, 
I, 
x, 
I, 
0] ; 


[c, 
x, 
X, 
X, 
x, x, 
I, 
x, 
I] 
.) 
[I, 
I, x, 
I, 
0]; 


[c, 
I, 
I, I, x, 
I, 
I, 
0, 0] .) 
[I, 
I, x, 
I, 
0]; :n. phase 
I 
[c, 
0, I, 
I, 
x, 
I, 
1, 0, 0] .) 
[I, 
1, x, 
I, 
OJ; 
phase Z 
[c, 
I, 
I, 
I, 
x, 
I, 
1, 0, 0] .) 
[I, 
I, 
x, 
I, 
OJ; "TI, 
Read, 
Non-Pipel 
ined 
[c, 
0, 0, 0, x, 
1, I, 
0, 0] .) 
[I, 
I, 
0, 
I, 
0]; 


[c, 
I, 
0, 
0, x, 
I, 
I, 
0, 0] 
-) 
[0, 
0, 0, 
1, 
0]; 
"TZ 
[c, 
0, 
I, 
0, x, 
I, 
I, 
0, 0] 
-) 
[0, 
0, 0, 0, 
0]; 
[c, 
1, 1, 0, x, 
I, 
I, 
0, 0] 
-) 
[0, 
0, 0, 0, 
0]; 
'TZP 
[c, 
0, 0, 0, 
X, 0, I, 
0, 0] 
-) 
[0, 
0, 0, 
1, 
0]; 
Page Hit 
[c, 
1, 0, 0, 0, 0, 
I, 
0, 0] 
-) 
[0, 
0, 
0, 
I, 
OJ; "TZP 
[c, 
0, 0, 0, 0, 
0, 0, 0, OJ -) 
[0, 
0, 
0, 
I, 
0]; 


[c, 
I, 
0, 0, 0, 
0, 0, 0, 0] 
-) 
[0, 
0, 
0, 
I, 
OJ; 'TIP, 
Read, Pipelined 
[c, 
0, 
1, 0, 0, 
I, 
I, 
0, 0] 
-) 
[0, 
0, 
0, 0, 
0]; 


[c, 
I, 
I, 
0, 0, 0, 
I, 
0, 0] 
-) 
[0, 
0, 
0, I, 
OJ; "TZP 
[c, 
0, 0, 0, 0, 0, 0, 0, OJ -) 
[0, 
0, 
0, I, 
0] ; 


[c, 
I, 
0, 0, 0, 0, 0, 0, 0] 
-) 
[0, 
0, 
0, I, 
0] ; "TIP, Write 
[c, 
0, 
I, 
0, 0, 
I, 
I, 
0, 0] 
-) 
[0, 
0, 0, 0, 0] ; 
[c, 
I, 
I, 
0, 0, 
I, 
I, 
0, 0] 
-) 
[0, 
0, 0, 0, 0] ; 'TZP 
[c, 
0, 0, 0, 
0, 
I, 
I, 0, 0] -) 
[0, 0, 0, 0, 0] ; 


[c, 
1, 0, 0, 0, I, 
1, 0, 0] -) 
[0, 0, 0, 0, OJ; 'TZP 
[c, 
0, 0, 0, 0, 0, 0, 0, OJ -) 
[0, 0, 0, 
I, 
OJ; 
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• 


[c, I, 
0, 0, 0, 0, 
0, 0, OJ 


[c, 0, 
I, 
0, 0, 
I, 
I, 
0, OJ 
[c, 1, I, 
0, 0, 0, 
I, 
0, OJ 


[c, 0, 0, 0, 0, 0, 0, 0, OJ 
[c, I, 
0, 0, 
I, 
0, 0, 0, 0) 
[c, 
0, 
I, 
0, 
I, 
I, 
I, 
0, OJ 
[c, I, 
I, 
0, 
1, I, 
I, 
0, 0) 
[c, 0, 
I, 
0, 
1, I, 
I, 
0, 0) 
[c, I, 
I, 
0, 1, I, 
I, 0, OJ 
[c, 0, 
1,0,1, 
1, 1,0, 
OJ 
[c, 1, 1, 0, 
1, I, 
1, 0, OJ 
[c, 
0, 0, 0, 
x, 0, 
I, 
0, OJ 
[c, 
I, 
0, 0, 
I, 
0, 
I, 
0, OJ 
[c, 0, 0, 0, 
1, 0, 0, 0, OJ 
[c, -I, 
0, 0, 
I, 
0, 0, 0, OJ 
[c, 
0, 
I, 
0, 
I, 
I, 
I, 
0, OJ 
[c, 
I, 
I, 
0, 
I, 
I, 
I, 
0, OJ 
[c, 
0, 
I, 
0, 
I, 
I, 
I, 
0, 0) 
[c, 
I, 
I, 
0, 
I, 
I, 
I, 
0, OJ 
[c, 0, 0, 0, 
I, 
0, 
I, 
0, OJ 
[c, I, 
0, 0, 0, 0, 
1, 0, OJ 
[c, 0, 0, 0, 0, 0, 0, 0, OJ 
[c, I, 
0, 0, 0, 0, 0, 0, OJ 
[c, 0, 
1, 0, 
0, 
I, 
1, 0, OJ 
[c, I, 
I, 
0, 
0, 0, 
I, 
0, OJ 


[c, 0, 0, 0, 
0, 0, 0, 0, OJ 
[c, 
I, 
0, 0, 0, 0, 0, 0, OJ 
[c, 
0, 
I, 
0, 0, 
I, 
I, 
0, OJ 
[c, 
I, 
I, 
0, 0, 0, 
1, 0, OJ 


[c, 0, 
I, 
0, 0, 0, 0, 0, OJ 


[c, 1, 1, I, 
0, 0, 0, 0, OJ 


[c, 
0, 0, 0, x, 
1, I, 
0, OJ 
[c, 
I, 
0, 0, x, 
I, 
1, 0, OJ 
[c, 
0, 
I, 
0, x, 
I, 
I, 
0, OJ 
[c, 
I, 
I, 
0, x, 
I, 
I, 
0, OJ 
[c, 
0, 
I, 
0, x, I, 
I, 
0, OJ 
[c, 
I, 
I, 
0, x, 
I, 
1, 0, OJ 


[c, 
0, 0, 0, x, 0, 
I, 
0, OJ 
[c, I, 
0, 0, 0, 0, 
I, 
0, OJ 
[c, 0, 0, 0, 0, 0, 0, 0, OJ 
[c, I, 
0, 0, 
0, 0, 0, 0, OJ 
[c, 0, 
1, 0, 0, 
I, 
1, 0, OJ 


[c, I, 
1, 0, 0, 0, 
I, 
0, OJ 
[c, 0, 0, 0, 0, 0, 0, 0, OJ 
[c, I, 
0, 0, 0, 0, 0, 0, OJ 
[c, 
0, 
I, 
0, 0, 
I, 
I, 
1, OJ 
[c, I, 
1, 0, 0, 0, 
I, 
I, 
OJ 
[c, 0, 0, 
0, 0, 
0, 0, 
I, 
0) 


[c, I, 
0, 
0, 0, 
0, 0, 
1, OJ 
[c, 
0, 
I, 
0, 0, 
I, 
1, I, 
OJ 
[c, I, 
I, 
0, 0, 
I, 
1, I, 
OJ 
[c, 
0, 
I, 
0, 0, 
I, 
I, 
I, 
0] 
[c, 
I, 
I, 
0, 0, 
I, 
1, I, 
OJ 


[c, 0, 
I, 
0, 0, 
1, I, 
0, OJ 


-) 
[0, 0, 0, 
I, 
OJ 


-) 
[0, 0, 0, 0, OJ 
-) 
[0, 0, 0, 
I, 
0) 
-) 
[0, 0, 0, 
I, 
0) 
-) 
[I, 
I, 
0, I, 
0) 
-) [I, 
1, I, 1, 0) 
-) 
[I, 
I, 
I, 
I, 
0) 
'T2 


-) 
[I, 
1, 0, 
I, 
OJ 
-) 
[0, 0, 0, 
I, 
OJ 
'T2 
-) 
[0, 
0, 0, 0, OJ 
-) 
[0, 
0, 0, 0, OJ 
-) 
[0, 
0, 0, 
1, OJ 


-) 
[I, 
I, 
0, 
I, 
OJ 


-) 
[I, 
I, 
I, 
I, 
OJ 
-) 
[I, 
I, 
I, 
1, OJ 
-) 
[1, 
I, 
0, 
I, 
OJ 
-) 
[0, 
0, 0, 
I, 
OJ 
"T2 


-) 
[0, 
0, 0, 0, OJ 
-) 
[0, 
0, 0, 0, OJ 
-) 
[0, 
0, 0, 
I, 
OJ 


-) 
[0, 0, 0, 
I, 
OJ 


-) 
[0, 0, 0, 
I, 
OJ 
-) 
[0, 0, 0, 
1, OJ 


-) 
[0, 
0, 0, 0, OJ 
-) 
[0, 0, 0, 
I, 
OJ 


-) 
[0, 0, 0, 
1, OJ 


-) 
[0, 0, 0, 
I, 
OJ 


-) 
[0, 
0, 0, 0, OJ 
-) 
[0, 
0, 0, 
1, OJ 


-) 
[0, 
0, 0, 
1, OJ 


-) 
[I, 
I, 
0, 
I, 
OJ 
'TI 


-) [I, 
I, 
I, 
I, OJ 


-) 
[I, 
I, 
I, 
I, 
OJ 
'T2 
-) 
[I, 
I, 
0, 
I, 
OJ 
-) 
[0, 
0, 0, 
I, 
OJ 
'T2 


-) 
[0, 
0, 0, 0, OJ 


-) 
[0, 
0, 0, 0, OJ 


-) 
[0, 0, 0, 
1, OJ 
-) 
[0, 0, 0, 
I, 
OJ 
-) 
[0, 0, 0, 
1, OJ 


-) 
[0, 
0, 0, I, 
OJ 


-) 
[0, 
0, 0, 0, OJ 


-) 
[0, 0, 0, 
1, OJ 


-) 
[0, 
0, 0, 
I, 
OJ 
-) 
[0, 
0, 0, 
1, OJ 
-> [0, 
0, 0, 0, 0) 


-> [0, 
0, 0, 
I, 
I) 
-> [0, 0, 0, 
I, 
Ij 


-) 
[I, 
I, 
0, 
1, IJ 
-) 
[I, 
1, I, 
1, I] 


-> [I, 
1, I, 
1, I] 
"T2 
-) 
[I, 
I, 
0, 
1, I] 
-) 
[0, 
I, 
0, 
I, 
1] 
"T2 
-> [0, 
I, 
0, 
1, Ij 


"T2P 
Page 
Mi 55 


"TIP 


[c, I, 
I, 
0, 0, 
I, 
I, 
0, OJ -> [0, 
I, 
0, 
I, 
OJ; "T2 
[c, 0, 
I, 
0, 0, 
I, 
I, 
0, 0) -) 
[0, 
I, 
0, 
I, 
OJ; 
[c, I, 
I, 
0, 0, 
I, 
I, 
0, OJ -> [I, 
I, 
0, 
I, 
0); 
'T2, 
Pend1n9 Read 
[c, 0, 
1, 0, 0, 
1, I, 
0, 0] -> [1, 
I, 
1, 1, OJ; 
[c, I, 
I, 
0, 0, 
I, 
1, 0, OJ -> [I, 
1, I, 
I, 
OJ; "T2 
[c, 0, 
I, 
0, 0, 
I, 
1, 0, OJ -) 
[I, 
I, 
0, 
I, 
OJ; 
[c, I, 
I, 
0, 0, 
I, 
I, 
0, OJ -) 
[0, 0, 0, 
I, 
0); 
'T2 
[c, 0, 
1, 0, 0, 
I, 
I, 
0, OJ -) 
[0, 
0, 0, 0, 0); 


[c, I, 
I, 
0, 0, 
I, 
I, 
0, OJ -> [0, 
0, 0, 0, 0); 
'T2P 
[c, 0, 0, 
0, 0, 0, 
I, 
0, OJ -> [0, 
0, 0, 
1, 0); 
[c, I, 
0, 0, 0, 0, 
I, 
0, 0) -> [0, 0, 0, 
I, 
0); 
'T2P 
[c, 0, 0, 
0, 0, 0, 0, 0, 0) 
-> [0, 0, 0, 
I, 
OJ; 
[c, I, 
0, 
0, 0, 0, 0, 0, 0) -) 
[0, 0, 0, 
1, OJ; 'TIP 


end PAGE)!OOE_ORAM_CTRL_I; 
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Devi ce 
PAGEl 


'RAS- 
:. 
(NA- 
& 
!RAS- 
& 
!RESET 
& refresh 
# 
DRAMRDY- 
& 
!HIT- 
& 
!NA- 
& 
!RAS- 
& 
!RESET 
# 
DRAMRDY- 
& MEMCS- 
& 
!NA- 
& 
!RAS- 
& 
!RESET 
# 
!HIT- 
& 
!MEMCS- 
& 
!NA- 
& 
!RAS- 
& 
!RESET 
& 
!refresh 
# 
!ClK 
& 
!RAS- 
& 
!RESET 
# 
CAS- 
& 
! NA- 
& 
! RAS- 
& 
! RESET 
# 
ClK 
& 
!lMEMCS- 
& NA- 
& 
RAS- 
& 
!precharge 
& 
!refresh 


# 
ClK 
& NA- 
& RAS- 
& 
! precharge 
& 
refresh 
& wa it-) 
; 


!NA- 
:. 
(DRAMRDY- 
& 
!HIT- 
& 
!NA- 
& 
!RAS- 
& 
!RESET 
# 
DRAMRDY- 
& MEMCS- 
& 
!NA- 
& 
!RAS- 
& 
!RESET 


# 
!HIT- 
& 
!MEMCS- 
& 
'NA- 
& 
!RAS- 
& 
!RESET 
& 
!refresh 


# 
!ClK 
& 
'NA- 
& 
!RAS- 
& 
!RESET 


# 
CAS- 
& 
! NA- 
& 
! RAS- 
& 
! RESET 


# 
ClK 
& 
! lMEMCS- 
& NA- 
& 
RAS- 
& 
! precharge 
& 
! refresh); 


!precharge 
:. 
(CAS- 
& 
!a 
# 
!RAS- 
& 
!precharge 
# 
RESET & 
! precharge 
# 
!a 
& 
!precharge); 


!a 
:. 
(precharge 
# 
RESET 
& a 
# 
RAS- 
& 
!a); 


!CAl 
:. 
(!CAl 
& CAS- 
& 
!RESET 
# 
CAl 
& CAS- 
& 
!NA-); 


!refresh 
:- 
(!refresh 
& wait- 
# 
ClK 
& NA- 
& 
!RAS- 
& wait- 
# 
RESET 
& 
refresh 
# 
!refreq 
& 
!refresh 
# 
!ClK 
& 
!refresh); 


(ClK 
& 
!refreq 
& 
!refresh 


I 
!MEMCS- 
& 
!wait- 


# 
!ClK 
& 
!wait- 
# 
RESET 


# 
!refresh 
& 
!wait-);. 
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CLK2 


CLK 


MEMCS- 


LMEMCS- 


HIT- 


CAS- 


DRAM RDY- 


refreq 


RESET 


unused 


refresh 


CAL 


walt- 


a 


precharge 


NA- 


RAS- 


_RAS-_E 


• 
• 
PAGE 
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CONTROLLER· 
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2. 
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PAGE_HODE_DRAH_CTRL_2 


Device 
PAGEZ 


lCAS- 
;- 
(CAS- 
& ClK 
& DRAHRDY- 
& 
!RESET 
& 
!a 
& 
!b 


, 
!CACHE 
& DRAHRDY- 
& 
!RESET 
& a 
& 
!b 
& 
!lwr 
, 
DRAHRDY- 
& 
!RAS- 
& 
!RESET 
& 
a & 
!b 
& 
!lwr 
, 
!CAS- 
& 
!CLK 
& 
!RESET 
& a 
& b 
, 
! CAS- 
& DRAHRDY- 
& 
! RESET 
& a 
, 
CAS- 
& 
CLK 
& DRAHRDY- 
& 
!MUXOE- 
& 
!RAS- 
& 
a 
& 
b); 


!DRAHRDY- 
;- 
(CAS- 
& 
CLK 
& DRAHRDY- 
& 
!RESET 
& 
!a 
& 
!b 
, 
!CAS- 
& 
!CLK 
& 
lDRAHRDY- 
& 
!RESET 
& 
a 
& 
b 
, 
! CAS- 
& CLK 
& DRAHRDY- 
& 
! RESET 
& a 
& 
! b 


, 
!CAS- 
& CLK 
& DRAHRDY- 
& 
!RESET 
& 
a 
& lwr 


, 
!CACHE 
& 
!CAS- 
& CLK 
& DRAHRDY- 
& 
!RESET 
& a); 


!b 
;- 
(CAS- 
& 
!CLK 
& 
DRAHRDY- 
& 
!RESET 
& 
!a 
& 
!b 
, 
CAS- 
& 
DRAHRDY- 
& 
RAS- 
& 
!RESET 
& 
a 
& 
!b 


, 
!CACHE 
& CAS- 
& DRAHRDY- 
& 
!RESET 
& 
a 
& 
!b 
, 
CAS- 
& DRAHRDY- 
& 
!RESET 
& 
a & 
!b 
& lwr 
, 
!CAS- 
& CLK 
& 
!DRAHRDY- 
& 
!MEMCS- 
& 
!RAS- 
& 
lRESET 
& 
a 
& 
b 
& 
!refresh 
, 
!CAS- 
& 
!CLK 
& DRAHRDY- 
& 
!RESET 
& a 
& 
!b 
, 
CACHE 
& 
!CAS- 
& CLK 
& 
DRAMRDY- 
& 
!RESET 
& 
a 
& 
b 
& 
!l.r); 


!MUXOE- 
;- 
(!MUXOE- 
& 
!REF- 


, 
REF- 
& 
! r 
, 
HUXOE- 
& RESET 
, 
DRAHRDY- 
& 
!HUXOE- 
& 
! RAS- 
, 
!MEMCS- 
& 
!MUXOE- 
& RAS- 
, 
!MUXOE- 
& 
! refresh 
, 
!CLK 
& 
!MUXOE-); 


!REF- 
- 
(MUXOE- 
& 
!RESET 
& 
r); 


!r 
;- 
(MUXOE- 
& 
!REF- 
& 
!RESET 
& 
!r 


, 
CLK 
& MUXOE- 
& 
!RAS- 
& 
!REF- 
& 
!RESET); 
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CLK2 


CLK 


RAS- 


IoIEIoICS- 


HIT- 


CACHE 


Iwr 


refresh 


REF- 


IoIUXOE- 


DRAIoIRDY- 


CAS- 


_CAS-_E 


module 
PAGE_HODE_DRAltCTRL_2 flag' 
-r3' 


title 
'PAGE MODEDRAMCONTROLLER- PAL 2, 
INTEL CORPORATION' 


Inputs 


CLK2 
pin 
I; 
CLK 
pin 
2; 
RAS- 
pin 
3; 
MEMCS- pin 
4; 
HIT- 
pin 
5; 
CACHE 
pin 
6; 
1wr 
pin 
7; 
refresh 
pin 
8; 
RESET 
pin 
9; 


" Outputs 


CAS- 
pin 
12; 
DRAMRDV- 
pin 
a 
pin 
14; 
b 
pin 
IS; 
unused 
pin 
16; 
MUXOE- pin 
17; 
REF- 
pin 
18; 
r 
pin 
19; 


estate 
• 
[CAS-, 
idle 
• 
[ 
I, 
start 
• 
[ 
0, 
wait 
• 
[ 
0, 
~~~~~~ 
V;I [ ~, [ 
Inactive 
- 
inactive 
2 
• 
[ 
Inactive 
- 
illegal_a 
ille9al_b 
illegal 
c 
ille9aCd 
i llegal_e 
illegal 
f 
illega 
l=g 
illegal_h 
illegal 
i 
111egaO 


"80386 
CLK2 
"Processor 
Clock 
"Row Address 
Strobe 
"Memory ChipSe 
1ect 
"DRAMPage Hit 
Signal 
(unused) 
"Hi when 385 
is 
used; 
otherwise, 
Low 
"Latched 
Write/Read 
"Refresh 
Signal 
"System 
Reset 


"Column Address 
Strobe 
I~; 
"DRAMReady 


DRAMRDV-,a, 
I 
,I, 
I 
,I, 


1 
,It 
o 
,I, 
I 
I 


• 
[0,0,0,0]; 
• 
[0,0,0, 
I]; 
• 
[0,0, I,D); 
• 
[0,1,0,0); 
• 
[0,1,0, 
I); 
• 
[1,0,0,1); 
• 
[1,0,1,0); 
• 
[1,0,1,1]; 


• 
[1,1,0,1]; 
• 
[1,0,0,0]; 


• 
[MUXOE-, REF-. 
,I 
,I]; 


b]; 
I]; 
"Idle 
I); 
"CAS- Active 
0]; 
"CAS- Active, 
Wait 
State 
I]; 
"CAS- and DRAMRDV-Active 
,I. 
0); 
"Page 
Hit, 
CAS- 
and 
DRAMRDV- 
• 


disabled 
1 
disabled-2 
disabled-3 
disabled-4 
111ega1_, 
111ega1y 
illegal_x 


· (· (· ( 
• 
( 
1 
, 


• 
(O,O,Oj: 


• 
(0,0,1]: 
• 
[0,1,0]: 


1] 
"Multiplexer 
Outputs 
Disabled 
1] 
"Refresh 
Address Enabled 
0] 
"Wait for RAS' 


0] 
"Refresh 
Address Disabled 


state 
idle: 
If 
(ClK l 
lRAS- l 
!MUXOE-)then start 
else 
idle: 
state 
start: 
if 
RESETthen idle 
else 
if 
(ClK l 
lCACHE, ClK l 1wr) then active 
else 
if ClK then wait else 
start: 


state 
wait: 
if RESETthen 
idle 
else 
if 
ClK then acti ve else 
wait: 


state 
active: 
if 
RESETthen idle 
else 
if 
(ClK l 
1ME"CS-l RAS- , 
ClK l "E"CS- , 
ClK l refresh) 
then idle 
else 
if 
(ClK l 
!"E"CS- l 
!RAS-) then 
inactive_l 
ehe 
acthe; 
state 
inactive 
1: if 
RESETthen 
idle 
else 
if 
(ClK l 
!RAS- l 1wr) then 
inactive 
2 else 
if 
(!RAS- l 
!lwr l CACHE)then stareelse 
if 
(!lwr 
l 
!CACHE)then wait else 
inactive 
1; 


state 
inactive 
2: if 
RESETthen 
idle 
else 
if ClK then active 
else 
inactive 
2: 
state 
illegal_a: 
goto 
idle: 
- 


state 
illegal 
b: 
goto 
idle: 


state 
illega1=c: 
goto 
idle: 


state 
illega1_d: 
goto idle: 


state 
illega1_e: 
goto idle: 


state 
illegal 
f: 
goto 
idle: 
state 
il1ega1-g: 
goto 
idle: 
state 
il1egal=h: 
goto 
idle: 
state 
il1ega1_i: 
goto 
idle: 
state 
il1ega1_J: 
goto 
idle: 


state_diagram 
muxstate 


state 
enabled: 
if 
(ClK l refresh 
l RAS- l "E"CS- , 
ClK l refresh 
l 
!RAS- l 
!ORAHROY-)then 
disabled 
1 else 
enabled: 
state 
disabled 
1: if 
(RESET) then enabled 
else 
disabled 
2: 


state 
disab1ed-2: 
if 
(RESET) then enabled 
else 
- 


if 
(ClK l 
!RAS-) then disabled 
3 else 
disabled 
2: 
state 
disab1ed_3: 
if 
(RESET) then enabled 
else 
disabled 
4: 
- 
state 
disabled 
4: goto enabled: 
- 


state 
illegal,: 
goto enabled: 


state 
illega1y: 
goto enabled: 
state 
illegal_x: 
goto enabled: 


C 
M 
1 
H 
r 
R 
C 
L 
E 
w 
I 
e 
E 
A 
K 
M 
r 
T 
f 
S 
C 


C 
- 
- 
r 
E 
H 


S 
e 
T 
E 
s 
h 


o 
M 
R 
U 
A 
X 
M 
0 
- 
R 
E 
o 
y 


-> [I, 
I, 0, I]; 
"Cache 
disabled 
-> [I, 
I, 0, I]; 
-> [I, 
I, 0, I]; 
"T1 
-> [I, 
I, 0, I]; 


-> [1, I, 0, I]; 
"TI 
-> [I, 
I, 0, I]; 


-> [I, 
I, 0, I]; 
"T2 
-> [0, I, 0, I]; 
-> 
[0, 
I, 0, I]; 
"T2P 
-> [0, 0, 0, I]; 
-> 
[0, 
0, 
0, 1]; 'T2P 


-> [I, 
1, 0, 1]; 


-> 
[0, 
I, 0, I]; 
'TIP 


-> 
[0, 
0, 0, 1]; 
-> 
[0, 
0, 0, I]; 
'T2P 
-> [1, I, 0, I]; 
-> [1, I, 0, I]; 
'TIP 


-> [I, 
I, 0, I]; 
-> [I, 
I, 0, I]; 
'T2P 


-> 
[0, 
0, 0, I]; 
-> [0, 0, 0, I]; 
"T2p 
-> [I, 
I, 0, I]; 


-> 
[0, 
I, 0, I]; 
"TIP 
-> [0, 0, 0, I]; 
-> [0, 0, 0, I]; 
"T2P 


-> [I, 
I, 0, I]; 


-> [I, 
I, 0, 1]; "TIP 


-> [I, 
I, 0, I]; 


-> [I, 
I, 0, I]; 
',T2 
-> [I, 
I, 0, I]; 
-> [I, 
I, 0, I]; 
'T2 
-> [0, 1, 0, I]; 
-> [0, I, 0, I]; 
'T2P 
-> [0, 0, 0, I]; 
-> [0, 0, 0, I]; 
'T2P 


-> [I, 
I, 0, I]; 


-> [I, 
I, 0, 1]; 'TIP 


-> [1, I, 0, I]; 


APr!:"'? u, 
I, 
I, 
0, 
0, 
0, 
OJ 
[c, I, 0, I, 0, 0, 0, 0, 0] 
[c, 0, 0, I, 0, 0, 0, 0, 0] 
[c, I, 0, 0, 0, 0, 0, 0, 0] 
[c, 0, I, 0, 0, 0, 0, 0, 0] 
[c, 1, I, 0, 0, 0, 0, 0, 0) 
[c, 0, 0, 0, 0, 0, 0, 0, 0) 
[c, I, 0, 0, 0, 0, 0, 0, 0) 
[c, 0, I, 0, 0, 0, 0, 0, 0) 
[c, I, 
I, 0, 0, 0, 0, 0, 0) 
[c, 0, I, 0, 0, 0, 0, 0, OJ 
[c, 1, I, 0, 0, 0, 0, 0, OJ 
[c, 
0, 0, 0, x, 
I, 0, 0, OJ 
[c, 
I, 0, 0, x, 
I, 0, 0, OJ 
[c, 
0, I, 
I, x, 
I, 0, 0, 0) 
[c, 
I, 
I, 
I, 
x, I, 0, 0, OJ 
[c, 
0, I, 
I, 
x, 0, 0, 0, OJ 
[c, 
I, 
I, 
I, x, 0, 0, 0, OJ 
[c, 
0, 0, I, 
x, 0, 0, 0, OJ 
[c, I, 0, I, 0, 0, 0, 0, OJ 
[c, 0, 0, 1, 0, 0, 0, 0, OJ 
[c, I, 0, 0, 0, 0, 0, 0, OJ 
[c, 0, I, 0, 0, 0, 0, 0, OJ 
[c, I, 
I, 0, 0, 0, 0, 0, OJ 
[c, 0, 0, 0, 0, 0, 0, 0, OJ 
[c, I, 0, 0, 0, 0, 0, 0, OJ 
[c, 0, I, 0, 0, 0, 0, 0, OJ 
[c, I, 
I, 0, 0, 0, 0, 0, OJ 
[c, 0, 0, 0, 0, 0, 0, 0, 0] 
[c, I, 0, 0, 0, 0, I, 0, OJ 
[c, 0, I, 0, 0, I, 
I, 0, OJ 
[c, I, I, 0, 0, I, 
1,0,0] 
[c, 0, I, 0, 0, I, 
I, 0, 0] 
[c, 1, I, 0, 0, I, 
I, 0, 0] 
[c, 0, 1, 0, 0, 0, I, 0, 0] 
[c, 1, I, 0, 0, 0, I, 0, 0] 
[c, 0, I, 0, 0, 0, I, 0, 0] 
[c, I, 
I, 0, 0, 0, 0, 0, 0] 
[c, 0, I, 0, 0, I, 0, 0, 0) 
[c, I, I, 0, 0, I, 0, 0, 0) 
[c, 0, I, 0, 0, I, 0, 0, 0) 
[c, I, 
I, 0, 0, I, 0, 0, OJ 
[c, 0, I, 0, 0, 0, 0, 0, OJ 
[c, I, 
I, 0, 0, 0, 0, 0, 0] 
[c, 0, 0, 0, 0, 0, 0, 0, 0) 
[c, I, 0, 0, 0, 0, 0, 0, 0) 
[c, 0, 0, 0, 0, 0, 0, 0, 0] 
[c, I, 0, 0, 0, 0, 0, 0, 0) 
[c, 0, I, 0, 0, 0, 0, 0, 0] 
[c, I, I, 0, 0, 0, 0, 0, 0] 
[c, 0, 0, 0, 0, 0, 0, 0, 0] 
[c, 
x, x, 0, x, x, x, 
I, 
I] 


-, 
[0, I, 0, I) 
'TZP 
-, 
[0, 0, 0, I) 
-, 
[0, 0, 0, I) 
'TZP 
-, 
[I, 
I, 0, I] 


-, 
[0, I, 0, I) 
'TIP 
-, 
[0, 0, 0, I) 
-, 
[0, 0, 0, I) 
'TZP 
-, 
[I, 
I, 0, I) 
-, 
[0, I, 0, I) 
'TIP 
-, 
[0, 0, 0, I) 


-, 
[0, 0, 0, I) 
"TZI 
-, 
[I, 
I, 0, I) 
-, 
[I, 
I, 0, I) 
'TI 
-, 
[I, 
I, 0, I) 


., 
[I, 
I, 0, I) 
'TZ 
-, 
[I, 
I, 0, I) 
-, 
[I, 
1, a. I] 
'T2 
-, 
[0, I, 0, I] 
-, 
[0, 1, 0, I] 
'T2P 
-, 
[0, 0, 0, I] 


-, 
[0, 0, 0, I) 
'T2P 
-, 
[I, 
I, 0, I] 
-, 
[0, I, 0, I] 
'TIP 
-, 
[0, 0, 0, I] 
-, 
[0, 0, 0, lj 
'T2P 
-> [I, 
I, 0, I] 
-> [0, 1, 0, I] 
'TIP 
.> [0, 0, 0, I] 
., 
[0, 0, 0, I) 
'T2P 
., 
[1, I, I, I] 
-> [I, 
I, 
I, OJ 
'TIP 
-> [I, 
I, 
I, 0] 
-> [I, 
I, 
I, 0) 
'TZ 
-> [I, 
I, 
I, OJ 
-, 
[I, 
I, I, 0) 
'T2 
-, 
[I, 
1, I, OJ 


-, 
[I, 
I, 
I, I) 
'TZ 
-> [I, 
I, 0, I) 
-, 
[I, 
I, 0, I) 
'TZ 
., 
[I, 
I, 0, I] 


-> [I, 
I, 0, I) 
'T2 
-> [I, 
I, 0, I) 
-, 
[1, 1, 0, 
I) 
'TZ 
-> [0, I, 0, I) 
-, 
[0, I, 0, I] 
'TZP 
-, 
[0, 0, 0, 
1] 


-> [0, 0, 0, I] 
'T2P 
-, 
[I, 
I, 0, I] 
-, 
[0, I, 0, I] 
'TIP 


., 
[0, 0, 0, I] 
-, 
[0, 0, 0, I] 
'TZP 
-> [I, 
I, 0, I] 
"Cache 
eanbled 


intel~ 


[et 
X, 
X, 
0, 
X, 
X, 
X, 
1, I] 
-> [I, 
I, 0, I) 
[c, 
0, I, 
0, x, I, 0, 0, I) 
.> [I, 
1, 0, I) 
"n 
[e, 
I, 
1. 0, x, 1, 0, 0, I] 
-> [I, 
1, 0, I) 


[c, 
0, 0, 0, x, I, 0, 0, I] 
.> [I, 
I, 0, I] 
"TI, Read 
[c, 
I, 0, 0, x, I, 0, 0, I] 
-> [I, 
I, 0, I] 
[e, 
0, 
1, 0, x, 0, 0, 0, I] 
-> [I, 
1, 0, I] 
"T2 


[e, 
1, 1, 0, x, 0, 0, 0, I] 
-> [0, 
1, 0, I] 
[c, 
0, 0, 0, x, 0, 0, 0, I] 
-> [0, 
I, 0, I] 
"T2P 
[c, 
I, 0, 0, 0, 0, 0, 0, I] 
-> [0, 
I, 0, I] 
[c, 
0, 0, 0, 0, 0, 0, 0, I] 
-> [0, 
I, 0, I] 
"T2P 
[c, 
I, 0, 0, 0, 0, 0, 0, I] 
-> [0, 0, 0, I] 
[e, 
0, 
0, 
0, 
0, 
0, 
0, 
0, 
I] 
-> [0, 0, 0, I] 
"T2P 
[c, 
I, 0, 0, 0, 0, 0, 0, 1] -> [I, 
I, 0, I] 
[e, 
0, 
1, 0, a, 0, 0, 0, I] 
.> [0, I, 0, I] 
"TIP, Read 
[c, 
I, 
I, 0, 0, 0, 0, 0, 
1] -> [0, I, 0, I] 
[c, 
0, 0, 0, 0, 0, 0, 0, I] 
-> [0, 
I, 0, I] 
"T2P 
[c, 
I, 0, 0, 0, 0, 0, 0, 1] -> [0, 0, 0, I] 


[c, 
0, 0, 0, 0, 0, 0, 0, I] 
-> [0, 0, 0, I] 
"T2P 


[c, 
I, 0, 0, 0, 0, 0, 0, I] 
-> [I, 
I, 0, I] 


[c, 
0, I, 
I, 0, 0, 0, 0, I] 
-> [I, 
I, 0, I] 
"TIP, Write 
[c, 
I, 
I, 
I, 0, 0, 0, 0, I] 
-> [I, 
I, 0, I] 
[c, 
0, 0, I, 0, 0, 0, 0, I] 
-> [I, 
I, 0, I] 
"T2P 
[c, 
I, 
0, I, 0, 0, 0, 0, I] 
-> [0, 0, 0, I] 
[c, 
0, 0, I, 0, 0, 0, 0, I] 
-> [0, 0, 0, I] 
"T2p 
[c, 
I, 0, 0, 0, 0, 0, 0, 1] -> [I, 
I, 0, I] 


end PAGE_HODE_DRAM_CTRL_2; 
'2 


PAL Codes: DRAM 2 (Continued) 
• 


Ap·442 
.-n+_I 
'e-~ 


module 
PAGE_HOOE_ORAM_CTRL_3flag' 
-r3' 


title 
'PAGE MODEDRAMCONTROLLER- PAL 3, 
INTEL CORPORATION' 


Inputs 


CLK2 
pi n 
CLK 
pi n 
AOS- 
pin 
MEMCS- pin 
WR 
REAOY- pin 
ORHROY-pin 
unusedl 
pin 
RESET 
pin 


Outputs 


T2X- 
pin 
12; 
TlP- 
pin 
13; 
WE- 
pin 
14; 
OEN- 
pin 
15; 
DTR 
pin 
16; 
lwr 
pin 
17; 
mreq 
pin 
18; 
unused? pin 
19; 


1; 
"80386 
CLK2 
2; 
"Processor 
Clock 
3; 
"Address 
Strobe 
4; 
"Memory Chip 
Select 
pin 
5; 
"Write/Read 
6; 
"System 
Ready 
7; 
"DRAMReady 
8; 
9; 
"System Reset 


"active 
during 
T2, 
T2p, 
and T2i 
"active 
during 
TIp 
"DRAMWrite 
Enable 
"DRAM Data 
Bus Transceiver 
Enable 
"DRAMData 
Bus Transceiver 
R/WI Direction 
signal 
"Latched 
Write/Read 
:latched 
Memory Chip 
Select 


state_diagram 
[T2X-, 
TlP-) 


state 
[1, 
1): 
if 
(CLK & !AOS-) then 
[0, 
I) 
else 
[1, 
1); 
state 
[0, 
I): 
if 
RESET then 
[1, 
I) 
else 
if 
(CLK & !AOS- & !READY-) then 
[1, 
0) else 
if 
(CLK & AOS- & !REAOY-) then 
[I, 
1] else 
[0, 
I); 
state 
[I, 
0): 
if 
RESET then 
[1, 
I] 
else 
i~ 
(CLK) then 
[0, 
1) else 
[I, 
0); 


state 
[0,0]: 
goto 
[1,1]; 


state_diagram 
[WE-) 


state 
[I): 
if 
(CLK & !MEMCS-& WR& T2X- , 
lwr 
& ITlP-) 
then 
[0) 
else 
[I); 
state 
[0): 
if 
(RESET) then 
[I) 
else 
if 
(CLK & !REAOY-) then 
[I] 
else 
[0); 


state_diagram 
[OEN-) 


if 
(CLK & !MEMCS-& !WR & T2X- , 
mreq 
& !T2X- , 
CLK & mreq 
& 
!TlP-) 
then 
[0) 
else 
[1); 


state 
(0): 
if 
RESET then 
[I) 
else 


if 
(ClK 
& 
!REAOY-) 
then 
[I) 
else 
[0): 


state_diagram 
[OTR) 


state 
[1): 
if 
(ClK 
& 
!MEMCS- & WR & T2X- 
, 


lwr 
& IT1P-) 
then 
(0) 
else 
[I): 
state 
[0): 
if 
(RESET) 
then 
[1) 
else 


if 
(!ClK 
& OEN- & 
!lwr) 
then 
[I) 
else 
[0): 


state_diagram 
[lwr) 


state 
[0): 
if 
(ClK 
& !MEMCS- & WR) then 
(I) 
else 
[0): 
state 
[1): 
if 
(RESET) 
then 
[0) 
else 
if 
(IREADY- 
& MEMCS- , 


lREADY- l 
IWR) then 
[0) 
else 
[I): 


state_diagram 
[mreq) 


state 
(0): 
if 
(ClK 
l 
lMEMCS-) then 
[I) 
else 
(0): 


state 
[1): 
if 
RESET then 
[0) 
else 
if 
(!REAOY- 
l 
MEMCS-) then 
(0) 
else 
[I): 


-) [I, 
I, 
I, 0, I, I, x) : 


-) [I, 
I, 
I, 0, I, I, 0) : 


.) [I, I, 
I, 0, I, I, 0); 


-) [I, 
I, I, 0, I, I, 0) : "Ii 
-) [I, I, I, 0, I, 
I, 0) : 
-) [I, 
I, 
I, 0, I, 
I, 0) : "TI 
-) [0, I, 0, 0, I, 
I, I): 


-) 
[0, I, 0, 0, I, I, I): "T2 


-) [0, I, 0, 0, I, I, I): 
-) [0, I, 0, 0, I, I, I): 
"T2 


-) [0, I, 0, 0, I, I, 1); 
-) [0, I, 0, 0, I, I, 1J: 
"T2P 


-) [I, 
0, I, 0, I, I, 1J: 
.) [I, 
0, I, 0, I, I, 11; "TIP 


.) 
[0, I, 0, 0, I, I, 11; 


-) [0, I, 0, 0, I, I, 1]: 
'T1P 
-) (I, 0, I, 
I, I, I, 1); 


-) [I, 
0, I, 
I, 0, 0, I): 'TIP 


-) [0, I, 0, I, 0, 0, 1]; 


24072S-AS 


PAL Codes: DRAM 3 (Continued) 


[e, 
x, 


[e, 
x, 


[e, I, 
[e, 0, 
[e, I, 
[e, 0, 
[e, I, 
[e, 0, 
[e, I, 
[e, 0, 
[e, I, 
[e, 0, 
[e, I, 
[e, 0, 
[e, I, 
[e, 
0, 
[e, I, 
[e, 0, 
[e, I, 


x, 
x, 
x, 
x, 
1] 


x, 
x, 
x, 
x, 
1] 
I, 
x, 
I, 
I, 
0) 
I, 
x, I, 
I, 0] 


I, x, 
I, 
I, 0) 


0, 0, 0, I, 0) 
0, 0, 0, I, 0) 
I, 0, I, 
I, 0) 


I, 0, I, 
I, 0) 
0, 0, 0, I, 0] 
0, 
0, 
0, 
I, 
0) 
0, 0, 0, 0, 0) 
0, 0, 0, 0, 0) 
I, 0, I, 
I, 0) 
I, 0, I, 
I, 0) 
0, I, 0, 0, 0) 
0, I, 0, 0, 0) 
I, I, 
I, 
I, 0) 
I, I, I, I, 0) 


• 


[e, 0, 0, 0, 0, I, OJ .) 
LU, !, u, 
J t 
V, 
u, 
1J 
! __.I- 
I 
[e, I, a, 0, 0, I, 0] .) [a, I, 0, I, 0, 0, I] 
[e, 0, 0, 0, 0, 0, 0] .) [a, I, 0, 0, 0, 0, I] 
'TZP 
[e, I, 
0, 0, 0, 0, 0] .) 
[I, 
0, I, 0, I, 0, I] 
[e, 0, I, 0, I, 
I, 
0] .) 
[I, 
0, I, 0, I, 
I, 
I] 
'TIP 
[e, I, 
I, 
0, I, 
I, 
0] .) [a, I, 0, 0, I, 
I, 
I] 
[e, 0, 0, 0, 0, 0, 0] .) [a, 1, 0, 0, 
I, 
I, 
1] 
'TZP 
[e, I, 0, 0, 0, 0, 0] .) 
[I, 
0, I, 0, I, 
I, 
1] 
[e, 0, I, 0, I, 
I, 0] .) 
[I, 
0, I, 0, I, 
I, 
I] 
'Tip 
[e, I, 
I, 
0, I, 
I, 0] .) [a, I, 0, 0, I, 
I, 
I] 
[e, 0, I, 0, I, 
I, 0] .) [a, I, 0, 0, I, 
I, 
I] 
'TZ 
[e, I, 
I, 
0, I, 
I, 0] .) [a, I, 0, 0, I, 
I, 
I] 
[e, 0, I, 
0, I, 
I, 0] .) [a, I, 0, 0, I, 
I, 
I] 
'TZ 
[e, I, 
I, 
0, I, 
I, 0] .) [a, I, 0, 0, I, 
I, 
I] 
[e, 0, 0, I, 
0, I, 0] .) [a, I, 0, 0, I, 
I, 
I] 
'TZP 
[e, I, 
0, I, 
0, I, 
0] .) [a, I, 0, I, 
I, 
I, 
I] 
[e, 0, 0, I, 
0, 0, 0] .) [a, I, 0, I, 
I, 
I, 
I] 
'TZp 
[e, I, 0, I, 
0, 0, 0] .) 
[I, 
0, I, 
I, 
I, 
I, 
I] 
[e, 0, I, 
I, 
I, 
I, 
0] .) 
[I, 
0, 
1t 1, 0, 0, I] 
'TIP 
[e, I, 
I, 
I, 
I, 
I, 0] .) [a, 1, 0, 
I, 0, 0, I] 
[e, 0, I, 
I, 
I, 
I, 0] -) [0, I, 
0, I, 0, 0, I] 
'TZ 


[e, I, 
I, 
I, 
I, 
I, 0] -) [a, 1, 0, L 0, 0, 1] 
[e, 0, 0, 0, 0, I, 0] -) [a, 1,0,1,0,0, 
I] 
'TZP 
[e, I, 0, 0, 0, I, 0] -) [a, 1, 0, 
I, 0, 0, I] 
[e, 0, 0, 0, 0, 0, 0] -) [a, I, 0, 0, 0, 0, I] 
'TZP 
[e, I, 0, 0, 0, 0, 0] -) [I, 
0, I, 0, I, 0, I] 
[e, 0, I, 0, I, 
I, 0] -) [I, 
0, I, 0, 
1, 
I, 
I) 
'TIP 
[e, I, 
I, 
0, I, 
I, 0] -) [a, I, 0, 0, I, 
I, 
I] 
[e, 0, 0, 0, 0, 0, 0] -) [a, I, 0, 0, I, 
I, 
I] 
'TZP 
[e, I, 0, 0, 0, 0, 0] -) [I, 
0, I, 0, I, 
I, 
I] 
[e, 0, I, 
0, I, 
I, 0] -) [I, 
0, I, 
0, I, 
I, 
I] 
'TIP 
[e, I, 
I, 0, I, 
I, 0] .) [a, I, 0, 0, I, 
I, 
I] 
[c, 0, I, 0, I, 0, 0] .) [a, I, 0, 0, I, 
I, 0) 
'TZi 


[e, I, 
1, 0, 
I, 0, 0] .) 
[I, 
I, 
I, 0, I, 
I, 0] 
[e, 0, 0, I, 
0, I, 0] .) 
[I, 
I, 
I, 0, I, 
I, 0) 
'TI 
[e, I, 0, I, 
0, I, 0] .) [a, I, 
I, 
I, 0, 0, I] 
[e, 0, I, 
I, 
I, 
I, 0] .) [a, I, 0, I, 0, 0, I] 
"TZ 
[e, I, 
I, 
I, 
I, 
I, 0] -) [a, I, 0, I, 0, 0, I] 
[e, 0, I, 
I, 
I, 
I, 
0] -) [a, I, 0, I, 0, 0, I] 
"TZ 
[e, I, 
I, 
I, 
I, 
I, 0] -) [a, I, 0, I, 0, 0, I] 
[e, 0, 0, 0, 0, I, 
0] .) [a, I, 0, I, 0, 0, I] 
'TZP 
[e, I, 
0, 0, 0, I, 
0] -) [a, I, 0, I, 
0, 0, I] 
[e, 0, 0, 0, 0, 0, 0) -) [a, I, 0, 0, 0, 0, I] 
'TZP 
[e, I, 
0, 0, 0, 0, 0) -) 
[I, 
0, I, 0, I, 0, I] 
[e, 0, I, 0, I, 
I, 0] .) 
[I, 
0, I, 0, I, 
I, 
I] 
'TIP 
[e, I, 
I, 0, I, 
I, 0] -) [a, I, 0, 0, I, 
I, 
I] 


[e, 0, 0, 0, 0, 0, 0) -) [a, I, 0, 0, I, 
I, 
I] 
'TZP 
[e, I, 0, 0, 0, 0, 0) -) [I, 
0, I, 0, I, 
I, 
1] 
[e, 0, I, 0, I, 
I, 0) -) [I, 
0, I, 0, I, 
I, 
I] 
"TIP 


[e, I, 
I, 0, I, 
I, 0] -) [a, I, 
0, 0, I, 
I, 
I] 
[e, 0, 0, 0, 0, 0, 0] -) [a, I, 0, 0, I, 
I, 
I] 
'TZP 
[e, I, 
0, 0, 0, 0, 0] .) 
[I, 
0, I, 0, I, 
I, 
I] 
[e, 0, I, 0, I, 
I, 0] -) 
[I, 
0, I, 0, I, 
I, 
1] 
"TIP 
[e, I, 
I, 0, I, 
I, 0] -) [a, I, 0, 0, I, 
I, 
I] 


240725-A6 


[e, 0, I, 0, I, 
I, 
0] -) [a, I, 0, 0, I, 
I, 
I]; 
"TZ 


[e, 1, 1, 0, I, 
I, 0] -) [a, I, 0, 0, 
J, 
I, 
I]; 


[e, 0, 
J, 
0, I, 
I, 0] -) [a, I, 0, 0, I, 
I, 
I]; 
'TZ 
[e, I, 
I, 0, 
J, 
J, 
oJ -) [a, I, 0, 0, I, 
I, 
I]; 


[e, 0, I, 0, I, 
I, 0] 
-) [a, I, 0, 0, I, 
I, 
I]; 
"TZ 


[e, I, 
I, 0, I, 
I, 
oJ .) [a, I, 0, 0, I, 
I, 
1]; 
[e, 0, I, 0, I, 
I, 0) -) [a, I, 0, 0, 
J, 
I, 
I]; 
'TZ 
[e, I, 
I, 0, I, 
I, 
oJ -) [0, I, 0, 0, I, 
I, 
I]; 


[e, 0, I, 0, I, 
I, 
oJ -) [a, I, 0, 0, I, 
I, 
I); 
'TZ 
[e, I, 
I, 0, I, 
I, 0] -) [a, I, 0, 0, 1, I, 
I); 


[e, 0, I, 0, I, 
I, 0] -) [0. I, 0, 0, I, 
I, 
I]; 
'TZ 
[e, I, 
I, 0, I, 
I, 0] -) [a, I, 0, 0, I, 
I, 
I]; 


[e, 0, 0, 0, 0, I, 0] .) [a, I, 0, 0, I, 
I, 
I]; 
"TZP 
[e, I, 0, 0, 0, I, 0] .) [a, I, 0, 0, I, 
I, 
I]; 


[e, 0, 0, 0, 0, 0, 0] -) [a, I, 0, 0, I, 
I, 
I]; 
'T2P 
[e, I, 0, 0, 0, 0, oJ -) [I, 
0, I, 0, 
J, 
I, 
I]; 
[e, 0, I, 0, I, 
I, 0] -) [I, 
0, I, 0, I, 
I, 
I); 
"TIP 
[e, I, 
I, 0, I, 
I, 0] -) [a, I, 0, 0, I, 
I, 
I); 


[e, 0, 0, 0, 0, 0, 0] .) [a, I, 0, 0, I, 
I, 
I); 
'T2P 


end 
PAGE_MOOE_ORAM_CTRL_3; 
240725-A7 
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Devi 
ce 
PAGE3 


!T2X- 
:. 
(CLK 
& 
! RESET 
& 
! TI p, 
& T2X- 
, 
READY- 
& 
!RESET 
& TIP- 
& 
!T2X- 


, 
! CLK 
& !RESET 
& TI P- 
& 
!T2X- 


, 
!ADS- 
& ClK 
& TIP- 
& T2X-); 


!WE- :- (READY- 
& 
!RESET 
& 
lWE- 


I 
!CLK 
& 
!RESET 
& 
lWE- 
I 
!TIP- 
& WE- 
& 
lwr 


I 
CLK 
& 
!MEMCS- 
& T2X- 
& WE- 
& WR); 


!DEN- 
:. (!DEN- 
& 
READY- 
& 
!RESET 


, 
ICLK 
& 
!DEN- 
& 
!RESET 


, 
CLK 
& DEN- 
& 
!TIP- 
& mreq 


, 
DEN- 
& 
!T2X- 
& mreq 


, 
CLK 
& DEN- 
& 
IMEMCS- 
& T2X- 
& 
!WR) ; 


!DTR 
:- 
(!DTR 
& 
!RESET 
& 
lwr 
I 
IDEN- 
& 
!DTR 
& 
!RESET 
I 
CLK 
& 
!DTR 
& 
IRESET 
I 
DTR 
& 
!TIP- 
& 
lwr 
I 
ClK 
& DTR & 
!MEMCS- 
& T2X- 
& WR); 


!lwr 
:- 
(!READY- 
& 
!WR 


, 
MEMCS- 
& 
! READY- 


, 
RESET 
& 
lwr 
, 
IWR & 
!lwr 


, 
MEMCS- 
& 
!lwr 


, 
ICLK 
& 
!lwr); 


!mreq :- 
(MEMCS- 
& 
I READY- 
I 
RESET 
& mreq 
I MEMeS- 
& 
!mreq 


, 
!eLK 
& 
!mreq); 
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CLK2 


CLK 


ADS- 


t,lEt.4CS- 


WR 


READY- 


DRI.4RDY- 


mreq 


Iwr 


DTR 


DEN- 


WE- 


TlP- 


T2X- 


_T2X-_E 


•-n+_I 
AP-442 
'eI® 


module 
PAGE-'100E_ORAM_CTRL_4 
fla9' 
-r3' 


title 
'PAGE MODE DRAMCONTROLLER - PAL 4, 
INTEL CORPORATION' 


Inputs 


CLOCK 
pin 
I; 
DO 
pin 
2; 


01 
pin 
3; 
02 
pin 
4; 


03 
pin 
5; 
04 
pin 
6; 


05 
pin 
7; 
06 
pin 
8; 
07 
pin 
9; 
DE 
pin 
II; 


" Outputs 


AD 
pin 
12; 


AI 
pin 
13; 


A2 
pin 
14; 


A3 
pin 
15; 
A4 
pin 
16; 


A5 
pin 
17; 


A6 
pin 
18; 
A7 
pin 
19; 


addr 
:. 
addr 
+ I; 


end 
PAGE_MOOE_ORAM_CTRL_4; 
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Device 
PAGE4 


!A7 
:. 
(AO & Al 
& A2 & A3 & A4 
& AS & A6 
& A7 
, 
IAO & 
!A7 
, 
IAI 
& 
!A7 
, 
!A2 
& !A7 
, 
!A3 
& !A7 
, 
!A4 
& 
!A7 
, 
!AS 
& 
!A7 
, 
!A6 
& 
IA7); 


!A6 
:. 
(AO & Al 
& A2 & A3 
& A4 
& AS & A6 
, 
!AO & 
!A6 
, 
!AI 
& 
!A6 
, 
!A2 
& 
!A6 
, 
!A3 
& 
!A6 
, 
!A4 
& 
!A6 
, 
!AS 
& 
IA6); 


!AS 
:- 
(AO & AI 
& A2 
& A3 & A4 & AS 
, 
!AO & 
!AS 
, 
!AI 
& 
!AS 
, 
!A2 
& 
!AS 
, 
!A3 
& 
!AS 
, 
!A4 
& 
!AS): 


!A4 :. 
(AO & Al 
& A2 & A3 
& A4 
, 
!AO & 
!A4 
, 
!AI 
& 
!A4 
, 
!A2 
& 
IA4 
, 
!A3 
& 
!A4); 


!A3 
:. 
(AO & AI 
& A2 
& A3 , 
!AO & 
!A3' 
!AI 
& 
!A3 , 
!A2 
& 
!A3); 


!A2 
:- 
(AO & Al 
& A2 , 
!AO & 
!A2 , 
!AI 
& 
!A2); 


!AI 
:. 
(AO & Al 
, 
!AO & 
!AI); 


!AO :. 
(AO); 


intel~ 
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CLOCK 


DO 


01 


02 


03 


0<4 


05 


06 


07 


end of module PAGE_MODE_DRAM_CTRL_4 


PAL Codes: DRAM 4 (Continued) 
• 


IO_CTRL_I 
flag 
'-r3' 


'10 
BUS CONTROLLER- PAL I, 
INTEL CORPORATION' 


'PI6R4' 
; 


.X. ; 
.C. ; 


Inputs 


CLK 
pin 
I; 
·Processor 
Clock 
RESET 
pin 
2; 
• Systell1 
Reset 
MRDC- 
pin 
3; 
"Memory (EPROM) Read COlll1land 
10RC- 
pin 
4; 
"I/O 
Read COlll1land 


10WC- 
pin 
5; 
"I/O 
Wrlte 
COlll1land 


INTA- 
pin 
6; 
"Interrupt 
Acknowl edge 


DEN- 
pin 
7; 
"I/O 
Bus Data 
Transceiver 
Enable 
10RDY- 
pin 
8; 
"I/O-EPROM Ready 
L510CS- 
pin 
9; 
"82510 
Chip 
Select 
DEN- 
pin 
11; 
"PAL output 
Enable 
L59CS- 
pin 
12; 
"8259A-2 
Chip 
Select 
LEPROM- 
pin 
13; 
:EPROM Chip 
Select 
unused 0 
pin 
18; 


unused) 
pin 
19; 


Outputs 


delay 
pin 
14; 
52 
pin 
15; 
51 
pin 
16; 


sO 
pin 
17; 


dstate 
- 
[delay, 
52, 
51, 
sO] ; 
idle 
· [ 
I 
I 
1 
I]; 
start 
· [ 
I 
I 
I 
o ]; 
watt 
14 
· [ 
I 
0 
I 
o ]; 


walt-13 
· [ 
I 
o , 
I 
I]; 


walt-12 
· [ 
I 
0 
0 
o ]; 


waiCII 
· [ 
I 
I 
0 
o ]; 
wait-IO 
· [ 
I 
I 
0 
I]; 


active 
· [ 
0 
I 
I 
I]; 


state.diagram 
dstate 


if 
(!DEN- 
& !MROC-' 
!DEN- & !IORC-' 
!DEN- & ! IOWC- , 
!DEN- & ! INTA-) 
then 
start 


else 
idle; 
if 
(!L510CS- 
& !IOWC-) then 
wait_14 
else 
if 
(IL510CS- 
& !IORC-) 
then 
wait_13 
else 
if 
(IL59CS- 
& !IOWC-) then 
watt 
11 else 
if 
(ILEPRDM- , 
!L59CS- 
& !IORC-·' 
!INTA-) 
then 
wait_IO; 


goto 
wai t 
13; 


state 
walt 
13 
goto 
wait 
12; 
state 
wai t -12 
goto 
walt=lI; 
state 
waiCII 
goto 
wait.IO; 


state 
wait-lO 
goto acthe; 


state 
active: 
if 
!IORDY- then 
idle 
else 
active; 
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Reduced 
Equat ions: 


!delay 
:. 
(IORDY- 
& !delay 
& sO & sI 
& s2 
I delay 
& sO & 
isI 
& s2); 


!s2 
:. 
(delay 
& sI 
& is2 
I 
! IORC- 
& !LSIOCS- 
& delay 
& IsO 
& sI 
I 
! IOWC- & !LSIOCS- 
& delay 
& IsO 
& sI); 


!sI 
:. 
(delay 
& 
IsO 
& isl 
I de lay 
& sO & s I 
& i s2 
I 
lINTA- 
& IORC- 
& IOIIC- 
& delay 
& 
IsO 
& s2 
I 
IORC- 
& IOIIC- & lLEPROH- & delay 
& IsO 
& s2 
I 
! IORC- 
& LSIOCS- 
& !LS9CS- 
& delay 
& IsO 
& s2 
I 
lINTA- 
& LSIOCS- 
& delay 
& IsO 
& s2 
I LSIOCS- 
& iLEPROH- & delay 
& IsO 
& s2 
I 
II0WC- 
& LSIOCS- 
& !LS9CS- 
& delay 
& IsO 
& s2); 


IsO 
:. 
(delay 
& IsO 
& !sl 
& 
!s2 
I delay 
& sO & sl 
& ! s2 
, 
! 10WC- & ILS9CS- 
& del ay 
& !sO & s 1 & s2 
, 
!IOWC- & 
!LSIOCS- 
& delay 
& 
IsO 
& sl 
& s2 
, 
!OEN- & 
INTA- 
& delay 
& sO & sI 
, 
!DEN- & 
IOIIC- 
& delay 
& sO & sI 
, 
lDEN- 
& 
IORC- 
& delay 
& sO & sI 
, 
!DEN- 
& 
HRDC- & delay 
& sO & sI); 
• 


ABEL 3.I~Document 
Generator 
10 BUS CONTROLLER-PAL 
I, INTEL CORPORATION 
Chip diagram for Module 10_CTRL_I 


ClK 


RESET 


MRDC- 


IORC- 


IOWC- 


INTA- 


DEN- 


lORDY- 


l510CS- 


unused_1 


unused_O 


sO 


s1 


s2 


delay 


lEPROM- 


l59CS- 


OEN- 


intel~ 


IO_CTRL_2 
flag' 
-r3' 


'10 
BUS CONTROLLER- PAL 2. 
INTEL CORPORATION' 


'PI6R6' 
; 


.X. ; 
.C. ; 


Inputs 


CLK 
pin 
I: 
"Processor 
Clock 
RESET 
pin 
2; 
·System Reset 
LMIO 
pin 
3; 
'Latched 
HlIO' 
LOC 
p1n 
4; 
'Latched 
O/C' 
LWR 
pin 
5; 
'Latched 
W/R' 
LALE 
p1n 
6; 
'Latched 
ALE 
L5IOCS- 
pin 
7; 
'B25IO 
Ch1p Select 
L59CS- 
pin 
B; 
'B259A-2 
Ch1p Select 


LEPROM- 
p1n 
g; 
'EPROM Ch1p Select 


OEN- 
p1n 
II; 
'PAL Output 
Enable 


rdy- 
p1n 
12; 
'I/O-EPROM Ready (n-I) 


rdy510- 
p1n 
19: 
'I/O-EPROM Ready (n-2) 


" Outputs 


recovery 
pin 
13; 
: I/O Recovery 
Time 


sl 
pin 
14; 
sO 
pin 
IS; 


IORC- 
p1n 
16: 
"I/O 
Read Command 


IOWC- 
pin 
17: 
'I/O 
Write 
Command 
MROC- 
pin 
18; 
"Memory (EPROM) Read Command 


rstate 
• 
[recovery, 
1d1e 
• 
[ 
0 
active 
• 
[ 
0 


inactive 
0 
• 
[ 
I 
inactive-l 
• 
[ 
1 
inactive-2 
• 
[ 
I 


1nactive-3 
• 
[ 
I 


illegal 
i 
. [ 
0 


1llegal=b 
• 
[ 
0 


sl, 
sO); 
I 
, 
0 ); 
1, 
I); 
I 
I]; 


o 
I]: 


o 
0]; 


I 
0]; 


o , 0 1; 
o 
I); 


state_diagram 
rstate 


state 
idle: 
state 
active: 


state 
inactive 
0: 
state 
inactive-I: 


state 
inactive-2: 


state 
inactive-3: 
state 
illegal 
i: 


state 
illega1=b: 


if 
(!IORC- 
, 
!IOWC-) then 
active 
else 
idle: 
if 
(IORC- , 
IOWC-) then 
1nactive_0 
else 
active: 


got a 1nactive_l: 
gota inact he _2; 
goto 
1nactive_3: 


got a 1d1e; 
goto 
1d1e; 


goto 
idle; 


state_diagram 
[IOWC-) 


state 
[I): 
1f (I recovery 
l ILHIO l LDCl LWRl (I L510CS- , 
!L59CS-» 
then 
(0) 
else 
[I); 
state 
[OJ: 
1f RESET then 
[I] 
else 
1f (!L5IOCS- 
l 
Irdy510- 
, 
!rdy-) 
then 
[IJ 
else 
[OJ; 


state_diagram 
[IORC-] 


state 
[I]: 
if 
(lrecovery 
l ILHIO l LOCl 
ILWRl (!L510CS- 
, 
IL59CS-» 
then 
(0) 
else 
[I]; 
state 
[0]: 
1f RESET then 
[I] 
else 
1f 
lrdy- 
then 
[I] 
else 
(0); 


state_diagram 
[HRDC-] 


state 
[I): 
if 
(LALE l LHIO l 
ILWRl !LEPROH-) then 
[0] 
else 
[I]; 


state 
(0): 
if 
RESET then 
[I] 
else 
1f 
!rdy- 
then 
[I] 
else 
[0); 


intel~ 
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!recovery 
:- 
(!recovery 
&. !sl 
, 
!IORC- &. !IOWC- &. !recovery 
, 
!sO 
&. 51); 


!sl 
:- 
(recovery 
&. sO); 


IsO 
;. 
(recovery 
l 
IsO' 
151 
, 
10RC- l 
10WC- l 
IsO); 


IIOWC- 
;. 
(! 10WC- l 
IRESET l 
rdy510- 
l 
rdy- 
, !IOWC- l 
L510CS- 
l !RESET l 
rdy- 
, 
IOWC- l 
! L59CS- 
l 
LDC l 
! LMIO l 
LWR l 
I recovery 
, 
10WC- l 
!L510CS- 
l 
LDC l 
!LMIO l 
LWR l 
I recovery) 
; 


IIORC- 
;. 
(! IORC- l 
IRESET l 
rdy- 
, 
IORC- l 
1L59CS- l 
LDC l 
! LMIO l 
I LWR l 
I recovery 
, 
IORC- l 
IL510CS- 
l 
LDe l 
ILMIO l 
ILWR l 
!recovery); 
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ClK 


RESET 


It.410 


lDC 


lWR 


LAlE 


l510CS- 


l59CS- 


lEPROt.4- 


rdy510- 


t.4RDC- 


IOWC- 


IORC- 


sO 


sl 


recovery 


rdy- 


OEN- 
• 


title 
'10 
BUS CONTROLLER- PAL 2, 
INTEL CORPORATION' 


103 
device 
'P16R6' ; 


.X. ; 
• ABEL 'don't 
care' 
symbol 


.C. ; 
, ABEL 'clock.ing 
input' 
symbol 


Inputs 


CLK 
pin 
I; 
"Processor (loek 
RESET 
pin 
2; 
'System 
Reset 
LMIO 
pin 
3; 
'Latched 
M/IO' 
LDC 
pin 
4; 
'Latched 
O/C, 
LWR 
pin 
5; 
, Latched 
W/R' 
LALE 
pin 
6; 
'Latched 
ALE 
LS10CS- 
pin 
7; 
'82510 
Chip Select 
LS9CS- 
pin 
8; 
'82S9A-2 
Chip 
Select 
LEPROM- 
pin 
9; 
'EPROM Chip Select 
OEN- 
pin 
11; 
'PAL Output 
Enable 
rdy- 
pin 
12; 
'I/O-EPROM Ready (n-I) 
10ROY- 
pin 
19; 
'I/O-EPROM Ready 


, Outputs 


INTA- 
pin 
13; 
: Interrupt 
Acknowledge 
stO 
pin 
14; 
OEN- 
pin 
IS; 
: I/O Bus Transceiver 
Enable 
stl 
pin 
16; 
OTR 
pin 
17; 
: I/O Bus Transceher 
01rect ion 
st2 
pin 
18; 


state_dia9ram 
[INTA-, 
stO] 


state 
[I, 
I]: 
if 
(ILMIO & ILOC & ILWR& LALE) then 
[I, 
0] el se [I, 
IJ; 
state 
[I, 
0]: 
if 
RESET then 
[I, 
I] 
else 
If 
ILALE then 
[0, 
0] else 
[I, 
0]; 


state 
[0, 
0]: 
If 
RESET then 
[I, 
I] 
else 
If 
Irdy- 
then 
[I, 
I] 
else 
[0, 
0]; 
state 
[0, 
IJ: 
9oto 
[I, 
I]; 


state 
[I, 
0]: 


state 
[0, 
0]: 


state 
[0, 
I]: 


If 
LALE & (ILEPROM- , 
!lS10CS- 
, 
!LS9CS-) 
then 
[I, 
0] else 


If 
!INTA- then 
[0, 
0] else 
[I, 
I]; 


1f RESET then 
[I, 
I] 
else 
If 
ILALE then 
[0, 
0] else 
[I, 
0]; 
1f RESET then 
[I, 
I] 
else 
If 
!rdy- 
then 
[I, 
I] 
else 
[0, 
0]; 


goto 
[I, 
I]; 


state 
[I, 
I]: 
1f LALE & (ILEPROM- , 
ILS10CS- , 
!lS9CS-) 
& lWR then 
[0, 
1] 


else 
[I, 
I]; 
if 
RESET then 
[J, 
I] 
else 
1f 
IIOROY- then 
[0, 
0] else 
[0, 
I]: 


goto 
[I, 
I]: 
9oto 
[I, 
I]; 
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!stO 
:. 
(!RESET 
, 
rdy- 
, 
!stO 
, 
INTA- 
& 
! RESET 
& 
I stO 
, 
INTA- 
& LALE 
& 
!LDC 
& 
ILHIO 
, 
ILWR , 
stO); 


!DEN- 
;. 
(!DEN- 
, 
IRESET 
, 
rdy- 
, 
!stI 


, 
DEN- 
, 
!LALE 
, 
!RESET 
, 
!stl 


, 
DEN- 
& 
I INTA- 
& L510CS- 
, 
L59CS- 
, 
LEPROH- 
, 
stl 
, 
DEN-' 
!INTA-' 
!LALE' 
stl); 


!st! 
:. 
(!RESET 
& rdy- 
, 
1st! 


, 
DEN- 
& 
! RESET , 
! sti 


, 
DEN- 
, 
! INTA- 
, 
sti 


, 
DEN- 
, 
IL59CS- 
, 
LALE 
, 
stl 
, 
DEN- 
, 
! L510CS- 
, 
LALE 
, 
st! 
, 
DEN- 
& 
LALE 
& 
! LEPROH- 
, 
sti): 


!DTR 
:. 
(!DTR 
& 
!RESET 
, 
stZ 


, 
DTR , 
I L59CS- 
, 
LALE 
, 
LWR , 
stZ 


, 
DTR , 
I L510CS- 
, 
LALE 
, 
LWR , 
st2 


, 
DTR , 
LALE 
& 
ILEPROH- 
, 
LWR , 
stZ): 
• 


ABEL 3.10-Document Generator 
10 BUS CONTROLLER-PAL 
2, INTEL CORPORATION 
Chip diagram for Module 10_CTRL_3 


ClK 


RESET 


lllliO 


lDC 


lWR 


LAlE 


l510CS- 


l59CS- 


lEPROIll- 


IORDY- 


st2 


DTR 
stl 


DEN- 


otO 


INTA- 
rdy- 


OEN- 


10_CTRL_4 
flag 
'-r3' 


'10 
BUS CONTROLLER- PAL 2, 
INTEL CORPORATION' 


CLK 
RESET 
l~IO 
lOC 
LWR 
LALE 
delay 
unused 0 
unused-l 
OEN- 
- 
unused 
3 
unused:4 


IOROY- 
rdy- 
rdySIO- 
nc 0 
nc-l 
nC=2 


rsh.te 
idle 
rdy2 
rdyl 
rdyO 
111egal_a 
i11egal_b 
i11egal_c 
i11egal_d 


state_diagram 
rstate 


state 
idle: 


state 
rdy2: 


state 
rdyl: 


state 
rdyO: 
state 
illegal 
a: 
state 
l11egal-b: 
state 
l11egal=c: 


pln 
I: 


pin 
Z; 


pin 
3: 


pin 
4: 


pin 
S: 


pin 
6; 


pin 
7; 


pin 
8; 


pin 
9j 


pin 
II: 


pin 
12: 


pin 
19: 


pin 
13; 


pin 
14: 
pin 
IS: 
pin 
16: 
pin 
17: 
pin 
18; 


• 
[IOROY-, 
• 
[ 
I 


• 
[ 
I 
• [ 
I 
• 
[ 
0 
• [ 
I 


• 
[ 
0 
• 
[ 
0 


• 
[ 
0 


'P16R6' : 


.X. ; 
.c. ; 


rdy-, 
I 
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O/C, 
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: 


I 
]: 


o 
); 


I 
]; 


I 
]: 


o 
]; 


o 
]; 


I 
]; 


o 
]; 


if 
(L~IO 
& !LOC & LWR& LALE) then 
rdyl 
else 
if 
!delay 
the" 
rdy2 
else 
idle; 


if 
RESH then 
idle 
else 
rdyl; 


if 
RESET then 
idle 
else 
if 
!LALE then 
rdyO else 
rdy I ; 


goto 
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goto 
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goto 
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EQUATIONS FOR DRAM TIMINGS (NO CACHE 
CONFIGURA nON): 


tRC: Random Read or Write Cycle Time 


CLK2 
x 
10 


tRP: RAS# Precharge Time 


CLK2 
x 
4 


tRAS: RAS# Pulse Width 


CLK2 
x 
4 


A random DRAM cycle may have a RAS# pulse 


which is only four CLK2 periods wide. This is the case 
if the cycle is followed by Idle cycles (DRAMs not 
selected or Ti's) or a DRAM page miss. 


tCAS (Read): CAS# Pulse Width 


CLK2 
x 
3 


CAS# pulses can be as narrow as three CLK2 


cycles during Page Mode read cycles. 


tCAS (Write): CAS# Pulse Width 


CLK2 
x 
2 


CAS# pulses can be as narrow as two CLK2 cy- 


cles during Page Mode write cycles. 


tASC: Column Address Setup Time 


min (CLK2 
x 
2 + AS32.tphl.min 
- 
Delay.max 
- 
ACT258.StoZ.tpl.max 
- 
ACT258.Cap.Derating, 
CLK2 
x 


3 + AS32.tphl.min 
- 
t6.max 
- 
386.Cap.Derating 
- 
AS373.DtoO.tpd.max 
- 
ACT258.1toZ.tpl.max 
- 


ACT258.Cap.Derating) 


The Column Address becomes valid as RAS# 


switches from High to Low or as the 386 address be- 
comes valid while RAS# 
is already Low (i.e., Page 
Mode, Pipelined cycles) 


tCAH: Column Address Hold Time 


CLK2 + AS373.GtoO.tpd.min 
+ ACT258.ltoZ.tpl.min 
- 
AS32.tphl.max 


The CAL (Column Address Latch) signal is acti- 


vated one CLK2 period after the active-goingedge of 
CAS#. 


tAR: Column Address Hold Time to RAS# 


CLK2 x 3 + AS373.GtoO.tpd.min 
+ 
ACT258.ltoZ.tpl.min 
- 
RAS.Delay.max 


tRCD: RAS# to CAS# Delay Time 


CLK2 
x 
2 + AS32.tphl.min 
- 
RAS.Delay.max 


tRAD: RAS# to Column Address Delay Time 


(min) 
ACT258.StoZ.tphl.min 
+ Delay.min 
- 


RAS.Delay.max 


(max) 
ACT258.StoZ.tphl.max 
+ Delay.max 
+ 


ACT258.Cap.Derating 
- 
RAS.Delay.min 


tRSH: RAS# Hold Time 


CLK2 
x 
2 - 
AS32.tphl.max 
+ RAS.Delay.min 


The worst case occurs when a DRAM Page miss 


or Idle is detected at the end of the current DRAM 
Page miss cycle. 


tCSH: CAS# Hold Time 


CLK2 
x 
6 + AS32.tplh.min 
- 
RAS.Delay.max 


tCRP: CAS# to RAS# Precharge Time 


CLK2 
x 
2 + RAS.Delay.min 
- 
AS32.tplh.max 


This is guaranteed by the DRAM control state 


machine. 


tASR: Row Address Setup Time 


CLK2 
x 
2 - 
t6.max 
- 
386.Cap.Derating 
- 


ACT258.ltoZ.max 
- 
ACT258.Cap.Derating 
+ 
H124.tpd.miri 
+ H125.tpd.min 
+ PALtco.min 
+ 


RAS.Delay.min 


tRAH: Row Address Hold Time 


ACT258.StoZ.tphl.min 
+ Delay.min 
- 
RAS.Delay.max 


• 


tRAC: Access Time 


CLK2 x 6 - 
H124.tpd.max 
- 
H125.tpd.max 
- 
PAl.tco.max 
- 
t21.min 
- 
F245.max 
- 
RAS.Delay.max 


tCAC: Access Time from CAS# 


CLK2 x 3 - 
H124.tpd.max 
- 
H125.tpd.max 
- 


PAl.tco.max 
- 
AS32.tphl.max 
- 
t21.min 
- 
F245.max 


tAA: Access Time from Address 


CLK2 
x 
6 - 
t6.max 
- 
386.Cap.Derating 
- 


AS373.DtoO.max 
- 
ACT258.ltoZ.tp.max 
- 
ACT258.Cap.Derating 
- 
t21.min 
- 
F245.max 


tRCS: Read Command Setup Time 


CLK2 + AS32.tphl.min 


tRCH: Read Command Hold Time to CAS# 


CLK2 
- 
AS32.tplh.max 


tRRH: Read Command Hold Time to RAS # 


CLK2 
- 
RAS.Delay.max 


tOFF: Output Buffer Turn-off Time 


CLK2 
x 
2 + F245.tzh.min 


tWCS: Write Command Setup Time 


CLK2 
x 
3 + AS32.tphl.min 


tWCH: Write Command Hold Time 


CLK2 
x 
2 - 
AS32.tplh.max 


tWCR: Write Command Hold Time to RAS# 


CLK2 
x 
6 - 
RAS.Delay.max 


tRWL: Write Command to RAS# 
Lead Time 


CLK2 x 5 + RAS.Delay.min 


tCWL: Write Command to CAS# Lead Time 


CLK2 x 5 


tDS: Data-in Setup Time 


CLK2 x 3 + H124.tp.min 
+ H125.tp.min 
+ 


AS32.tphl.min 
- 
T12.max 
- 
F245.tp.max 


tDH: Data-in Hold Time 


CLK2 
x 
2 + F245.tpz.min 
- 
AS32.tphl.max 


tDHR: Data-in Hold Time to RAS# 


CLK2 
x 
6 + F245.tpz.max 
+ RAS.Delay.min 


tPC: Page Mode Cycle Time 


CLK2 
x 
4 


tRAPC: Page Mode RAS# Pulse Width 


CLK2 
x 
4 


tRSW: RAS# to Second WE# Delay Time 


CLK2 
x 
7 - 
RAS.Delay.max 


tCP: CAS# Precharge Time 


CLK2 


tWI: Write Invalid Time 


CLK2 


tCAP: Access Time from Column Precharge Time 


CLK2 
x 
4 - 
H124.tp.max 
- 
H125.tp.max 
- 


PAl.tco.max 
- 
t21.min 
- 
F245.max 
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OUtput Dt.able 
!U•• 


On to On Propagatton 
Delay 


c: to On Propaqatlon 
Delay 


Setup 
'11.11.- 
Bold ~1JM 


6.00 
6.00 
11.50 
7.50 


had 
and Writ. Cycl •• 
(COlInOn '.ran-t.r.) 
: 


t.1lC 
Rando••• 
ad or 
WrU. 
Cycle 
'Um. 
tllP 
1lAS' Prech.rcJe 
'time 
t.JlAS 
1UoS' Pube 
Widtb 
tCAS 
CAS' )lule. 
Width 
(Read) 
tCAS 
CAS' Pub. 
Ifldtb 
(WrUe) 
t.ASC 
Colwan Addre •• 
Setup 
or ••• 
tCAR 
Coluat 
Addre •• 
Hold 
ori •• 
tAR 
ColUllln Addr••• 
Hold ,12e 
to 
RAS' 
tReD 
1lAS' t.o CAS' Delay fu. 
UUJ) 
RAS' to 
Col\~ 
A44r••• 
Delay 1'1" 
tRSI 
1lAS' Bold 
'Z~ 
tCS8 
CU' 
Bold f", 
tCJlP 
CAS' to 
JUSt 
'recb&.rg. ,u. 
tASIl 
Row Addr ••• 
S.tup 
, ••• 
tJU.B 
Row Addr ••• 
Hold. 
'11.1J11e 
t' 
'lundtlon 
1'1_ 
(Rh. 
and. raU) 
tUl' 
bfr ••h ••riod 
~2 
bfr 
•• h •• dO<! 


had 
C7Cl•• : 
tRAC 
Aoo... 
'l'" 
tCA£: 
Acce•• 
'11•• 
be.. 
CAS' 
tAA 
&.cce •• 
t ••• bOIl 
a4c:lr ••• 
tileS 
bK 
C-.uad 
'.tup 
It.- 
t.RCH 
had 
Co-&Dd.Bold. '1'1_ tl) cas. 
tJUUI 
bad 
Co-.Dd Rold '11••• tl) RASt 
t~ 
OUtputBuft.r 
Turn.-off 
, ••• 


Wr1t. Crel •• : 
tM:S 
Write 
C08R&nd.Setup 
'11aA 
tWCH 
Write 
Co.-.nd 
Rl)ld. '11••• 
tMCll 
Writ. 
Co-.and 
Il)ld 
t'12e to 
RASt 
t" 
Writ. 
Co.u.nc1 
'ul •• 
Widtb 
tllNL 
Writ. 
C~c1 
to 
1lAS' Lead 
time 
tCWL 
Write 
Co••• nd to 
CAS' Lead , ••• 
tDS 
Oata-u 
Setup'! •••• 
tOR 
Data-in 
Bold 1'''' 
tDHIl 
Data-In 
Hold t't.. to 
1lAS' 


'age 
Node Cycl •• : 


tPC 
'age 
Hod. 
Cycl. 
, •.•• 
tRU'C 
.ag. 
Mode JUS' 
Pul •• 
Width 
tUW 
RAS' to 
Second. WE' Delay 
U_ 
tCP 
CAS' 'rechatge 
'tiJDa 
t.WI 
Write 
Invalid 
U_ 
tC.., 
Acce•• 
fJ.- 
ftC*. Colwm 'racbar'Jll 
'1_ 


lSO.OO 
2'.00 
'0.00 
5.00 
'0.00 
0.00 
45.00 
:".00 
30.00 
25.00 
9.10 
'.10 
lC.20 
'.20 
50.00 
10.00 
31.00 
25.00 
!C.OO 
5.00 
21.lO 
1.00 
6.10 
24.20 
1.20 
91.00 
st.OO 
24.20 
21.20 
S.ts 
3.ts 
5.00 
3.00 


".25 
'.25 
11.45 
6.405 
41.20 
1.20 
11.00 
11.00 
1.20 
1.20 
15.00 
15.00 
]].00 
1'.00 


46.00 
46.00 
24.20 
19.20 
'0.00 
50.00 
15.00 
10.00 
15.00 
62.00 
15.00 
10.00 
17 .15 
11.15 
26.20 
21.20 
".50 
51.50 


60.00 
23.00 
60.00 
10S.0O 
15.00 
10.00 
15.00 
31.25 
4.25 


."'==- ••• ~--_._--_._--- 


• 


inteJ~ 


tP.C 
121. 00 
130.00 
tlU' 
5S.00 
50.00 
t!'.AS 
60.00 
100000 
10.00 
15000.00 
tCAS 
11. 00 
15. 
20 15000.00 
tCAS 
5.00 
tASC 
0.00 
0.00 
tCAII 
6.00 
15.00 
tAP. 
40.00 
55.00 
tRCD 
6.00 
45.00 
25.00 
55.00 
tlUUl 
4.00 
28.00 
20.00 
35.00 
tRSH 
15.00 
15. 
25 
tCSH 
40.00 
10.00 
tClU' 
3.00 
15.00 
tASP. 
2.00 
0.00 
tP.AII 
2.00 
15.00 
t' 
3.00 
25.00 
tREF 
tREF2 
tlW, 
60.00 
10.00 
tCAe 
11.00 
15.00 
tAlL 
32.00 
35.00 
tllC' 
0.00 
0.00 
tRCH 
0.00 
5.00 
tJUUI 
0.00 
5.00 
tOFF 
17.00 
0.00 
15.00 
t'"" 
0.00 
0.00 
t,",R 
5.00 
15.00 
tllCP. 
40.00 
55.00 
tllP 
5.00 
15.00 
tRIlL 
13.00 
20.00 
tCWL 
5.00 
20.00 
to, 
0.00 
0.00 
tOR 
5.00 
15.00 
tDIIP. 
40.00 
5.5.00 
tPC 
37.00 
50 .00 
tRAPC 
tRSlf 
tCP 
5.00 
15.00 
tlfI 
tCAP 
34.00 
45.00 


60.00 
80.00 
100.00 
120.00 
140.00 
160.00 
180.00 
200.00 
220.00 
240.00 
260.00 
280.00 
300.00 


0.26 
(p • 
O.02625q 
• 1. 3125) 
0.19 
0.89 
(p:z 
O.022q 
- 
1.3125) 
1.33 
1. 11 
2.21 
2.65 
3.09 
3.83 
(p - o.OUO'q 
+ 0.1666) 
4.17 
4.50 
., .13 
5.17 


DRAM 
Ad.c1r ••• 
Input. 
1'258 Output 
Micro.trip/Strip 
Lin•• 


TOTAL 


• 


EQUATIONS FOR DRAM TIMINGS (82385 Ac- 
tive): 


tRC: Random Read or Write Cycle Time 


CLK2 
x 
10 


tRP: RAS# Precharge Time 


CLK2 
x 
4 


tRAS: RAS# Pulse Width 


CLK2 
x 
4 


A random DRAM cycle may have a RAS# pulse 
which is only four CLK2 periods wide. This is the case 
if the cycle is followed by Idle cycles (DRAMs not 
selected or Ti's) or a DRAM page miss. 


tCAS (Read): CAS# Pulse Width 


CLK2 
x 
5 


CAS# pulses can be as narrow as five CLK2 cy- 


cles during Page Mode read cycles. 


tCAS (Write): CAS# Pulse Width 


CLK2 
x 
2 


CAS# pulses can be as narrow as two CLK2 cy- 
cles during Page Mode write cycles. 


tASC: Column Address Setup Time 


min (CLK2 
x 
2 + AS32.tphl.min 
- 
Delay.max 
- 


ACT258.StoZ.tpl.max 
- 
ACT258.Cap.Derating, 
CLK2 
x 


3 + AS32.tphl.min 
- 
t6.max 
- 
386.Cap.Derating 
- 
AS373.DtoO.tpd.max 
- 
ACT258.1toZ.tpl.max 
- 
ACT258.Cap.Derating) 


The Column Address becomes valid as RAS# 
switches from High to Low or as the 386 address be- 
comes valid while RAS# 
is already Low (i.e., Page 
Mode, Pipelined cycles) 


tCAH: Column Address Hold Time 


CLK2 + AS373.GtoO.tpd.min 
+ ACT258.ltoZ.tpl.min 
- 
AS32.tphl.max 


The CAL (Column Address Latch) signal is acti- 
vated one CLK2 period after the active-going edge of 
CAS#. 


tAR: Column Address Hold Time to RAS# 


CLK2 x 3 + AS373.GtoO.tpd.min 
+ 
ACT258.ltoZ.tpl.min 
- 
RAS.Delay.max 


tRCD: RAS# to CAS# Delay Time 


CLK2 
x 
2 + AS32.tphl.min 
- 
RAS.Delay.max 


tRAD: RAS# to Column Address Delay Time 


(min) 
ACT258.StoZ.tphl.min 
+ Delay.min 
- 


RAS.Delay.max 


(max) 
ACT258.StoZ.tphl.max 
+ Delay.max 
+ 
ACT258.Cap.Derating 
- 
RAS.Delay.min 


tRSH: RAS# Hold Time 


CLK2 
x 
2 - 
AS32.tphl.max 
+ RAS.Delay.min 


The worst case occurs when a DRAM Page miss 


or Idle is detected at the end of the current DRAM 
Page miss cycle. 


tCSH: CAS# Hold Time 


CLK2 
x 
6 + AS32.tphl.min 
- 
RAS.Delay.max 


tCRP: CAS# to RAS# Precharge Time 


CLK2 
x 
2 + RAS.Delay.min 
- 
AS32.tplh.max 


This is guaranteed by the DRAM control state 


machine. 


tASR: Row Address Setup Time 


CLK2 
x 
2 - 
t6.max 
- 
386.Cap.Derating 
- 
ACT258.1toZ.max 
- 
ACT258.Cap.Derating 
+ 


H124.tpd.min 
+ H125.tpd.min 
+ PALlco.min 
+ 
RAS.Delay.min 


tRAH: Row Address Hold Time 


ACT258.StoZ.tphl.min 
+ Delay.min 
- 
RAS.Delay.max 


tRAC: 
Access 
Time 


CLK2 x 8 - 
H124.tpd.max 
- 
H125.tpd.max 
- 
PALtco.max 
- 
- 
F245.max 
- 
AS646.tpd.max 
- 
F245.max 
- 
RAS.Delay.max 
- 
SRAM.tDW - 
CLK2 + 
385.t22a.min 


tCAC: 
Access 
Time from CAS# 


CLK2 x 5 - 
H124.tpd.max 
- 
H125.tpd.max 
- 
PALtco.max 
- 
AS32.tphl.max 
- 
F245.max 
- 
AS646.tpd.max 
- 
F245.max 
- 
SRAM.tDW - 
CLK2 + 
385.t22a.min 


tAA: 
Access 
Time from Address 


CLK2 x 8 - 
t6.max - 
386.Cap.Derating 
- 
AS373.DtoO.max 
- 
ACT258.1toZ.tp.max - 
ACT258.Cap.Derating 
- 
F245.max 
- 
AS646.tpd.max 
- 
F245.max 
- 
SRAM.tDW - 
CLK2 + 385.t22a.min 


tRCS: 
Read 
Command 
Setup Time 


CLK2 + AS32.tphl.min 


tRCH: 
Read 
Command 
Hold 
Time to CAS# 


CLK2 - AS32.tplh.max 


tRRH: 
Read 
Command 
Hold 
Time to RAS# 


CLK2 - 
RAS.Delay.max 


tOFF: 
Output 
Buffer Turn-off 
Time 


CLK2 x 2 + F245.tzh.min 


tWCS: 
Write 
Command 
Setup Time 


CLK2 x 3 + AS32.tphl.min 


tWCH: 
Write 
Command 
Hold 
Time 


CLK2 x 2 - 
AS32.tplh.max 


tWCR: 
Write 
Command 
Hold Time to RAS# 


CLK2 x 6 - 
RAS.Delay.max 


tRWL: 
Write 
Command 
to RAS# 
Lead Time 


CLK2 x 5 + RAS.Delay.min 


tCWL: 
Write 
Command 
to CAS# 
Lead Time 


CLK2 x 5 


tDS: Data-in 
Setup Time 


CLK2 x 3 + H124.tp.min + H125.tp.min + 
AS32.tphl.min - 
- 
385.t43c.max 
- 
AS646.GotO.tp.max 
- 
F245.tp.max 


tDH: 
Data-in 
Hold 
Time 


CLK2 x 2 + F245.tpz.min 
- AS32.tphl.max 


tDHR: 
Data-in 
Hold 
Time to RAS# 


CLK2 x 6 + F245.tpz.max + RAS.Delay.min 


tPC: Page Mode Cycle Time 


CLK2 x 6 


tRAPC: 
Page Mode 
RAS# 
Pulse Width 


CLK2 x 4 


tRSW: 
RAS# 
to Second 
WE# 
Delay 
Time 


CLK2 x 7 - 
RAS.Delay.max 


tCP: CAS# 
Precharge 
Time 


CLK2 


tWI: Write 
Invalid 
Time 


CLK2 


tCAP: 
Access 
Time from Column 
Precharge 
Time 


CLK2 x 6 -'H124.tp.max 
- 
H125.tp.max 
- 
PALtco.max 
- 
- 
F245.max 
- 
AS646.tpd.max 
- 
F245.max 
- 
SRAM.tDW - 
CLK2 + 385.t22a.min 


• 


Read 
tRC 
tRP 
tRAS 
tCAS 
tCAS 
tASC 
tCAII 
tAR 
tRCD 
tlWl 
tRSH 
tCSR 
tClU' 
tAS" 
t!WI 
t7 
tRU 
tRU2 


and 
Writ. 
Cycl 
•• 
(Common 
Parameter.) 
: 
Random 
R.ad 
or 
Writ. 
Cycle 
'lime 
RAS' Pr.cbarg. 
1'i_ 
RAS' Puh. 
Width 
CAS' 
Pul 
•• 
Width 
(Read) 
CAS' 
Pul •• 
Width 
(Writ.) 
Column Addr••• 
S.tup 
'l't.. 
Column 
Addr ••• 
Bold 
'11_ 
Column Addr••• 
Bold 
'l'1JDeto 
!lAS' 
u.s. 
to 
CAS' 
D.lay 
'l'1me 
RAS' 
to 
Column 
Addr ••• 
Delay 
'1'1 •• 
u.s. Bold 
'l'1JDe 
CAS' 
Bold 
'lble 
CAS' to 
1tAS''r.eharg. 
'l'iaa 
Row Addr ••• 
Setup 'lu.. 
Row 
AcSdr ••• 
Bold 
'I'!JDe 
'l'ran.ition 
'It.- 
(Ili•• and "aU) 
Ilafr •• h P.riod. 
Jlefr •• b '.r1od 


Read Cyol•• : 
tRAC 
Acee •• 
'I'~ 
tCAC 
Ace ••• 
'fiaa 
froa 
CAS' 
tAl. 
Ace••• 
'f1ae fro. 
Addr••• 
tRCS 
!lead 
Co-.nd. 
S.tup 
'J'u. 
tllCB 
Read Co-.nd 
Bold 'l'1JDeto CAS' 
tlUUl 
bad 
Co-..nd. Bold 'J't.. 
to 
It.AS' 
ton 
Output Buff.r 
'turn-otf 
'fs.- 


Writ. 
Cycl•• : 
tMCI 
Writ. Co-.nd 
S.tup !u. 
tWCB 
Write Co-.nd. Bold.!1ae 
tWCJ\ 
Writ. 
Coau.nc1 Bold. 'l't-e to 
RU' 
tV 
Writ. Coau.nd 
Pule. Width 
tllWL 
Writ. 
COaD&Ddto 
RU' 
Lead 'I'bae 
tCWL 
Writ. 
C~ 
to 
CAS' Lead 
'1'u. 
tDS 
Data-io 
S.tup 
'I'~ 
tOB 
Data-io 
Bold 'l'1JDe 
tOD 
Data-io 
Bold. !!ae 
to RU' 


'ag. 
Mode Cyo1e.: 


t,C 
'a9. 
No. Cye1. !ime 
tRAPC 
'ag_ Node RAS, Pu1•• 
Widtb 
tRSW 
1lAS' to 
S.cond 
WE' D.1ay 
!tm. 
tCP 
CAS' Pr.cbarq. 
'flea 
tWI 
Writ. Invalid 'li_ 
teAP 
Acee•• 
'rime fra. 
Column 'recharge 
'J't.. 


150.00 
60.00 
60.00 
75.00 
30.00 
t .10 
14.20 
50.00 
31.00 
5.DD 
24.2D 
'1.00 
24.20 
6.2D 
5.00 


61.50 
1'.70 
31.10 
20.'0 
t.2D 
15.00 


46.00 
24.20 
'0.00 
15.00 
15.00 
15.00 
t.OO 
31.10 
t1.50 


to.OO 
60.00 
105.00 
15.00 
15.00 


29.00 
5.00 
0.00 
64.00 
25.00 
t.l0 
1.20 
10.00 
25.00 
14 .00 
1.00 
6.10 
t.20 
$1.00 
21.20 
4.20 
3.00 


1.50 
5.10 
5.10 
20.80 
9.20 
15.00 
16.00 


46.00 
It.20 
50.0D 
10.00 
&2.00 
10.00 
t.OO 
26.10 
51.50 


53.00 


10.00 


3.50 


APPENDIX 
E 
REFERENCES 


Advanced CMOS Logic Designer's Handbook, Texas In- 
struments Inc., 1988. 


Blood W., MECL System Design Handbook, Motorola 
Corp., 1983. 


Keeler 
R., 
"High 
Speed 
Digital 
Printed 
Circuit 
Boards," Electronic Packaging & Production, pp. 140- 
145, Jan. 1986. 


Tomlinson J., "Avoid The Pitfalls of High Speed Logic 
Design," Electronic Design, pp. 75-84, Nov. 9, 1989. 


Pace C., "Terminate Bus Lines to Avoid Overshoot and 
Ringing," EDN, pp. 227-234, Sept. 17, 1987. 


Royle D., "Rules Tell Whether Interconnections 
Act 
Like Transmission Lines," EDN, pp. 131-136, June 23, 
1988. 


Royle D., "Correct 
Signal Faults by Implementing 
1 


Line-Analysis Theory," 
EDN, pp. 143-148, June 23, 
1988. 


Winchester E., "Guidelines Help You Design High- 
Speed PC Boards," EDN, pp. 221-226, Nov. 28, 1985. 


Yeargan J. R., Day R. L., and Nguyen T., "Effects of 
Printed Circuit Board Transmission Lines an Loading 
on Gate Performance," IEEE Transactions on Industri- 
al Electronics, Vol. IE-34, no. 3, pp. 399-405, Aug. 
1987. 


• Full 32-Bit Internal Architecture 
• Large Uniform Address Space 
- 
8-, 16-, 32-Bit Data Types 
-16 
Megabyte Physical 
- 
8 General Purpose 32-Bit Registers 
- 
64 Terabyte Virtual 
• Runs Intel386™ Software in a Cost 
- 
4 Gigabyte Maximum Segment Size 


Effective 
16-Bit Hardware Environment 
• Numerics Support with the Intel387™ 
- 
Runs Same Applications 
and O.S.'s 
SX Math CoProcessor 
as the Intel386TM OX Processor 
• On-Chip Debugging Support Including 
- 
Object Code Compatible with 8086, 
Breakpoint Registers 
80186,80286, and Intel386™ 
Processors 
• Complete System Development 
• High Performance 
16-Blt Data Bus 
Support 
- 
Software: C, PL/M, Assembler 
-16,20,25 
and 33 MHz Clock 
- 
Debuggers: PMON-386 OX, 
- 
Two-Clock Bus Cycles 
ICETM-386SX 
- 
Address Pipelining Allows Use of 
Slower/Cheaper 
Memories 
• High Speed CHMOS IV Technology 
• Integrated 
Memory Management Unit 
• Operating Frequency: 
- 
Virtual Memory Support 
-Standard 
- 
Optional On-Chip Paging 
(Intel386 SX -33, -25, -20, -16) 
- 
4 Levels of Hardware Enforced 
Mln/Max Frequency 
Protection 
(4/33,4/25, 
4/20, 4/16) MHz 
- 
MMU Fully Compatible with Those of 
-Low 
Power 
the 80286 and Intel386 OX CPUs 
(Intel386 SX -33, -25, -20, -16, -12) 
• Virtual 8086 Mode Allows Execution of 
Mln/Max Frequency 


8086 Software in a Protected and 
(2/33,2/25,2/20, 
2/16, 2/12) MHz 


Paged System 
• 100-Pln Plastic Quad Flatpack Package 


(See Packaging 
Outlines 
and Dimensions 
#231369) 


The Intel386™ 
SX Microprocessor 
is an entry-level 
32-bit CPU with a 16-bit external 
data bus and a 24-bit 


external 
address 
bus. The Intel386 
SX CPU brings the vast software 
library of the Intel386™ 
Architecture 
to 


entry-level 
systems. 
It provides 
the performance 
benefits 
of a 32-bit programming 
architecture 
with the cost 


savings 
associated 
with 16-bit hardware 
systems. 


HOLD, 
INTR, 
NW' 


ERROR'. 
BUSY' 


RESET.HLOA 


M/IO,.D/C'. 
W/R,. 
LOCK,. 


ADS'. "A,. 
READY' 


BARREL 
SHInER, 


ADOER 
STATUS 


FLAGS 


1.0 PIN DESCRIPTION 
1-316 


2.0 BASE ARCHITECTURE 
1-319 


2.1 Register Set 
1-319 


2.2 Instruction 
Set 
1-323 


2.3 Memory Organization 
1-324 


2.4 Addressing 
Modes 
1-325 


2.5 Data Types 
1-328 


2.6 I/O Space 
1-328 


2.7 Interrupts 
and Exceptions 
1-330 


2.8 Reset and Initialization 
1-333 


2.9 Testability 
1-333 


2.10 Debugging 
Support 
1-334 


3.0 REAL MODE ARCHITECTURE 
1-335 


3.1 Memory Addressing 
1-335 


3.2 Reserved 
Locations 
1-336 


3.3 Interrupts 
1-336 


3.4 Shutdown 
and Halt 
1-336 


3.5 LOCK Operations 
1-336 


4.0 PROTECTED 
MODE 
ARCHITECTURE 
1-337 


4.1 Addressing 
Mechanism 
1-337 


4.2 Segmentation 
1-337 


4.3 Protection 
1-342 


4.4 Paging 
1-346 


4.5 Virtual 8086 Environment 
1-349 


5.0 FUNCTIONAL 
DATA 
1·352 


5.1 Signal Description 
Overview 
1-352 


5.2 Bus Transfer 
Mechanism 
1'-358 


5.3 Memory and I/O Spaces 
1-358 


5.4 Bus Functional 
Description 
1-358 


5.5 Self-test Signature 
1-376 


5.6 Component 
and Revision 
Identifiers 
1-376 


5.7 Coprocessor 
Interfacing 
1-376 


6.0 PACKAGE THERMAL 
SPECIFICATIONS 
1-377 


7.0 ELECTRICAL 
SPECIFICATIONS 
.. 1-377 


7.1 Power and Grounding 
1-377 


7.2 Maximum Ratings 
1-378 


7.3 D.C. Specifications 
1-379 


7.4 A.C. Specifications 
1-381 


7.5 Designing for ICETM-lnteI386 SX 
Emulator 
1-391 


8.0 DIFFERENCES 
BETWEEN 
THE 


Intel386™ 
SX CPU and the 
Intel386™ 
DX CPU 
1-392 


9.0 INSTRUCTION 
SET 
1-393 


9.1 Intel386™ 
SX CPU Instruction 
Encoding and Clock Count 
Summary 
1-393 


9.2 Instruction 
Encoding 
1-408 


• 


intel~ 


00 
Vss 
HlDA 
HOLD 
VSS 
HA' 


READY' 


Vce 
Vce 
Vee 
VSS 
VSS 
VSS 
VSS 
ClK2 
ADS' 
SlE, 


Al 
SHE' 


He 


Vee 
VSS 
W/IO' 
D/e, 
W/R, 


NOTE: 
NC = No Connect 


Address 
Data 
Control 
N/C 
Vcc 
Vss 
A1 
18 
Do 
1 
AOS# 
16 
20 
8 
2 
A2 
51 
01 
100 
BHE# 
19 
27 
9 
5 
A3 
52 
02 
99 
BLE# 
17 
29 
10 
11 
A4 
53 
03 
96 
BUSY# 
34 
30 
21 
12 
A5 
54 
04 
95 
CLK2 
15 
31 
32 
13 
Ae 
55 
05 
94 
O/C# 
24 
43 
39 
14 


A7 
56 
06 
93 
ERROR# 
36 
44 
42 
22 
As 
58 
07 
92 
FLT# 
28 
45 
48 
35 
Ag 
59 
08 
90 
HLOA 
3 
46 
57 
41 
A10 
60 
Og 
89 
HOLD 
4 
47 
69 
49 
A11 
61 
010 
88 
INTR 
40 
71 
50 
A12 
62 
011 
87 
LOCK # 
26 
84 
63 
A13 
64 
012 
86 
MIIO# 
23 
91 
67 
A14 
65 
013 
83 
NA# 
6 
97 
68 
A15 
66 
014 
82 
NMI 
38 
77 
A16 
70 
015 
81 
PEREQ 
37 
78 
A17 
72 
REAOY# 
7 
85 
A18 
73 
RESET 
33 
98 
A19 
74 
W/R# 
25 
A20 
75 
A21 
76 


A22 
79 


A23 
80 
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The following 
are the Intel386TM SX Microprocessor 
pin descriptions. 
The following 
definitions 
are used in the 
pin descriptions: 


# 
The named signal is active 
lOW. 
I 
Input signal. 


o 
Output 
signal. 


I/O 
Input and Output 
signal. 


No electrical 
connection. 


Symbol 
Type 
Pin 
Name and Function 


ClK2 
I 
15 
CLK2 provides the fundamental 
timing for the Intel386 
SX 
Microprocessor. 
For additional 
information 
see Clock. 


RESET 
I 
33 
RESET suspends 
any operation 
in progress 
and places the 
Intel386 SX Microprocessor 
in a known reset state. See 
Interrupt 
Signals for additional 
information. 


015-00 
I/O 
81-83,86-90, 
Data Bus inputs data during memory, 
I/O and interrupt 
92-96,99-100,1 
acknowledge 
read cycles and outputs data during memory and 
I/O write cycles. See Data Bus for additional 
information. 


A23-A1 
0 
80-79,76-72,70, 
Address 
Bus outputs physical memory or port I/O addresses. 


66-64,62-58, 
See Address 
Bus for additional 
information. 


56-51,18 


W/R# 
0 
25 
Write/Read 
is a bus cycle definition 
pin that distinguishes 
write 
cycles from read cycles. See Bus Cycle Definition 
Signals for 
additional 
information. 


O/C# 
0 
24 
Data/Control 
is a bus cycle definition 
pin that distinguishes 
data 
cycles, either memory or I/O, from control 
cycles which are: 
interrupt 
acknowledge, 
halt, and code fetch. See Bus Cycle 
Definition 
Signals for additional 
information. 


M/IO# 
0 
23 
Memory/IO 
is a bus cycle definition 
pin that distinguishes 
memory cycles from input/output 
cycles. See Bus Cycle 
Definition 
Signals for additional 
information. 


lOCK# 
0 
26 
Bus Lock is a bus cycle definition 
pin that indicates 
that other 
system bus masters are not to gain control 
of the system bus 
while it is active. See Bus Cycle Definition 
Signals for 
additional 
information. 


AOS# 
0 
16 
Address 
Status indicates 
that a valid bus cycle definition 
and 
address (W /R #, O/C#, 
M/IO#, 
SHE #, SlE # and A23-A1 
are 
being driven at the Intel386 SX Microprocessor 
pins. See Bus 
Control 
Signals for additional 
information. 


NA# 
I 
6 
Next Address 
is used to request address pipelining. 
See Bus 
Control 
Signals for additional 
information. 


REAOY# 
I 
7 
Bus Ready terminates 
the bu,s cycle. See Bus Control 
Signals 
for additional 
information. 


SHE#, 
SlE# 
0 
19,17 
Byte Enables indicate which data bytes of the data bus take part 
in a bus cycle. See Address 
Bus for additional 
information. 
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Symbol 
Type 
Pin 
Name and Function 


HOLD 
I 
4 
Bus Hold Request 
input allows another 
bus master to request 


control 
of the local bus. See Bus Arbitration 
Signals 
for 
additional 
information. 


HLDA 
0 
3 
Bus Hold Acknowledge 
output indicates 
that the Intel386 
SX 
Microprocessor 
has surrendered 
control 
of its local bus to 
another bus master. See Bus Arbitration 
Signals 
for additional 
information. 


INTR 
I 
40 
Interrupt 
Request 
is a maskable 
input that signals the Intel386 
SX Microprocessor 
to suspend 
execution 
of the current program 
and execute an interrupt acknowledge 
function. 
See Interrupt 
Signals 
for additional 
information. 


NMI 
I 
38 
Non-Maskable 
Interrupt 
Request 
is a non-maskable 
input that 


signals the Intel386 SX Microprocessor 
to suspend 
execution 
of 


the current program and execute 
an interrupt 
acknowledge 
function. 
See Interrupt 
Signals 
for additional 
information. 


BUSY# 
I 
34 
Busy signals a busy condition 
from a processor 
extension. 
See 
Coprocessor 
Interface 
Signals 
for additional 
information. 


ERROR# 
I 
36 
Error 
signals an error condition 
from a processor 
extension. 
See 
Coprocessor 
Interface 
Signals 
for additional 
information. 


PEREO 
I 
37 
Processor 
Extension 
Request 
indicates 
that the processor 
has 
data to be transferred 
by the Intel386 SX Microprocessor. 
See 
Coprocessor 
Interface 
Signals 
for additional 
information. 


FLT# 
I 
28 
Float is an input which forces all bidirectional 
and output signals, 


including 
HLDA, to the tri-state 
condition. 
This allows the 
electrically 
isolated 
Intel386SX 
POFP to use ONCE (On-Circuit 
Emulation) 
method without 
removing 
it from the PCB. See Float 
for additional 
information. 


N/C 
- 
20,27,29-31,43-47 
No Connects 
should always be left unconnected. 
Connection 
of 
a N/C pin may cause the processor 
to malfunction 
or be 
incompatible 
with future steppings 
of the Intel386 SX 
Microprocessor. 


VCC 
I 
8-10,21,32,39 
System 
Power 
provides the + 5V nominal 
DC supply input. 


42,48,57,69, 
71,84,91,97 


Vss 
I 
2,5,11-14,22 
System 
Ground 
provides 
the OV connection 
from which all 
35,41,49-50, 
inputs and outputs are measured. 


63,67-68, 
77-78,85,98 


The 
Intel386 
SX 
Microprocessor 
is 
100% 
object 
code compatible 
with the Intel386 
DX, 286 and 8086 
microprocessors. 
Systems 
based on the Intel386 SX 
CPU can access 
the world's 
largest 
existing 
micro- 
computer 
software 
base; 
including 
the growing 
32- 
bit software 
base. 


Instruction 
pipelining 
and a high performance 
ALU 
ensure 
short 
average 
instruction 
execution 
times 
and high system 
throughput. 


The integrated 
memory 
management 
unit (MMU) in- 
cludes 
an address 
translation 
cache, 
multi-tasking 
hardware, 
and a four-level 
hardware-enforced 
pro- 
tection 
mechanism 
to support 
operating 
systems. 
The 
virtual 
machine 
capability 
of the 
Intel386 
SX 
CPU allows 
simultaneous 
execution 
of applications 
from multiple 
operating 
systems. 


The 
Intel386 
SX CPU offers 
on-chip 
testability 
and 
debugging 
features. 
Four breakpoint 
registers 
allow 
conditional 
or 
unconditional 
breakpoint 
traps 
on 
code 
execution 
or data accesses 
for powerful 
de- 
bugging 
of even ROM-based 
systems. 
Other testa- 
bility 
features 
include 
self-test, 
tri-state 
of 
output 
buffers, 
and 
direct 
access 
to the 
page translation 
cache. 


The Low Power Intel386 
SX CPU brings the benefits 
of the Intel386 
Microprocessor 
32-bit architecture 
to 
Laptop 
and 
Notebook 
personal 
computer 
applica- 
tions. With its power saving 2 MHz sleep-mode 
and 
extended 
functional 
temperature 
range 
of 
O°C to 
100°C 
TCASE, 
the 
Lower 
Power 
Intel386 
SX CPU 
specifically 
satisfies 
the 
power 
consumption 
and 
heat dissipation 
requirements 
of today's 
small form 
factor 
computers. 


The Intel386 
SX Microprocessor 
consists 
of a cen- 
tral processing 
unit, a memory management 
unit and 
a bus interface. 


The central 
processing 
unit consists 
of the execu- 
tion unit and the instruction 
unit 
The execution 
unit 
contains 
the eight 
32-bit 
general 
purpose 
registers 
which 
are 
used 
for 
both 
address 
calculation 
and 
data operations 
and a 64-bit 
barrel 
shifter 
used to 
speed 
shift, 
rotate, 
multiply, 
and divide 
operations. 
The instruction 
unit decodes 
the instruction 
opcodes 


The memory 
management 
unit (MMU) consists 
of a 
segmentation 
unit and a paging 
unit. Segmentation 
allows the managing 
of the logical address 
space by 
providing 
an extra addressing 
component, 
one that 
allows 
easy 
code 
and data 
relocatability, 
and effi- 
cient 
sharing. 
The paging 
mechanism 
operates 
be- 
neath 
and is transparent 
to the segmentation 
pro- 


cess, to allow management 
of the physical 
address 
space. 


The segmentation 
unit provides 
four 
levels 
of pro- 


tection 
for isolating 
and protecting 
applications 
and 
the operating 
system from each other. The hardware 
enforced 
protection 
allows 
the 
design 
of systems 
with a high degree 
of integrity. 


The Intel386 
SX Microprocessor 
has two modes 
of 
operation: 
Real 
Address 
Mode 
(Real 
Mode), 
and 
Protected 
Virtual 
Address 
Mode 
(Protected 
Mode). 
In Real Mode the Intel386 
SX Microprocessor 
oper- 
ates as a very fast 8086, but with 32-bit extensions 
if 
desired. Real Mode is required primarily to set up the 
processor 
for Protected 
Mode operation. 


Within Protected 
Mode, software 
can perform 
a task 
switch to enter into tasks designated 
as Virtual 8086 
Mode tasks. Each such task behaves 
with 8086 se- 


mantics, 
thus allowing 
8086 software 
(an application 
program 
or an entire operating 
system) 
to execute. 


The Virtual 8086 tasks can be isolated 
and protect- 
ed from one another and the host Intel386 
SX Micro- 
processor 
operating 
system 
by use of paging. 


Finally, 
to facilitate 
system 
hardware 
designs, 
the 
Intel386 
SX Microprocessor 
bus interface 
offers 
ad- 


dress 
plpelining 
and direct 
Byte Enable 
signals 
for 
each byte of the data bus. 


The Intel386 
SX Microprocessor 
has thirty-four 
reg- 
isters 
as shown 
in Figure 
2-1. These 
registers 
are 
grouped 
into the following 
seven categories: 


General 
Purpose 
Registers: 
The eight 32-bit gen- 


eral purpose 
registers 
are used to contain 
arithmetic 
and 
logical 
operands. 
Four 
of 
these 
(EAX, 
EBX, 
ECX, and EDX) can be used either in their entirety 
as 
32-bit registers, 
as 16-bit registers, 
or split into pairs 
of separate 
8-bit registers. 
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AH 
AX 
AL 


BH 
BX 
BL 


eH 
ex 
eL 


OH 
OX 
OL 


SI 


01 


BP 


SP 


3' 
16 
15 


I 
I 


FLAGS 


IP 


3. 
16 
15 


wsw 


.6 .5 


I 


EAX 


EBX 


Eex 


EOX 
GENERAL 
PURPOSE 


ESI 
REGISTERS 


EOI 


EBP 


ESP 


es 


SS 


OS 


SEGMENT 


ES 
REGISTERS 


FS 


GS 


0 


I 


EFLAGS ] 


FLAGS 
AND 
INSTRUCTION 


EIP 
POINTER 


eRO ] 


CR' 
CONTROL 


eR2 
REGISTERS 


eR3 


0 


I 


GOTR ] 


lDTR 
SYST(W 
ADDRESS 


LOTR 
REGISTERS 


TR 


ORO 


OR' 


OR2 


OR3 
DEBUG 


OR' 
REGISTERS 


OR5 


OR6 


OR7 


TR6 ] 


TEST 


TR7 
REGISTERS 
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Segment 
Registers: 
Six 16-bit special purpose reg- 
isters select. at any given time, the segments of 
memory that are immediately addressable for code, 
stack, and data. 


Flags and Instruction 
Pointer 
Registers: 
The two 
32-bit special purpose registers in figure 2.1 record 
or control certain aspects of the Intel386 SX Micro- 
processor 
state. The EFLAGS register includes 
status and control bits that are used to reflect the 
outcome of many instructions and modify the se- 
mantics of some instructions. The Instruction Point- 
er. called EIP. is 32 bits wide. The Instruction Pointer 
controls instruction fetching and the processor auto- 
matically increments it after executing an instruction. 


Control 
Registers: 
The four 32-bit control register 
are used to control the global nature of the Intel386 
SX Microprocessor. The CROregister contains bits 
that set the different processor modes (Protected, 
Real, Paging and Coprocessor Emulation). CR2 and 
CR3 registers are used in the paging operation. 


System 
Address 
Registers: 
These four special 
registers reference the tables or segments support- 
ed by the 80286/lnte1386 SX/lntel386 
OX CPU's 
protection model. These tables or segments are: 


GDTR (Global Descriptor Table Register), 
IDTR (Interrupt Descriptor Table Register). 
LDTR (Local Descriptor Table Register). 
TR (Task State Segment Register). 


Debug 
Registers: 
The six programmer accessible 
debug registers provide on-chip support for debug- 
ging. The use of the debug registers is described in 
Section 2.10 Debugging 
Support. 


Test 
Registers: 
Two registers are used to control 
the testing of the RAM/CAM (Content Addressable 
Memories) in the Translation Lookaside Buffer por- 
tion of the Intel386 SX Microprocessor. Their use is 
discussed in Testability. 


OVERFLOW 


SIGH 


ZERO 


AUX 
CARRY 


PARITY 


CARRY 


TRAP 


INTERRUPT 


DIRECTION 


RESUME 


VIRTUAL 
8086 
WODE 


PROTECTION 
ENABLE 


MONITOR 
COPROCESSOR 


EWULATE 
COPROCESSOR 


TASK 
SWITCHED 


1 f1tl nag register 
IS a ~£-Dit register 
named EFLAGS. 
The 
defined 
bits 
and 
bit 
fields 
within 
EFLAGS, 
shown 
in Figure 2.2, control 
certain 
operations 
and 
indicate 
the status 
of the Intel386 
SX Microproces- 
sor. The lower 
16 bits (bits 0-15) 
of EFLAGS 
con- 
tain the 
16-bit flag register 
named 
FLAGS. 
This is 
the default 
flag register 
used when executing 
8086, 
80286, 
or real mode code. The functions 
of the flag 
bits are given in Table 2.1. 


. 


The 
Intel386 
SX Microprocessor 
has three 
control 


registers 
of 32 bits, CRO, CR2 and CR3, to hold the 
machine 
state 
of a global 
nature. 
These 
registers 
are shown 
in Figures 2.1 and 2.2. The defined 
CRO 
bits are described 
in Table 2.2. 


Bit Position 
Name 
Function 


0 
CF 
Carry Flag-Set 
on high-order 
bit carry or borrow; cleared 
otherwise. 


2 
PF 
Parity Flag-Set 
if low-order 
8 bits of result contain an even 
number of 1-bits; cleared otherwise. 


4 
AF 
Auxiliary Carry Flag-Set 
on carry from or borrow to the low 
order four bits of AL; cleared otherwise. 


6 
ZF 
Zero Flag-Set 
if result is zero; cleared otherwise. 


7 
SF 
Sign Flag-Set 
equal to high-order 
bit of result (0 if positive, 
1 if 
negative). 


8 
TF 
Single Step Fla~nce 
set, a single st€P interrupt 
occurs after 
the next instruction 
executes. 
TF is cleared by the single step 
interrupt. 


9 
IF 
Interrupt-Enable 
Flag-When 
set, maskable 
interrupts 
will cause 
the CPU to transfer 
control to an interrupt vector specified 
location. 


10 
DF 
Direction 
Flag-Causes 
string instructions 
to auto-increment 
(default) the appropriate 
index registers when cleared. Setting 
DF causes auto-decrement. 


11 
OF 
Overflow 
Flag-Set 
if the operation 
resulted 
in a carry/borrow 
into the sign bit (high-order 
bit) of the result but did not result in a 
carry/borrow 
out of the high-order 
bit or vice-versa. 


12,13 
10PL 
I/O Privilege Level-Indicates 
the maximum Current Privilege 
Level (CPL) permitted 
to execute 
I/O instructions 
without 
generating 
an exception 
13 fault or consulting 
the I/O permission 
bit map while executing 
in protected 
mode. For virtual 86 mode it 
indicates 
the maximum 
CPL allowing 
alteration 
of the IF bit. See 
Section 4.2 for a further discussion 
and definitions 
on various 
privilege 
levels. 


14 
NT 
Nested Task-5et 
if the execution 
of the current task is nested 
within another task. Cleared otherwise. 


16 
RF 
Resume 
Flag-Used 
in conjunction 
with debug register 
breakpoints. 
It is checked 
at instruction 
boundaries 
before 
breakpoint 
processing. 
If set, any debug fault is ignored on the 
next instruction. 


17 
VM 
Virtual 8086 Mode-If 
set while in protected 
mode, the Intel386 
SX Microprocessor 
will switch to virtual 8086 operation, 
handling 
segment 
loads as the 8086 does, but generating 
exception 
13 
faults on privileged 
opcodes. 
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Bit Position 
Name 
Function 


0 
PE 
Protection 
mode enable-places 
the Intel386 SX Microprocessor 
into protected 
mode. If PE is reset, the processor 
operates 
again 
in Real Mode. PE may be set by loading MSW or CRO. PE can be 
reset only by loading CRO, it cannot 
be reset by the LMSW 
instruction. 


1 
MP 
Monitor coprocessor 
extension-allows 
WAIT instructions 
to 
cause a processor 
extension 
not present exception 
(number 7). 


2 
EM 
Emulate processor 
extension-causes 
a processor 
extension 
not present exception 
(number 7) on ESC instructions 
to allow 
emulating 
a processor 
extension. 


3 
TS 
Task switched-indicates 
the next instruction 
using a processor 
extension 
will cause exception 
7, allowing 
software 
to test 
whether the current processor 
extension 
context 
belongs to the 
current task. 


31 
PG 
Paging enable bit-is 
set to enable the on-chip 
paging unit. It is 
reset to disable the on-chip paging unit. 


are two 
bytes 
long. The average 
instruction 
is 3.2 
bytes 
long. 
Since 
the 
Intel386 
SX Microprocessor 


has a 16 byte prefetch 
instruction 
queue, an average 
of 5 instructions 
will be prefetched. 
The use of two 
operands 
permits 
the following 
types of common 
in- 
structions: 


The instruction 
set is divided 
into nine categories 
of 
operations: 


Data Transfer 
Arithmetic 
Shift/Rotate 
String Manipulation 
Bit Manipulation 
Control 
Transfer 
High Level Language 
Support 
Operating 
System 
Support 
Processor 
Control 


Register 
to Register 
Memory 
to Register 
Immediate 
to Register 
Memory 
to Memory 
Register 
to Memory 
Immediate 
to Memory. 


These 
instructions 
are listed 
in Table 
9.1 Instruc- 
tion Set Clock Count Summary. 


The operands 
can be either 8, 16, or 32 bits long. As 
a general 
rule, when executing 
code written 
for the 
Intel386 
SX Microprocessor 
(32-bit code), operands 
are 8 or 32 bits; when 
executing 
existing 
8086 
or 
80286 code (16-bit code), operands 
are 8 or 16 bits. 


Prefixes can be added to all instructions 
which over- 


ride 
the 
default 
length 
of 
the 
operands 
(Le. use 
32-bit operands 
for 16-bit code, 
or 16-bit operands 
for 32-bit code). 


All Intel386 
SX Microprocessor 
instructions 
operate 
on either 0, 1, 2 or 3 operands; 
an operand 
resides 
in a register, 
in the instruction 
itself, or in memory. 
Most 
zero operand 
instructions 
(e.g CLI, STI) take 
only 
one 
byte. 
One 
operand 
instructions 
generally 


• 


2.3 
Memory Organization 


Memory on the Intel386 SX Microprocessor is divid- 
ed into 8-bit quantities (bytes), 16-bit quantities 
(words), and 32-bit quantities (dwords). Words are 
stored in two consecutive bytes in memory with the 
low-order byte at the lowest address. Dwords are 
stored in four consecutive bytes in memory with the 
low-order byte at the lowest address. The address of 
a word or dword is the byte address of the low-order 
byte. 


In addition to these basic data types, the Intel386 SX 
Microprocessor supports two larger units of memory: 
pages and segments. Memory can be divided up 
into one or more variable length segments, which 
can be swapped to disk or shared between pro- 
grams. Memory can also be organized into one or 
more 4K byte pages. Finally, both segmentation and 
paging can be combined, gaining the advantages of 
both systems. The Intel386 SX Microprocessor sup- 
ports both pages and segmentation in order to pro- 
vide maximum flexibility to the system designer. 
Segmentation and paging are complementary. Seg- 
mentation is useful for organizing memory in logical 
modules, and as such is a tool for the application 
programmer, while pages are useful to the system 
programmer for managing the physical memory of a 
system. 


The Intel386 SX Microprocessor has three types of 
address spaces: logical, 
linear, and physical. 
A 
logical address (also known as a virtual address) 
consists of a selector and an offset. A selector is the 
contents of a segment register. An offset is formed 
by summing all of the 
addressing components 


(BASE, INDEX, DISPLACEMENT),discussed in sec- 
tion 2.4 Addressing 
Modes, into an effective ad- 
dress. This effective address along with the selector 
is known as the logical address. Since each task on 
the Intel386 SX Microprocessor has a maximum of 


16K (214 -1) 
selectors, and offsets can be 4 giga- 


bytes (with paging enabled) this gives a total of 246 
bits, or 64 terabytes, of logical address space per 
task. The programmer sees the logical address 
space. 


The segmentation unit translates the logical 
ad- 


dress space into a 32-bit linear address space. If the 
paging unit is not enabled then the 32-bit linear ad- 
dress is truncated into a 24-bit physical address. 
The physical address is what appears on the ad- 
dress pins. 


The primary differences between Real Mode and 
Protected Mode are how the segmentation unit per- 
forms the translation of the logical address into the 
linear address, size of the address space, and pag- 
ing capability. In Rea.lMode, the segmentation unit 
shifts the selector left four bits and adds the result to 
the effective address to form the linear address. 
This linear address is limited to 1 megabyte. In addi- 
tion, real mode has no paging capability. 


Protected Mode will see one of two different ad- 
dress spaces, depending on whether or not paging 
is enabled. Every selector has a logical base ad- 
dress associated with it that can be up to 32 bits in 
length. This 32-bit logical base address is added to 
the effective address to form a final 32-bit linear 
address. If paging is disabled this final linear ad- 
dress reflects physical memory and is truncated so 
that only the lower 24 bits of this address are used 
to address the 16 megabyte memory address space. 
If paging is enabled this final linear address reflects 
a 32-bit address that is translated through the pag- 
ing unit to form a 16-megabyte physical address. 
The logical base address is stored in one of two 
operating system tables (Le. the Local Descriptor 
Table or Global Descriptor Table). 


Figure 2.3 shows the relationship between the vari- 
ous address spaces. 


EFFECTIVE 


ADDRESS 
2 
0 
LOGICAL 
OR 


14 VIRTUAL 
ADDRESS 


DESCRIPTOR 
INDEX 


32 


LINEAR 
ADDRESS 


PAGING UNIT 
(OPTIONAL 
USE) 


24 


PHYSICAL 
ADDRESS 


The main data structure used to organize memory is 
the segment. On the Intel386 SX Microprocessor, 
segments are variable sized blocks of linear ad- 
dresses which have certain attributes associated 
with them. There are two main types of segments, 
code and data. The segments are of variable size 
and can be as small as 1 byte or as large as 4 giga- 
bytes (232bits). 


In order to provide compact instruction encoding 
and increase processor performance, instructions 
do not need to explicitly specify which segment reg- 
ister is used. The segment register is automatically 
chosen according to the rules of Table 2.3 (Segment 
Register Selection Rules). In general, data refer- 
ences use the selector contained in the DS register, 
stack references use the SS register and instruction 
fetches use the CS register. The contents of the In- 
struction Pointer provide the offset. Special segment 
override prefixes allow the explicit use of a given 
segment register, and override the implicit rules list- 
ed in Table 2.3. The override prefixes also allow the 
use of the ES, FS and GS segment registers. 


There are no restrictions regarding the overlapping 
of the base addresses of any segments. Thus, all 6 
segments could have the base address set to zero 
and create a system with a four gigabyte linear ad- 


dress space. This creates a system where the virtual 
address space is the same as the linear address 
space. Further details of segmentation are dis- 
cussed in chapter 4 PROTECTED 
MODE 
ARCHI- 
TECTURE. 


2.4 Addressing 
Modes 


The Intel386 SX Microprocessor provides a total of 8 
addressing modes for instructions to specify oper- 
ands. The addressing modes are optimized to allow 
the efficient execution of high level languages such 
as C and FORTRAN, and they cover the vast majori- 
ty of data references needed QY high-level lan- 
guages. 


Two of the addressing modes provide for instruc- 
tions that operate on register or immediate oper- 
ands: 


Register 
Operand 
Mode: The operand is located in 
one of the 8, 16 or 32-bit general registers. 


Immediate 
Operand 
Mode: The operand is includ- 


ed in the instruction as part of the opcode. 


• 


Type of 
Implied (Default) 
Segment 
Override 
Memory 
Reference 
Segment 
Use 
Prefixes 
Possible 


Code Fetch 
CS 
None 


Destination 
of PUSH, PUSHF, INT, 
CALL, PUSHA Instructons 
SS 
None 


Source of POP, POPA, POPF, IRET, 
RET Instructions 
SS 
None 


Destination 
of STOS, MOVE, REP STOS, 
and REP MOVS instructions 
ES 
None 


Other data references, 
with effective 
address 
using base register of: 


[EAX] 
DS 
CS,SS,ES,FS,GS 
[EBX] 
DS 
CS,SS,ES,FS,GS 
[ECX] 
DS 
CS,SS,ES,FS,GS 
[EDX] 
DS 
CS,SS,ES,FS,GS 
[ESI] 
DS 
CS,SS,ES,FS,GS 
[EDI] 
DS 
CS,SS,ES,FS,GS 
[EBP] 
SS 
CS,DS,ES,FS,GS 
. 
[ESP] 
SS 
CS,DS,ES,FS,GS 


The 
remaining 
6 modes 
provide 
a mechanism 
for 
specifying 
the effective 
address 
of an operand. 
The 
linear address 
consists 
of two components: 
the seg- 
ment 
base 
address 
and an effective 
address. 
The 
effective 
address 
is 
calculated 
by 
summing 
any 
combination 
of the following 
three address elements 
(see Figure 2.3): 


DISPLACEMENT: 
an 8, 16 or 32-bit immediate 
val- 
ue, following 
the instruction. 


BASE: The 
contents 
of any general 
purpose 
regis- 
ter. The base registers 
are generally 
used by compil- 
ers to point to the start of the local variable 
area. 


INDEX: The contents 
of any general 
purpose 
regis- 
ter except 
for ESP. The index registers 
are used to 
access 
the elements 
of an array, or a string of char- 
acters. 
The index register's 
value can be multiplied 
by a scale factor, either 1, 2, 4 or 8. The scaled index 
is especially 
useful 
for accessing 
arrays 
or struc- 
tures. 


Combinations 
of these 3 components 
make up the 6 
additional 
addressing 
modes. 
There 
is no perform- 
ance penalty for using any of these addressing 
com- 
binations, 
since the effective 
address 
calculation 
is 
pipelined 
with 
the 
execution 
of other 
instructions. 


The one exception 
is the simultaneous 
use of Base 
and Index components 
which requires 
one addition- 
al clock. 


As shown in Figure 2.4, the effective 
address 
(EA) of 
an operand 
is calculated 
according 
to the following 
formula: 


EA = BaSeRegister + (IndeXRegisterscaling) 


+ Displacement 


1. Direct 
Mode: 
The operand's 
offset 
is contained 
as part of the 
instruction 
as an 8, 16 or 32-bit 
displacement. 


2. Register 
Indirect 
Mode: 
A BASE 
register 
con- 
tains the address 
of the operand. 


3. Based 
Mode: 
A 
BASE 
register's 
contents 
are 
added 
to a DISPLACEMENT 
to form 
the 
oper- 


and's offset. 


4. Scaled 
Index 
Mode: 
An INDEX 
register's 
con- 
tents are multiplied 
by a SCALING 
factor, 
and the 
result is added to a DISPLACEMENT 
to form the 
operand's 
offset. 


5. Based 
Scaled 
Index 
Mode: The contents 
of an 
INDEX register 
are multiplied 
by a SCALING 
fac- 
tor, and the result 
is added 
to the contents 
of a 
BASE register 
to obtain the operand's 
offset. 


6. Based Scaled 
Index 
Mode with Displacement: 
The contents 
of an INDEX register 
are multiplied 
by a SCALING 
factor, 
and the result 
is added 
to 
the contents 
of a BASE register and a DISPLACE- 
MENT to form the operand's 
offset. 
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SEGMENT BASE ADDRESS 


DIFFERENCES 
BETWEEN 
16 AND 32 BIT 
ADDRESSES 


In order 
to provide 
software 
compatibility 
with the 
8086 and the 80286, 
the Intel386 
SX Microproces- 
sor can execute 
16-bit instructions 
in Real and Pro- 
tected 
Modes. The processor 
determines 
the size of 
the instructions 
it is executing 
by examining 
the D bit 
in a Segment 
Descriptor. 
If the 
D bit is 0 then 
all 
operand 
lengths 
and 
effective 
addresses 
are 
as- 
sumed 
to be 16 bits long. If the D bit is 1 then the 
default 
length for operands 
and addresses 
is 32 bits. 
In Real Mode the default 
size for operands 
and ad- 
dresses 
is 16 bits. 


Regardless 
of the default 
precision 
of the operands 
or addresses, 
the 
Intel386 
SX 
Microprocessor 
is 
able to execute 
either 
16 or 32-bit instructions. 
This 
is specified 
through 
the 
use 
of override 
prefixes. 
Two prefixes, 
the Operand 
Length 
Prefix 
and the 
Address 
Length 
Prefix, override 
the value of the D 


bit on an individual 
instruction 
basis. These 
prefixes 
are automatically 
added 
by assemblers. 


The Operand 
Length 
and Address 
Length 
Prefixes 
can be applied 
separately 
or in combination 
to any 
instruction. 
The Address 
Length 
Prefix does 
not al- 
low addresses 
over 
64K 
bytes 
to be accessed 
in 
Real 
Mode. 
A 
memory 
address 
which 
exceeds 
OFFFFH will result in a General 
Protection 
Fault. An 
Address 
Length Prefix only allows the use of the ad- 
ditional 
Intel386 
SX 
Microprocessor 
addressing 
modes. 


When executing 
32-bit code, the Intel386 
SX Micro- 
processor 
uses either 8 or 32-bit displacements, 
and 
any register 
can be used as base or index registers. 


When executing 
16-bit code, the displacements 
are 
either 8 or 16-bits, 
and the base and index register 


conform 
to the 80286 
model. 
Table 
2.4 illustrates 
the differences. 


• 


16·Blt Addressing 
32·Blt Addressing 


BASE REGISTER 
BX,BP 
Any 32-bit GP Register 
INDEX REGISTER 
SI,DI 
Any 32-bit GP Register 
Except ESP 
SCALE FACTOR 
None 
1,2,4,8 
DISPLACEMENT 
0, 8, 16-bits 
0, 8, 32-bits 


The Intel386 
SX Microprocessor 
supports 
all of the 
data types commonly 
used in high level languages: 


Bit: A single bit quantity. 


Bit Field: A group of up to 32 contiguous 
bits, which 
spans a maximum 
of four bytes. 


Bit String: A set of contiguous 
bits; on the Intel386 
SX Microprocessor, 
bit strings 
can be up to 4 giga- 
bits long. 


Byte: A signed 8-bit quantity. 


Unsigned 
Byte: An unsigned 
8-bit quantity. 


Integer 
(Word): 
A signed 
16-bit quantity. 


Long Integer 
(Double 
Word): A signed 32-bit quan- 
tity. All operations 
assume 
a 2's complement 
repre- 
sentation. 


Unsigned 
Integer 
(Word): 
An 
unsigned 
16-bit 
quantity. 


Unsigned 
Long 
Integer 
(Double 
Word): 
An un- 
signed 32-bit quantity. 


Signed 
Quad Word: A signed 64-bit quantity. 


Unsigned 
Quad Word: An unsigned 
64-bit quantity. 


Pointer: 
A 16 or 32-bit offset-only 
quantity 
which in- 
directly 
references 
another 
memory 
location. 


Long Pointer: 
A full pointer 
which consists 
of a 16- 
bit segment 
selector 
and either a 16 or 32-bit offset. 


Char: A byte representation 
of an ASCII Alphanu- 
meric or control 
character. 


String: 
A contiguous 
sequence 
of bytes, 
words 
or 
dwords. 
A string may contain 
between 
1 byte and 4 
gigabytes. 


BCD: A byte (unpacked) 
representation 
of decimal 
digits 0-9. 


Packed 
BCD: A byte (packed) 
representation 
of two 
decimal 
digits 0-9 
storing 
one digit in each nibble. 


When 
the 
Intel386 
SX Microprocessor 
is coupled 
with its numerics 
coprocessor, 
the Intel387 
SX, then 
the following 
common 
floating 
point types 
are sup- 
ported: 


Floating 
Point: A signed 32, 64, or 80-bit real num- 
ber representation. 
Floating 
point numbers 
are sup- 
ported 
by the Intel387 
SX numerics 
coprocessor. 


Figure 2.5 illustrates 
the data types supported 
by the 
Intel386 
SX Microprocessor 
and the Intel387 
SX. 


The 
Intel386 
SX Microprocessor 
has 
two 
distinct 
physical 
address 
spaces: 
physical 
memory 
and I/O. 
Generally, 
peripherals 
are placed 
in I/O 
space 
al- 
though 
the 
Intel386 
SX Microprocessor 
also 
sup- 
ports 
memory-mapped 
peripherals. 
The 
I/O 
space 
consists 
of 64K bytes which can be divided into 64K 
8-bit ports or 32K 16-bit ports, or any combination 
of 
ports which add up to no more than 64K bytes. The 
64K I/O address 
space refers to physical 
addresses 
rather 
than 
linear 
addresses 
since 
I/O 
instructions 
do not go through 
the segmentation 
or paging hard- 
ware. The M/IO# 
pin acts as an additional 
address 
line, thus allowing 
the system 
designer 
to easily de- 
termine 
which 
address 
space 
the processor 
is ac- 
cessing. 


The I/O 
ports are accessed 
by the IN and OUT in- 
structions, 
with the port address 
supplied 
as an im- 
mediate 8-bit constant 
in the instruction 
or in the OX 
register. 
All 8-bit and 16-bit port addresses 
are zero 
extended 
on the 
upper 
address 
lines. 
The 
I/O 
in- 
structions 
cause the M/lO# 
pin to be driven 
LOW. 
I/O 
port addresses 
00F8H 
through 
OOFFH are re- 
served for use by Intel. 


7 
0 
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SIGN BIT.JL-..J 
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7 
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0 
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~AGNITUDE 
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0 
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+3 
+2 
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0 
63 
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0 


SIGNED QUAD 
~ 
WORD I.L..L..L.L-L.. 


SIGN BIT .J,L. ~SB 
, 


~AGNITUDE 


+N 
7 
0 
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Interrupts 
and exceptions 
alter the normal 
program 
flow in order to handle external 
events, 
report errors 
or exceptional 
conditions. 
The 
difference 
between 
interrupts 
and exceptions 
is that interrupts 
are used 
to handle 
asynchronous 
external 
events 
while 
ex- 
ceptions 
handle 
instruction 
faults. 
Although 
a pro- 
gram can generate 
a software 
interrupt 
via an INT N 
instruction, 
the processor 
treats 
software 
interrupts 
as exceptions. 


Hardware 
interrupts 
occur as the result of an exter- 
nal event and are classified 
into two types: maskable 
or non-maskable. 
Interrupts 
are serviced 
after 
the 
execution 
of the current 
instruction. 
After the inter- 
rupt handler 
is finished 
servicing 
the interrupt, 
exe- 
cution 
proceeds 
with 
the 
instruction 
immediately 
after the interrupted 
instruction. 


intel~ 


Exceptions 
are classified 
as faults, 
traps, or aborts, 


depending 
on the way they are reported 
and wheth- 
er or not restart of the instruction 
causing the excep- 
tion is supported. 
Faults are exceptions 
that are de- 
tected 
and 
serviced 
before 
the 
execution 
of the 
faulting 
instruction. 
Traps 
are exceptions 
that 
are 
reported 
immediately 
after 
the execution 
of the in- 
struction 
which caused the problem. 
Aborts 
are ex- 
ceptions 
which do not permit the precise 
location 
of 
the 
instruction 
causing 
the 
exception 
to be deter- 
mined. 


Thus, 
when 
an interrupt 
service 
routine 
has been 
completed, 
execution 
proceeds 
from the instruction 
immediately 
following 
the interrupted 
instruction. 
On 
the other 
hand, the return 
address 
from 
an excep- 
tion fault routine 
will always 
point to the instruction 
causing 
the exception 
and will include 
any leading 
instruction 
prefixes. Table 2.5 summarizes 
the pOSSI- 


ble 
interrupts 
for 
the 
Intel386 
SX Microprocessor 
and shows where the return address 
points to. 


Instruction 
Which 
Return Address 
Interrupt 
Points to 
Function 
Number 
Can Cause 
Faulting 
Type 
Exception 
Instruction 


Divide Error 
0 
DIV,IDIV 
YES 
FAULT 


Debug Exception 
1 
any instruction 
YES 
TRAp· 


NMllnterrupt 
2 
INT 2 orNMI 
NO 
NMI 


One Byte Interrupt 
3 
INT 
NO 
TRAP 


Interrupt 
on Overflow 
4 
INTO 
NO 
TRAP 


Array Bounds Check 
5 
BOUND 
YES 
FAULT 


Invalid OP-Code 
6 
Any illegal instruction 
YES 
FAULT 


Device Not Available 
7 
ESC, WAIT 
YES 
FAULT 


Double Fault 
8 
Any instruction 
that can 
ABORT 
generate 
an exception 


Coprocessor 
Segment 
Overrun 
9 
ESC 
NO 
ABORT 


InvalidTSS 
10 
JMP, CALL, IRET, INT 
YES 
FAULT 


Segment 
Not Present 
11 
Segment 
Register 
Instructions 
YES 
FAULT 


0 __ 
- 
_ 
-- 


Stack Fault 
12 
Stack References 
YES 
FAULT 
-- 
General 
Protection 
Fault 
13 
Any Memory Reference 
YES 
FAULT 


Page Fault 
14 
Any Memory Access or Code Fetch 
YES 
FAULT 


Coprocessor 
Error 
16 
ESC, WAIT 
YES 
FAULT 


Intel Reserved 
17-32 


- 


Two Byte Interrupt 
33-255 
INTn 
NO 
TRAP 


The 
Intel386 
SX Microprocessor 
has the 
ability 
to 
handle 
up to 256 different 
interrupts/exceptions. 
In 
order to service the interrupts, 
a table with up to 256 
interrupt 
vectors 
must be defined. 
The interrupt 
vec- 
tors are simply 
pointers 
to the appropriate 
interrupt 
service 
routine. 
In Real Mode, the vectors 
are 4-byte 
quantities, 
a Code Segment 
plus a 16-bit offset; 
in 
Protected 
Mode, 
the 
interrupt 
vectors 
are 
8 byte 
quantities, 
which 
are put in an Interrupt 
Descriptor 
Table. 
Of the 
256 
possible 
interrupts, 
32 are 
re- 
served 
for use by Intel and the remaining 
224 are 
free to be used by the system 
designer. 


When an interrupt 
occurs, the following 
actions 
hap- 
pen. First, the current 
program 
address 
and Flags 
are saved 
on the stack 
to allow 
resumption 
of the 
interrupted 
program. 
Next, an 8-bit vector is supplied 
to the 
Intel386 
SX Microprocessor 
which 
identifies 
the appropriate 
entry in the interrupt 
table. The table 
contains 
the starting 
address 
of the interrupt 
service 
routine. 
Then, 
the 
user 
supplied 
interrupt 
service 
routine 
is executed. 
Finally, 
when 
an IRET instruc- 
tion is executed 
the old processor 
state is restored 
and program 
execution 
resumes 
at the appropriate 
instruction. 


The 8-bit interrupt 
vector 
is supplied 
to the Intel386 
SX Microprocessor 
in several different 
ways: excep- 
tions 
supply the interrupt 
vector 
internally; 
software 
INT instructions 
contain 
or imply the vector; 
maska- 
ble hardware 
interrupts 
supply 
the 8-bit vector 
via 
the 
interrupt 
acknowledge 
bus 
sequence. 
Non- 
Maskable 
hardware 
interrupts 
are assigned 
to inter- 
rupt vector 
2. 


Maskable 
interrupts 
are the 
most 
common 
way to 
respond 
to asynchronous 
external 
hardware 
events. 


A hardware 
interrupt 
occurs when the INTR is pulled 
HIGH and the Interrupt 
Flag bit (IF) is enabled. 
The 
processor 
only 
responds 
to interrupts 
between 
in- 
structions 
(string instructions 
have an 'interrupt 
win- 
dow' 
between 
memory 
moves 
which 
allows 
inter- 
rupts during 
long string 
moves). 
When 
an interrupt 
occurs 
the processor 
reads an 8-bit vector 
supplied 
by the hardware 
which 
identifies 
the source 
of the 
interrupt 
(one of 224 user defined 
interrupts). 


Interrupts 
through 
interrupt 
gates automatically 
reset 
IF, disabling 
INTR requests. 
Interrupts 
through 
Trap 
Gates leave the state of the IF bit unchanged. 
Inter- 
rupts through 
a Task Gate change 
the IF bit accord- 
ing to the image of the EFLAGs register 
in the task's 
Task State Segment 
(TSS). When 
an IRET instruc- 
tion 
is executed: 
the original 
state 
of the 
IF bit is 
restored. 


Non-Maskable 
Interrupt 


Non-maskable 
interrupts 
provide a method of servic- 
ing very high priority 
interrupts. 
When the NMI input 
is pulled HIGH it causes an interrupt with an internal- 
ly supplied 
vector 
value of 2. Unlike a normal 
hard- 
ware 
interrupt, 
no 
interrupt 
acknowledgment 
se- 
quence 
is performed 
for an NMI. 


While executing 
the NMI servicing 
procedure, 
the In- 
tet386 SX Microprocessor 
will not service any further 
NMI request 
or INT requests 
until an interrupt 
return 
(IRET) 
instruction 
is executed 
or the 
processor 
is 
reset. If NMI occurs while currently 
servicing 
an NMI, 


its presence 
will be saved for servicing 
after execut- 
ing the first IRET instruction. 
The IF bit is cleared 
at 
the beginning 
of an NMI interrupt 
to inhibit 
further 
INTR interrupts. 


Software 
Interrupts 


A third type of interrupti 
exception 
for the 
Intel386 
SX Microprocessor 
is the software 
interrupt. 
An INT 
n instruction 
causes 
the 
processor 
to execute 
the 


interrupt 
service 
routine 
pointed 
to by the nth vector 
in the interrupt 
table. 


A special case of the two byte software 
interrupt 
INT 
n is the one byte INT 3, or breakpoint 
interrupt. 
By 
inserting 
this one byte instruction 
in a program, 
the 
user can set breakpoints 
in his program 
as a debug- 


ging tool. 


A final type of software 
interrupt 
is the single 
step 
interrupt. 
It is discussed 
in Single Step Trap. 


• 


Interrupts 
are externally 
generated 
events. 
Maska- 


ble Interrupts 
(on the INTR input) and Non-Maskable 
Interrupts 
(on the 
NMI input) 
are recognized 
at in- 
struction 
boundaries. 
When 
NMI 
and 
maskable 
INTR are both 
recognized 
at the same 
instruction 
boundary, 
the 
Intel386 
SX Microprocessor 
invokes 
the NMI service 
routine 
first. 
If maskable 
interrupts 
are still enabled 
after 
the 
NMI service 
routine 
has 
been invoked, 
then the Intel386 
SX Microprocessor 
will invoke the appropriate 
interrupt 
service 
routine. 


As the Intel386 SX Microprocessor 
executes 
instruc- 
tions, 
it follows 
a consistent 
cycle 
in checking 
for 
exceptions, 
as shown 
in Table 2.6. This cycle is re- 


The 
Intel386 
SX Microprocessor 
fully 
supports 
re- 


starting all instructions 
after Faults. If an exception 
is 
detected 
in the instruction 
to be executed 
(exception 
categories 
4 through 
10 in Table 
2.6), the Intel386 
SX Microprocessor 
invokes 
the appropriate 
excep- 
tion service routine. The Intel386 SX Microprocessor 
is in a state that permits restart of the instruction, 
for 
all cases 
but those 
given in Table 2.7. Note that all 
such cases 
will be avoided 
by a properly 
designed 
operating 
system. 


Table 
2.6. Sequence 
of Exception 
Checking 


Consider 
the case of the Intel386 
SX Microprocessor 
having just completed 
an instruction. 
It then performs 
the following 
checks 
before 
reaching 
the point where the next instruction 
is completed: 


1. Check 
for Exception 
1 Traps 
from 
the instruction 
just completed 
(single-step 
via Trap 
Flag, or Data 
Breakpoints 
set in the Debug Registers). 


2. Check for external 
NMI and INTR. 


3. Check for Exception 
1 Faults in the next instruction 
(Instruction 
Execution 
Breakpoint 
set in the Debug 
Registers 
for the next instruction). 


4. Check for Segmentation 
Faults that prevented 
fetching 
the entire next instruction 
(exceptions 
11 or 13). 


5. Check for Page Faults that prevented 
fetching 
the entire next instruction 
(exception 
14). 


6. Check for Faults decoding 
the next instruction 
(exception 
6 if illegal opcode; 
exception 
6 if in Real Mode 
or in Virtual 8086 Mode and attempting 
to execute 
an instruction 
for Protected 
Mode only; or exception 
13 if instruction 
is longer than 15 bytes, or privilege 
violation 
in Protected 
Mode (Le. not at IOPL or at 
CPL=O). 


7. If WAIT opcode, 
check 
if TS= 
1 and MP= 1 (exception 
7 if both are 1). 


8. If ESCape 
opcode 
for numeric 
coprocessor, 
check 
if EM = 1 or TS = 1 (exception 
7 if either are 1). 


9. If WAIT opcode 
or ESCape opcode 
for numeric coprocessor, 
check ERROR# 
input signal (exception 
16 
if ERROR# 
input is asserted). 


10. Check 
in the following 
order for each memory 
reference 
required 
by the instruction: 


a. Check for Segmentation 
Faults that prevent 
transferring 
the entire memory 
quantity 
(exceptions 
11, 


12, 13). 


b. Check for Page Faults that prevent 
transferring 
the entire memory 
quantity 
(exception 
14). 


NOTE: 
Segmentation 
exceptions 
are generated 
before 
paging 
exceptions. 


Table 
2.7. Conditions 
Preventing 
Instruction 
Restart 


1. An instruction 
causes 
a task switch to a task whose 
Task State Segment 
is partially 
'not present' 
(An 
entirely 
'not present' 
TSS is restartable). 
Partially 
present 
TSS's 
can be avoided 
either by keeping 
the 
TSS's of such tasks present 
in memory, or by aligning TSS segments 
to reside entirely within a single 4K 
page (for TSS segments 
of 4K bytes or less). 


2. A coprocessor 
operand 
wraps around the top of a 64K-byte 
segment 
or a 4G-byte 
segment, 
and spans 
three pages, and the page holding the middle portion 
of the operand 
is 'not present'. 
This condition 
can 
be avoided 
by starting 
at a page 
boundary 
any segments 
containing 
coprocessor 
operands 
if the 
segments 
are approximately 
64K-200 
bytes or larger (Le. large enough 
for wraparound 
of the coproces- 
sor operand 
to possibly 
occur). 


Flag Word (EFLAGS) 
uuuuOO02H 
Note 1 
Machine 
Status Word (CRO) 
uuuuuu10H 
Instruction 
Pointer (EIP) 
OOOOFFFOH 
Code Segment 
(CS) 
FOOOH 
Note 2 
Data Segment 
(OS) 
OOOOH 
Note 3 
Stack Segment 
(SS) 
OOOOH 
Extra Segment 
(ES) 
OOOOH 
Note 3 
Extra Segment 
(FS) 
OOOOH 
Extra Segment 
(GS) 
OOOOH 
EAX register 
OOOOH 
Note 4 
EDX register 
component 
and stepping 
10 
Note 5 
All other registers 
undefined 
Note 6 


NOTES: 
1. EFLAG Register. The upper 14 bits of the EFLAGS register are undefined, all defined flag bits are zero. 
2. The Code Segment Register (CS) will have its Bdse Address set to OFFFFOOOOHand Limit set to OFFFFH. 
3. The Data and Extra Segment Registers (OS, ES) will have their Base Address set to OOOOOOOOOH 
and Limit set to 
OFFFFH. 
4. If self-test is selected, the EAX register should contain a 0 value. If a value of 0 is not found then the self-test has 
detected a flaw in the part. 
5. EDX register always holds component and stepping identifier. 
6. All undefined bits are Intel Reserved and should not be used. 


A Double 
Fault (exception 
8) results when the proc- 
essor 
attempts 
to invoke 
an exception 
service 
rou- 
tine for the segment 
exceptions 
(10, 11, 12 or 13), 
but in the process 
of doing so detects 
an exception 
other than a Page Fault (exception 
14). 


One other cause of generating 
a Double Fault is the 
Intel386 
SX Microprocessor 
detecting 
any other ex- 


ception 
when 
it is attempting 
to invoke 
the 
Page 
Fault (exception 
14) service routine (for example, 
if a 
Page Fault is detected 
when the Intel386 
SX Micro- 
processor 
attempts 
to invoke the Page Fault service 
routine). 
Of course, 
in any functional 
system, 
not 
only in Intel386 
SX Microprocessor-based 
systems, 
the 
entire 
page 
fault 
service 
routine 
must 
remain 
'present' 
in memory. 


When the processor 
is initialized 
or Reset the regis- 
ters 
have 
the values 
shown 
in Table 
2.8. The 
In- 
tel386 
SX Microprocessor 
will then 
start executing 
instructions 
near the top of physical 
memory, 
at lo- 
cation 
OFFFFFOH. 
When 
the 
first 
Intersegment 
Jump or Call is executed, 
address 
lines A20-A23 
will 
drop 
LOW for CS-relative 
memory 
cycles, 
and the 
Intel386 
SX 
Microprocessor 
will 
only 
execute 
in- 
structions 
in the 
lower 
one 
megabyte 
of physical 
memory. 
This allows 
the system 
designer 
to use a 
shadow 
ROM at the top of physical 
memory 
to ini- 
tialize the system 
and take care of Resets. 


RESET 
forces 
the 
Intel386 
SX Microprocessor 
to 
terminate 
all execution 
and local bus activity. 
No in- 
struction 
execution 
or bus activity 
will occur 
as long 
as Reset is active. Between 
350 and 450 CLK2 peri- 
ods after 
Reset 
becomes 
inactive, 
the Intel386 
SX 
Microprocessor 
will 
start 
executing 
instructions 
at 
the top of physical 
memory. 


2.9 Testability 


The 
Intel386 
SX Microprocessor, 
like the 
Intel386 
Microprocessor, 
offers 
testability 
features 
which 
in- 
clude a self-test 
and direct access to the page trans- 
lation cache. 


The 
Intel386 
SX Microprocessor 
has the capability 
to perform 
a self-test. 
The self-test 
checks 
the func- 
tion of all of the Control 
ROM and most of the non- 
random 
logic of the part. Approximately 
one-half 
of 
the Intel386 SX Microprocessor 
can be tested during 
self-test. 


Self-Test 
is initiated on the Intel386 
SX Microproces- 
sor when 
the 
RESET 
pin transitions 
from 
HIGH to 
LOW, 
and 
the 
BUSY# 
pin is LOW. 
The 
self-test 
takes about 220 clocks, or approximately 
33 millisec- 
onds with a 16 MHz Intel386 
SX CPU. At the com- 
pletion of self-test 
the processor 
performs 
reset and 
begins 
normal 
operation. 
The part has successfully 
passed 
self-test 
if the contents 
of the EAX are zero. 


If the results 
of the EAX are not zero then the self- 
test has detected 
a flaw in the part. 
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The 
Intel386 
SX 
Microprocessor 
also 
provides 
a 
mechanism 
for 
testing 
the 
Translation 
Lookaside 
Buffer 
(TLB) 
if desired. 
This 
particular 
mechanism 
may 
not 
be continued 
in the 
same 
way 
in future 
processors. 


There are two TLB testing 
operations: 
1) writing 
en- 
tries into the TLB, and, 2) performing 
TLB lookups. 


Two Test Registers, 
shown in Figure 2.6, are provid- 
ed for the purpose 
of testing. 
TR6 is the "test 
com- 
mand register", 
and TR7 is the "test 
data register". 
For a more detailed 
explanation 
of testing 
the TLB, 
see 
the 
Intel386™ 
SX 
Microprocessor 
Program- 
mer's 
Reference 
Manual. 


The 
Intel386 
SX Microprocessor 
provides 
several 
features 
which 
simplify 
the debugging 
process. 
The 


three categories 
of on-chip 
debugging 
aids are: 


1. The code execution 
breakpoint 
opcode 
(OCCH). 


2. The single-step 
capability 
provided 
by the TF bit 
in the flag register. 


3. The code and data breakpoint 
capability 
provided 
by the Debug Registers 
DRO-3, 
DR6, and DR7. 


BREAKPOINT 
INSTRUCTION 


A single-byte 
software 
interrupt 
(Int 3) breakpoint 
in- 
struction 
is available 
for use by software 
debuggers. 


The breakpoint 
opcode 
is OCCh, and generates 
an 


exception 
3 trap when executed. 


SINGLE·STEP 
TRAP 


If the single-step 
flag (TF, bit 8) in the EFLAG 
regis- 


ter is found to be set at the end of an instruction, 
a 
single-step 
exception 
occurs. 
The 
single-step 
ex- 
ception 
is auto vectored 
to exception 
number 
1. 


The 
Debug 
Registers 
are an advanced 
debugging 
feature 
of the Intel386 
SX Microprocessor. 
They al- 


low data access 
breakpoints 
as well as code execu- 


tion breakpoints. 
Since the breakpoints 
are indicated 
by on-chip 
registers, 
an instruction 
execution 
break- 


point can be placed in ROM code or in code shared 
by several 
tasks, neither of which can be supported 
by the INT 3 breakpoint 
opcode. 


The Intel386 
SX Microprocessor 
contains 
six Debug 
Registers, 
consisting 
of four breakpoint 
address 
reg- 


isters 
and two 
breakpoint 
control 
registers. 
Initially 


after 
reset, 
breakpoints 
are 
in the 
disabled 
state; 


therefore, 
no breakpoints 
will occur 
unless 
the de- 


bug registers 
are programmed. 
Breakpoints 
set up in 


the Debug Registers 
are auto-vectored 
to exception 
1. Figure 2.7 shows 
the breakpoint 
status 
and con- 
trol registers. 


CO~""AND 
WRITABLE------------------ 


USER 
---------------- 


DIRTY ------------- 


VALID 


__________ 
P_HYS_ICA_l_A_DD_R_ES_S 
--'~_~_~~ 
Pl 
REP 
TR7 


31 
12 
4 
3 
2 


BREAKPOINT 
0 
DEBUG 
r"'ULT/TRAP 


BREAKPOINT 
1 DEBUG 
r AUL T/TRAP 


BREAKPOINT 
2 DEBUG 
fAULT 
/TRAP 


BREAKPOINT 
3 
DEBUG 
fAULT/TRAP 


REGISTER 
ACCESS 
rAULT 


SINGlE-STEP 
DEBUG 
TRAP 


TASK 
SWITCH 
DEBUG 
TR .•.P 


GI: GLOBAL 
BREAKPOINT 
ENABLE 
I 
Li: 
LOCAL 
BREAKPOINT 
ENABLE 
I 


LOCAL 
EXACT 
BREAKPOINT 
•••.•.TCH 


GLOBAL 
EXACT 
BREAKPOINT 
MATCH 


GLOBAL 
DEBUG 
REGISTER 
ACCESS 
DrnCT 


DEBUG 
STATUS 
REGtSTER 


When the processor is reset or powered up it is ini- 
tialized in Real Mode. Real Mode has the same base 
architecture as the 8086, but allows access to the 
32-bit register set of the Intel386 SX Microproces- 
sor. The addressing mechanism, memory size, and 
interrupt handling are all identical to the Real Mode 
on the 80286. 


The default operand size in Real Mode is 16 bits, as 
in the 8086. In order to use the 32-bit registers and 
addressing modes, override prefixes must be used. 
In addition, the segment size on the Intel386 SX Mi- 
croprocessor in Real Mode is 64K bytes so 32-bit 
addresses must have a value less then OOOOFFFFH. 
The primary purpose of Real Mode is to set up the 
processor for Protected Mode operation. 


In Real Mode the linear addresses are the same as 
physical addresses (paging is not allowed). Physical 
addresses are formed in Real Mode by adding the 
contents of the appropriate segment register which 
is shifted left by four bits to an effective address. 
This addition results in a 20-bit physical address or a 
1 megabyte address space. Since segment registers 
are shifted left by 4 bits, Real Mode segments al- 
ways start on 16-byte boundaries. 


All segments in Real Mode are exactly 64K bytes 
long, and may be read, written, or executed The 
Intel386 SX Microprocessor will generate an excep- 
tion 13 if a data operand or instruction fetch occurs 
past the end of a segment. 
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Function 
Interrupt 
Related 
Return 
Number 
Instructions 
Address 
Location 


Interrupt 
table limit 
8 
INT vector is not 
Before 
too small 
within table limit 
Instruction 


CS, OS, ES, FS, GS 
13 
Word memory reference 
Before 
Segment 
overrun exception 
with offset = OFFFFH. 
Instruction 
an attempt 
to execute 
past the end of CS segment. 


SS Segment 
overrun 
12 
Stack Reference 
Before 
exception 
beyond offset = OFFFFH 
Instruction 


There 
are two fixed areas in memory 
which 
are re- 


served 
in Real address 
mode: the system 
initializa- 
tion 
area 
and 
the 
interrupt 
table 
area. 
Locations 
OOOOOHthrough 
003FFH 
are reserved 
for interrupt 
vectors. 
Each one of the 256 possible 
interrupts 
has 
a 
4-byte 
jump 
vector 
reserved 
for 
it. 
Locations 
OFFFFFOH through 
OFFFFFFH are reserved 
for sys- 
tem initialization. 


Many of the exceptions 
discussed 
in section 
2.7 are 
not applicable 
to Real Mode operation; 
in particular, 


exceptions 
10, 
11 and 
14 do 
not 
occur 
in Real 
Mode. 
Other 
exceptions 
have 
slightly 
different 
meanings 
in Real Mode; 
Table 
3.1 identifies 
these 
exceptions. 


The 
HLT instruction 
stops 
program 
execution 
and 
prevents 
the processor 
from using the local bus until 
restarted. 
Either 
NMI, 
FLT #, INTR 
with 
interrupts 
enabled 
(IF = 1), or RESET will force the Intel386 SX 
Microprocessor 
out of halt. If interrupted, 
the saved 
CS:IP will point to the next instruction 
after the HLT. 


Shutdown 
will occur when a severe error is detected 
that 
prevents 
further 
processing. 
In 
Real 
Mode, 


shutdown 
can occur 
under two conditions: 


1. An interrupt 
or an exception 
occurs 
(Exceptions 
8 
or 13) and the interrupt 
vector 
is larger than the 
Interrupt 
Descriptor 
Table. 


2. A CALL, 
INT 
or 
PUSH 
instruction 
attempts 
to 
wrap 
around 
the stack 
segment 
when 
SP is not 
even. 


An NMI input can bring the processor 
out of shut- 
down 
if the 
Interrupt 
Descriptor 
Table 
limit is large 
enough 
to contain 
the NMI interrupt 
vector 
(at least 


OOOFH) and the stack 
has enough 
room to contain 


the vector and flag information 
(Le. SP is greater that 


0005H). 
Otherwise, 
shutdown 
can only be exited by 


a processor 
reset. 


3.5 LOCK Operation 


The LOCK prefix on the Intel386 SX Microprocessor, 
even in Real Mode, 
is more restrictive 
than on the 


80286. 
This is due to the addition 
of paging 
on the 
Intel386 
SX Microprocessor 
in Protected 
Mode and 
Virtual 8086 Mode. The LOCK prefix is not support- 
ed during repeat string instructions. 


The only instruction 
forms where the LOCK prefix is 
legal on the Intel386 
SX Microprocessor 
are shown 
in Table 3.2. 


Opcode 
Operands 
(Dest, Source) 


BIT Test and 
SET/RESET 
Mem, Reg/Immediate 
/COMPLEMENT 


XCHG 
Reg, Mem 


XCHG 
Mem, Reg 


ADD, OR, ADC, SBB, 
AND, SUB, XOR 
Mem, Reg/Immediate 


NOT, NEG, INC, DEC 
Mem 


An exception 
6 will be generated 
if a LOCK prefix is 


placed 
before 
any instruction 
form 
or opcode 
not 


listed 
above. 
The 
LOCK 
prefix 
allows 
indivisible 
read/modify/write 
operations 
on memory 
operands 


using the instructions 
above. 


The 
LOCK 
prefix 
is 
not 
IOPL-sensitive 
on 
the 
Intel386 
SX Microprocessor. 
The 
LOCK 
prefix 
can 


be used 
at any privilege 
level, 
but only 
on the 
in- 


struction 
forms listed in Table 3.2 


4.0 
PROTECTED 
MODE 
ARCHITECTURE 


The complete capabilities of the Intel386 SX Micro- 
processor are unlocked when the processor oper- 
ates in Protected Virtual Address Mode (Protected 
Mode). Protected Mode vastly increases the linear 
address space to four gigabytes (232 bytes) and al- 
lows the running of virtual memory programs of al- 
most unlimited size (64 terabytes (246 bytes)). In ad- 
dition, Protected Mode allows the Intel386 SX Micro- 
processor to run all of the existing Intel386 OX CPU 
(using only 16 megabytes of physical memory), 
80286 and 8086 CPU's software, while providing a 
sophisticated memory management and a hard- 
ware-assisted 
protection 
mechanism. 
Protected 
Mode allows the use of additional instructions spe- 
cially optimized for supporting multitasking operating 
systems. The base architecture of the Intel386 SX 
Microprocessor remains the same; the registers, in- 
structions, and addressing modes described in the 
previous sections are retained. The main difference 
between Protected Mode and Real Mode from a 
programmer's viewpoint is the increased address 
space and a different addressing mechanism. 


4.1 Addressing 
Mechanism 


Like Real Mode, Protected Mode uses two compo- 
nents to form the logical address; a 16-bit selector is 
used to determine the linear base address of a seg- 
ment, the base address is added to a 32-bit effective 
address to form a 32-bit linear address. The linear 
address is then either used as a 24-bit physical ad- 
dress, or if paging is enabled the paging mechanism 
maps the 32-bit linear address into a 24-bit physical 
address. 


The difference between the two modes lies in calcu- 
lating the base address. In Protected Mode, the se- 
lector is used to specify an index into an operating 
system defined table (see Figure 4.1). The table 
contains the 32-bit base address of a given seg- 
ment. The physical address is formed by adding the 
base address obtained from the table to the offset. 


Paging provides an additional memory management 
mechanism which operates only in Protected Mode. 
Paging provides a means of managing the very large 
segments of the Intel386 SX Microprocessor, as 
paging operates beneath segmentation. The page 
mechanism translates the protected linear address 
which comes from the segmentation unit into a 
physical address. Figure 4.2 shows the complete In- 
tel386 SX Microprocessor addressing mechanism 
with paging enabled. 


Segmentation is one method of memory manage- 
ment. Segmentation provides the basis for protec- 
tion. Segments are used to encapsulate regions of 
memory which have common attributes. For exam- 
ple, all of the code of a given program could be con- 
tained in a segment, or an operating system table 
may reside in a segment. All information about each 
segment is stored in an 8 byte data structure called 
a descriptor. All of the descriptors in a system are 
contained in descriptor tables which are recognized 
by hardware. 


The following terms are used throughout the discus- 
sion of descriptors, privilege levels and protection: 
PL: 
Privilege Level--Qne of the four hierarchical 
privilege levels. Level 0 is the most privileged 
level and level 3 is the least privileged. 
RPL: Requestor Privilege Level-The 
privilege level 
of the original supplier of the selector. RPL is 
determined by the least two significant bits of 
a selector. 


DPL: Descriptor Privilege Level-This 
is the least 
privileged level at which a task may access 
that descriptor (and the segment associated 
with that descriptor). Descriptor Privilege Lev- 
el is determined by bits 6:5 in the Access 
Right Byte of a descriptor. 
CPL: Current Privilege Level-The 
privilege level at 
which a task is currently executing, which 
equals the privilege level of the code segment 
being executed. CPL can also be determined 
by examining the lowest 2 bits of the CS regis- 
ter, except for conforming code segments. 


EPL: Effective Privilege Level-The 
effective privi- 
lege level is the least privileged of the RPL 
and the DPL. EPL is the numerical maximum 
of RPL and DPL. 


Task: One instance of the execution of a program. 


Tasks are also referred to as processes. 


The descriptor tables define all of the segments 
which are used in a Intel386 SX Microprocessor sys- 
tem. There are three types of tables which hold de- 
scriptors: the Global Descriptor Table, Local De- 
scriptor Table, and the Interrupt Descriptor Table. All 
of the tables are variable length memory arrays and 
can vary in size from 8 bytes to 64K bytes. Each 
table can hold up to 8192 8-byte descriptors. The 
upper 13 bits of a selector are used as an index into 
the descriptor table. The tables have registers asso- 
ciated with them which hold the 32-bit linear base 
address and the 16-bit limit of each table. 
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Each of the tables 
has a register 
associated 
with it: 
GOTR, LDTR, and IOTR; see Figure 2.1. The LGOT, 
LLOT, and L10T instructions 
load the base and limit 
of the Global, 
Local, and Interrupt 
Descriptor 
Tables 
into the appropriate 
register. 
The SGOT, SLOT, and 
SlOT store the base and limit values. These are priv- 
ileged instructions. 


Global Descriptor 
Table 


The 
Global 
Descriptor 
Table 
(GOT) 
contains 
de- 
scriptors 
which 
are available 
to all of the tasks in a 
system. 
The GOT can contain 
any type of segment 
descriptor 
except 
for interrupt 
and trap descriptors. 
Every Intel386 
SX CPU system 
contains 
a GOT. 


The first slot of the Global 
Descriptor 
Table 
corre- 
sponds 
to the null selector 
and is not used. The null 
selector 
defines 
a null pointer 
value. 


Local Descriptor 
Table 


LOTs contain 
descriptors 
which are associated 
with 
a given task. 
Generally, 
operating 
systems 
are de- 
signed 
so that each task has a separate 
LOT. The 
LOT may contain 
only code, 
data, stack, task gate, 
and 
call gate 
descriptors. 
LOTs provide 
a mecha- 
nism for isolating 
a given task's 
code and data seg- 
ments 
from the rest of the operating 
system, 
while 
the 
GOT contains 
descriptors 
for segments 
which 
are common 
to all tasks. 
A segment 
cannot 
be ac- 
cessed 
by a task if its segment 
descriptor 
does not 
exist in either the current 
LOT or the GOT. This pro- 
vides both isolation 
and protection 
for a task's 
seg- 
ments 
while 
still allowing 
global 
data to be shared 
among tasks. 


Unlike the 6-byte GOT or lOT registers which contain 
a base address 
and limit, the visible 
portion 
of the 
LOT register 
contains 
only a 16-bit selector. 
This se- 
lector refers to a Local Descriptor 
Table descriptor 
in 
the GOT (see figure 2.1). 


Interrupt 
Descriptor 
Table 


The third table needed for Intel386 
SX Microproces- 
sor systems 
is the 
Interrupt 
Descriptor 
Table. 
The 
lOT contains 
the descriptors 
which point to the loca- 
tion of the up to 256 interrupt 
service 
routines. 
The 
lOT may contain only task gates, interrupt 
gates, and 
trap gates. The lOT should 
be at least 256 bytes in 
size in order to hold the descriptors 
for the 32 Intel 
Reserved 
Interrupts. 
Every interrupt 
used by a sys- 
tem must have an entry in the lOT. The lOT entries 
are referenced 
by INT instructions, 
external 
interrupt 
vectors, 
and exceptions. 


The object 
to which 
the segment 
selector 
points to 
is called 
a descriptor. 
Descriptors 
are 
eight 
byte 
quantities 
which contain 
attributes 
about a given re- 
gion 
of linear 
address 
space. 
These 
attributes 
in- 
clude the 32-bit base linear address 
of the segment, 
the 20-bit length and granularity 
of the segment, 
the 
protection 
level, 
read, 
write 
or execute 
privileges, 
the 
default 
size of the operands 
(16-bit 
or 32-bit), 
and the type of segment. 
All of the attribute 
informa- 
tion about 
a segment 
is contained 
in 12 bits in the 
segment 
descriptor. 
Figure 
4.4 shows 
the 
general 
format 
of a descriptor. 
All segments 
on the Intel386 
SX 
Microprocessor 
have 
three 
attribute 
fields 
in 
common: 
the P bit, the OPL bit, and the S bit. The P 


o 
BYTE 
ADDRESS 


o 
SEGMENT 
BASE 15 ... 
0 
SEGMENT 
LIMIT 15 ... 
0 


BASE 31 ... 
24 
G 
0 
0 
AVL 
LIMIT 
P 
OPL 
S 
TYPE 
A 
BASE 
19 ... 
16 
I 
I 
I 
23 ... 
16 


BASE 
BaseAddressof the segment 
LIMIT 
The lengthof the segment 
P 
PresentBit 
1= Present 
0= Not Present 
DPL 
DescriptorPrivilegeLevel0-3 
S 
SegmentDescriptor 
0= SystemDescriptor 
1= Codeor DataSegmentDescriptor 
TYPE 
Typeof Segment 
A 
AccessedBit 
G 
GranularityBit 
1= Segmentlengthis pagegranular 
0= Segmentlengthis byte granular 
D 
DefaultOperationSize(recognizedin codesegmentdescriptorsonly) 
1= 32·bitsegment 
0= 16-bitsegment 
o 
Bit mustbe zero (0)for compatibilitywith futureprocessors 
AVL 
Availablefield for useror OS 
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(Present) 
Bit is 1 if the segment 
is loaded in physical 
memory. 
If P = 0 then 
any attempt 
to access 
this 
segment 
causes 
a not present 
exception 
(exception 
11). The Descriptor 
Privilege 
Level, DPL, is a two bit 
field which specifies 
the protection 
level, 0-3, 
asso- 
ciated with a segment. 


ment or a code or data segment. 
If the S bit is 1 then 
the segment 
is either a code or data segment; 
if it is 


o then the segment 
is a system 
segment. 


The Intel386 
SX Microprocessor 
has two main cate- 
gories of segments: 
system 
segments 
and non-sys- 


tem segments 
(for code and data). The segment 
bit, 
S, determines 
if a given segment 
is a system 
seg- 


Code 
and Data Descriptors 
(5= 
1) 


Figure 4.5 shows 
the general 
format 
of a code and 


data descriptor 
and Table 4.1 illustrates 
how the bits 


in the Access 
Right Byte are interpreted. 


SEGMENT 
BASE 15 ... 
0 
SEGMENT 
LIMIT 15 ... 
0 


LIMIT 
ACCESS 
BASE 
BASE 31 ... 
24 
G 
0 
0 
AVL 
19 ... 
16 
RIGHTS 
23 ... 
16 
BYTE 


D/B 
1= Default Instructions Attributes are 32-Bits 
0= Default Instruction Attributes are 16-Bits 


AVL 
Available field for user or OS 


Granularity Bit 
1= Segment length is page granular 
0= Segment length is byte granular 
Bit must be zero (0) for compatibility with future processors 


Figure 
4.5. Code and Data Descriptors 


Table 
4.1. Access 
Rights 
Byte 
Definition 
for Code and Data Descriptors 


Bit 
Name 
Function 
Position 


7 
Present (P) 
P = 1 
Segment 
is mapped into physical 
memory. 
P=O 
No mapping to physical 
memory exists, base and limt are 
not used. 


6-5 
Descriptor 
Privilege 
Segment 
privilege attribute 
used in privilege tests. 


Level (DPL) 
4 
Segment 
Descrip- 
S = 1 
Code or Data (includes stacks) segment 
descriptor 
tor (5) 
5=0 
System Segment 
Descriptor 
or Gate Descriptor 


3 
Executable 
(E) 
E=O 
Descriptor 
type is data segment: 


} 


If 
2 
Expansion 
Direc- 
ED = 0 Expand up segment, 
offsets 
must be 
:5: limit. 
Data 
tion (ED) 
ED = 1 Expand down segment, 
offsets 
must be > limit. 
Segment 
1 
Writeable 
(W) 
W = 0 
Data segment 
may not be written into. 
(S = 
1, 
W = 1 
Data segment 
may be written into. 
E = 0) 


3 
Executable 
(E) 
E = 
1 
Descriptor 
type is code segment: 
If 
2 
Conforming 
(C) 
C=1 
Code segment 
may only be executed 
} 


Code 
when CPL ~ DPL and CPL 
Segment 


remains unchanged. 
(S = 1, 
1 
Readable 
(R) 
R=O 
Code segment 
may not be read. 
E = 1) 
R = 
1 
Code segment 
may be read. 


0 
Accessed 
(A) 
A=O 
Segment 
has not been accessed. 


A = 1 
Segment 
selector 
has been loaded into segment 
register 
or used by selector 
test instructions. 
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SEGMENT BASE 15 ... 0 


LIMIT 
19 ... 16 


Type 
Defines 


o 
Invalid 
1 
Available80286TSS 


2 
LOT 


3 
Busy80286TSS 


4 
80286CanGate 


5 
Task Gate (for 80286or Intel386TMSX 
MicroprocessorTask) 


6 
80286 InterruptGate 


7 
80286Trap Gate 


BASE 
23 ... 
16 


Type 
Defines 
8 
Invalid 
9 
AvailableIntel386™SX MicroprocessorTSS 


A 
Undefined(Intel Reserved) 


B 
BusyIntel386™SX MicroprocessorTSS 


C 
Intel386™SX MicroprocessorCanGate 


o 
Undefined(Intel Reserved) 


E 
Intel386™SX MicroprocessorInterruptGate 


F 
Intel386TMSX MicroprocessorTrap Gate 


Code and data segments have several descriptor 
fields in common. The accessed bit, A, is set when- 
ever the processor accesses a descriptor. The gran- 
ularity bit, G, specifies if a segment length is byte- 
granular or page-granular. 


System Descriptor 
Formats (S= 0) 


System segments describe information about oper- 
ating system tables, tasks, and gates. Figure 4.6 
shows the general format of system segment de- 
scriptors, and the various types of system segments. 
Intel386 SX system descriptors (which are the same 
as Intel386 DX CPU system descriptors) contain a 
32-bit base linear address and a 20-bit segment lim- 
it. 80286 system descriptors have a 24-bit base ad- 
dress and a 16-bit segment limit. 80286 system de- 
scriptors are identified by the upper 16 bits being all 
zero. 


Differences 
Between Intel386TM SX 
Microprocessor 
and 80286 Descriptors 


In order to provide operating system compatibility 
with the 80286 the Intel386 SX CPU supports all of 
the 80286 segment descriptors. The 80286 system 
segment descriptors contain a 24-bit base address 
and 16-bit limit, while the Intel386 SX CPU system 
segment descriptors have a 32-bit base address, a 
20-bit limit field, and a granularity bit. The word count 
field specifies the number of 16-bit quantities to copy 
for 
80286 
call 
gates and 32·bit quantities for 


Intel386 SX CPU call gates. 


A selector in Protected Mode has three fields: Local 
or Global Descriptor Table indicator (TI), Descriptor 
Entry Index (Index), and Requestor (the selector's) 
Privilege Level (RPL) as shown in Figure 4.7. The TI 
bit selects either the Global Descriptor Table or the 
Local Descriptor Table. The Index selects one of 8k 
descriptors in the appropriate descriptor table. The 
RPL bits allow high speed testing of the selector's 
privilege attributes. 


Segment Descriptor Cache 


In addition to the selector value, every segment reg- 
ister has a segment descriptor cache register asso- 
ciated with it. Whenever a segment register's con- 
tents are changed, the 8-byte descriptor associated 
with that selector is automatically loaded (cached) 
on the chip. Once loaded, all references to that seg- 
ment use the cached descriptor information instead 
of reaccessing the descriptor. The contents of the 
descriptor cache are not visible to the programmer. 
Since descriptor caches only change when a seg- 
ment register is changed, programs which modify 
the descriptor tables must reload the appropriate 
segment registers after changing a descriptor's val- 
ue. 


SEGt.4ENT 
REGISTER 


INDEX 
TABLE 
INDICATOR 


TI=1 


N 
N 


DESCRIPTOR 
NUt.4BER 


6 
6 


5 
5 


4 
4 
3 
DESCRIPTOR 
3 


2 
2 


0 
0 
NULL 


LOCAL 
GLOBAL 
DESCRIPTOR 
DESCRIPTOR 
TABLE 
TABLE 
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The Intel386 SX Microprocessor has four levels of 
protection which are optimized to support a multi- 
tasking operating system and to isolate and protect 
user programs from each other and the operating 
system. The privilege levels control the use of privi- 
leged instructions, I/O instructions, and access to 
segments and segment descriptors. The Intel386 SX 
Microprocessor also offers an additional type of pro- 
tection on a page basis when paging is enabled. 


The four-level hierarchical privilege system is an ex- 
tension of the user/supervisor privilege mode com- 
monly used by minicomputers. The user/supervisor 
mode is fully supported by the Intel386 SX Micro- 
processor paging mechanism. The privilege levels 
(PL) are numbered 0 through 3. Level 0 is the most 
privileged level. 


The Intel386 SX Microprocessor controls access to 
both data and procedures between levels of a task, 
according to the following rules. 
- 
Data stored in a segment with privilege level p 
can be accessed only by code executing at a 
privilege level at least as privileged as p. 


- 
A code segment/procedure with privilege level p 
can only be called by a task executing at the 
same or a lesser privilege level than p. 


At any point in time, a task on the Intel386 SX Micro- 
processor always executes at one of the four privi- 
lege levels. The Current Privilege Level (CPL) speci- 
fies what the task's privilege level is. A task's CPL 
may only be changed by control transfers through 
gate descriptors to a code segment with a different 
privilege level. Thus, an application program running 
at PL=3 may call an operating system routine at 
PL= 1 (via a gate) which would cause the task's CPL 
to be set to 1 until the operating system routine was 
finished. 


Selector 
Privilege 
(RPL) 


The privilege level of a selector is specified by the 
RPL field. The selector's RPL is only used to estab- 
lish a less trusted privilege level than the current 
privilege level of the task for the use of a segment. 
This level is called the task's effective privilege level 
(EPL). The EPL is defined as being the least privi- 
leged (numerically larger) level of a task's CPL and a 
selector's RPL. The RPL is most commonly used to 
verify that pointers passed to an operating system 
procedure do not access data that is of higher privi- 
lege than the procedure that originated the pointer. 
Since the originator of a selector can specify any 
RPL value, the Adjust RPL (ARPL) instruction is pro- 
vided to force the RPL bits to the originator's CPL. 


Control Transfer 
Types 
Operation 
Types 
Descriptor 
Descriptor 
Referenced 
Table 


Intersegment 
within the same privilege 
level 
JMP, CALL RET, IRET* 
Code Segment 
GOT/LOT 


Intersegment 
to the same or higher privilege 
level 
CALL 
Call Gate 
GOT/LOT 
Interrupt 
within task may change CPL 
Interrupt 
instruction 
Trap or 
lOT 
Exception 
External 
Interrupt 
Interrupt 
Gate 


Intersegment 
to a lower privilege 
level 
RET,IRET* 
Code Segment 
GOT/LOT 
(changes 
task CPL) 


CALL,JMP 
Task State 
GOT 
Segment 


Task Switch 
CALL, JMP 
Task Gate 
GOT/LOT 


IRET** 
Task Gate 
lOT 
Interrupt 
instruction, 
Exception, 
External 
Interrupt 


"NT (Nested Task bit of flag register) = 0 
""NT (Nested Task bit of flag register) = 1 


I/O 
Privilege 


The I/O privilege 
level (IOPL) lets the operating 
sys- 
tem code executing 
at CPL =0 define the least privi- 
leged level at which I/O instructions 
can be used. An 
exception 
13 (General 
Protection 
Violation) 
is gener- 
ated if an I/O instruction 
is attempted 
when the CPL 
of the 
task 
is less 
privileged 
then 
the 
10PL. The 
10PL is stored in bits 13 and 14 of the EFLAGS 
reg- 
ister. The following 
instructions 
cause an exception 
13 if the CPL is greater 
than 
10PL: IN, INS, OUT, 
OUTS, STI, CLI, LOCK prefix. 


Descriptor 
Access 


There are basically 
two types of segment 
accesses: 


those 
involving 
code 
segments 
such 
as 
control 
transfers, 
and those 
involving 
data accesses. 
Oeter- 
mining the ability of a task to access 
a segment 
in- 
volves 
the type of segment 
to be accessed, 
the in- 


struction 
used, the type of descriptor 
used and CPL, 
RPL, and OPL as described 
above. 


Any time an instruction 
loads a data segment 
regis- 
ter (OS, ES, FS, GS) the Intel386 SX Microprocessor 
makes protection 
validation 
checks. 
Selectors 
load- 
ed in the OS, ES, FS, GS registers 
must refer only to 
data segment 
or readable 
code segments. 


Finally the privilege validation 
checks are performed. 


The CPL is compared 
to the EPL and if the EPL is 
more privileged 
than the CPL, an exception 
13 (gen- 
eral protection 
fault) is generated. 


The rules regarding 
the stack 
segment 
are slightly 
different 
than 
those 
involving 
data 
segments. 
In- 


structions 
that load selectors 
into SS must refer to 
data 
segment 
descriptors 
for 
writeable 
data 
seg- 
ments. The OPL and RPL must equal the CPL of all 
other 
descriptor 
types 
or a privilege 
level violation 
will cause an exception 
13. A stack not present 
fault 
causes 
an exception 
12. 


Inter-segment 
control 
transfers 
occur when a selec- 
tor is loaded 
in the CS register. 
For a typical 
system 
most of these transfers 
are simply the result of a call 
or a jump to another 
routine. There are five types of 
control 
transfers 
which are summarized 
in Table 4.2. 


Many 
of these 
transfers 
result 
in a privilege 
level 
transfer. 
Changing 
privilege 
levels 
is done 
only 
by 
control 
transfers, 
using gates, task switches, 
and in- 
terrupt 
or trap gates. 


Control 
transfers 
can 
only 
occur 
if the 
operation 
which loaded the selector 
references 
the correct 
de- 


scriptor 
type. Any violation 
of these descriptor 
usage 
rules will cause an exception 
13. 
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15 
00 .J 


0000000000000000 
BACK LINK 


ESPO 
4 


0000000000000000 
I 
SSO 
B 


ESPI 
C 


0000000000000000 
I 
SSl 
10 


ESP2 
14 


0000000000000000 
I 
SS2 
18 


CR3 
lC 


EIP 
20 


ErLAGS 
24 


EAX 
28 


ECX 
2C 


EOX 
30 


EBX 
34 


ESP 
38 


EBP 
3C 


ESI 
40 


EOI 
44 


0000000000000000 
ES 
48 


0000000000000000 
CS 
4C 


0000000000000000 
SS 
50 


0000000000000000 
OS 
54 


0000000000000000 
rs 
58 


0000000000000000 
GS 
5C 


0000000000000000 
LOT 
60 


BILMAP _OrrSET( 15:0) 
0000000000000000 
IT 
64 


AVAILABLE 
---- 


~ 


SYSTEM STATUS. ETC. 


IN TSS 


31 
24 
23 
16 
15 
8 
7 
0 


63 
56 
55 
4B 
47 
40 
39 
32 
BILM 


95 
88 
87 
80 
79 
72 
71 
64 
,,---_ ..... -------. 
96 
orrs 
, 
ACCESSI 
TSS 
, 
, 
, - 
orrSE 
, 
RIGHTS 
LIMIT 
, 
, 
, 
, 
.;. 
, 
BASE 
I/O 
PERMISSION BITMAP 
,, 
, 
65407 
(ONE BIT PER BYTE I/O 
OrrSE 
: 31 
PROGRAM 
0: 
PORT. BITMAP MAY BE 
. 
INVISIBLE 
, 
65439 
TRUNCATEDUSING TSS LIMIT.) 
orrs 
• 
_____________ 
<f 


TASK REGISTER 
65471 
• 
orrs 
I- 


65503 
I 
65472 
orrs 
TR 
SELECTOR 
65535 
65504 
orrs 


15 
0 
"rrH" 
orrs 
t TSS LIMIT= or 
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TSS DESCRIPTOR(IN GOT) 
0 


SEGMENTBASE 15 ...0 
SEGMENTLIMIT 15•.0 


BASE 31..24 H1I010 11~~i~ 
PIO~L 101 •TYrE• I 
BASE 
23 .. 16 


Type 
= 9: Available 
Intel386TM 
SX Microprocessor 
TSS. 


Type = B: Busy Intel386 
SX Microprocessor 
TSS. 


STACKS 
rOR 
CPL 0.1.2 


CURRENT 
TASK 
STATE 


ET + C 


T + 10 


T + lrEC 


ET+ 
lrro 


ET+lrr4 


ET + lrr8 


ET+ 
lrrc 


ET + 2000 


1 , 
1 , 0 
1 , o 
0 
0 o 
0 
1 
1 
1 
1 
0 , o 
0 , 
1 
0 
0 o 
0 
0 
0 
0 
0 , 
1 
o 
0 
1 
0 
0 
0 
I 
1 
1 
1 o 
0 
1 
0 , 0 
1 
1 
1 , 
1 
1 
0 
0 
1 
I 
1 , 
1 o 
0 
1 


1 
1 
1 
1 
1 
1 
1 
1 , 
1 
1 
1 
1 
1 
I 
1 , 
1 
1 
I 
1 
1 
I 
1 
1 
1 
1 
1 
1 
1 
1 
1 


0 o 
0 
0 o 
0 o 
0 
0 o 
0 
0 o 
0 o 
0 
0 o 
0 
0 o 
0 
0 o 
0 o 
0 
0 o 
0 o 
0 


1 
1 , 
1 , 
1 
1 , 


etc. 
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CALL GATES 


Gates provide 
protected 
indirect 
CALLs. One of the 
major uses of gates is to provide a secure method 
of 
privilege 
transfers 
within a task. Since the operating 
system 
defines 
all of the gates 
in a system, 
it can 
ensure that all gates only allow entry into a few trust- 
ed procedures. 


TASK 
SWITCHING 


A very important 
attribute 
of any multi-tasking/multi- 
user operating 
system 
is its ability to rapidly 
switch 
between 
tasks or processes. 
The Intel386 SX Micro- 
processor 
directly 
supports 
this operation 
by provid- 
ing a task 
switch 
instruction 
in hardware. 
The task 
switch 
operation 
saves 
the entire 
state 
of the 
ma- 
chine (all of the registers, 
address 
space, and a link 
to the previous 
task), 
loads a new execution 
state, 
performs 
protection 
checks, 
and commences 
execu- 
tion 
in the 
new 
task. 
Like 
transfer 
of 
control 
by 
gates, 
the task switch 
operation 
is invoked 
by exe· 
cuting 
an 
inter-segment 
JMP 
or CALL 
instruction 
which 
refers 
to a Task 
State 
Segment 
(TSS), or a 
task gate descriptor 
in the GOT or LOT. An INT n 
instruction, 
exception, 
trap, or external 
interrupt 
may 
also 
invoke 
the task 
switch 
operation 
if there 
is a 
task gate descriptor 
in the associated 
lOT descriptor 
slot. 


The TSS descriptor 
points to a segment 
(see Figure 
4.8) 
containing 
the 
entire 
execution 
state. 
A task 
gate 
descriptor 
contains 
a 
TSS 
selector. 
The 
Intel386 
SX 
Microprocessor 
supports 
both 
the 
80286 
and 
Intel386 
SX CPU TSSs. 
The 
limit of a 
Intel386 
SX Microprocessor 
TSS 
must 
be greater 
than 64H 
(2BH for an 80286 
TSS), and can be as 
large as 16 megabytes. 
In the additional 
TSS space, 
the operating 
system is free to store additional 
infor- 
mation 
such as the reason the task is inactive, 
time 
the task has spent 
running, 
or open files belonging 
to the task. 


Each task must have a TSS associated 
with it. The 
current 
TSS is identified 
by a special 
register 
in the 
Intel386 
SX Microprocessor 
called 
the Task 
State 
Segment 
Register 
(TA). This register 
contains 
a se- 
lector 
referring 
to the task state segment 
descriptor 
that defines the current TSS. A hidden base and limit 
register 
associated 
with TSS descriptor 
are loaded 
whenever 
TR is loaded with a new selector. 
Return- 
ing from a task 
IS accomplished 
by the IRET instruc- 
tion. When 
IRET is executed, 
control 
is returned 
to 


the task which 
was interrupted. 
The currently 
exe- 
cuting task's 
state 
is saved 
in the TSS and the old 
task state is restored 
from its TSS. 


Several 
bits in the flag register 
and machine 
status 
word 
(CRO) give 
information 
about 
the 
state 
of a 
task 
which 
is useful 
to the 
operating 
system. 
The 
Nested 
Task 
bit, NT, controls 
the 
function 
of the 
IRET instruction. 
If NT = 0 the IRET instruction 
per- 
forms 
the regular 
return. 
If NT= 
1 IRET performs 
a 
task switch operation 
back to the previous 
task. The 
NT bit is set or reset in the following 
fashion: 


When a CALL or INT instruction 
initiates 
a task 
switch, 
the new TSS will be marked 
busy and 
the back link field of the new TSS set to the old 
TSS selector. 
The NT bit of the new task is set 
by CALL or INT initiated 
task switches. 
An in- 
terrupt 
that 
does 
not cause 
a task 
switch 
will 
clear NT (The NT bit will be restored 
after exe- 
cution of the interrupt 
handler). 
NT may also be 
set or cleared 
by POPF or IRET instructions. 


The Intel386 
SX Microprocessor 
task state segment 
is marked busy by changing 
the descriptor 
type field 
from 
TYPE 
9 to 
TYPE 
OBH. 
An 
80286 
TSS 
is 
marked 
busy by changing 
the descriptor 
type field 
from TYPE 1 to TYPE 3. Use of a selector 
that refer- 
ences a busy task state segment 
causes 
an excep- 
tion 13. 


The VM (Virtual Mode) bit is used to indicate 
if a task 
is a Virtual 
8086 task. 
If VM = 1 then the tasks 
will 
use the Real Mode addressing 
mechanism. 
The vir- 


tual 8086 environment 
is only entered 
and exited by 
a task switch. 


The coprocessor's 
state 
is not automatically 
saved 
when a task switch 
occurs. 
The Task Switched 
Bit, 
TS, in the CRO register helps deal with the coproces- 
sor's state in a multi-tasking 
environment. 
Whenever 
the 
Intel386 
SX 
Microprocessor 
switches 
task, 
it 
sets the TS bit. The Intel386 
SX Microprocessor 
de- 
tects 
the first use of a processor 
extension 
instruc- 
tion after 
a task 
switch 
and causes 
the processor 
extension 
not available 
exception 
7. The exception 
handler for exception 
7 may then decide whether 
to 
save the state of the coprocessor. 


The 
T bit in the 
Intel386 
SX Microprocessor 
TSS 
indicates 
that the processor 
should 
generate 
a de- 
bug exception 
when switching 
to a task. If T = 1 then 
upon entry to a new task a debug exception 
1 will be 
generated. 


INITIALIZATION 
AND TRANSITION 
TO 
PROTECTED 
MODE 


Since the Intel386 SX Microprocessor begins exe- 
cuting in Real Mode immediately after RESET it is 
necessary to initialize the system tables and regis- 
ters with the-appropriate values. The GDT and IDT 
registers must refer to a valid GDT and IDT. The IDT 
should be at least 256 bytes long, and the GDT must 
contain descriptors for the initial code and data seg- 
ments. 


Protected Mode is enabled by loading CRa with PE 
bit set. This can be accomplished by using the MOV 
CRO, 
RIM 
instruction. After enabling 
Protected 
Mode, the next instruction should execute an inter- 
segment JMP to load the CS register and flush the 
instruction decode queue. The final step is to load all 
of the data segment registers with the initial selector 
values. 


An alternate approach to entering Protected Mode is 
to use the built in task-switch to load all of the regis- 
ters. In this case the GDT would contain two TSS 
descriptors in addition to the code and data descrip- 
tors needed for the first task. The first JMP instruc- 
tion in Protected Mode would jump to the TSS caus- 
ing a task switch and loading all of the registers with 
the values stored in the TSS. The Task State Seg- 
ment Register should be Initialized to point to a valid 
TSS descriptor. 
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• 
DIRECTORY 


CRO 


CR1 


CR2 


CR3 
ROOT 


CONTROL 
REGISTERS 


Paging is another type of memory management use- 
ful for virtual memory multi-tasking operating sys- 
tems. Unlike segmentation, which modularizes pro- 
grams and data into variable length segments, pag- 
ing divides programs into multiple uniform size 
pages. Pages bear no direct relation to the logical 
structure of a program. While segment selectors can 
be considered the logical 'name' of a program mod- 
ule or data structure, a page most likely corresponds 
to only a portion of a module or data structure. 


The Intel386 SX Microprocessor uses two levels of 
tables to translate the linear address (from the seg- 
mentation unit) into a physical address. There are 
three components to the paging mechanism of the 
Intel386 SX Microprocessor: the page directory, the 
page tables, and the page itself (page frame). All 
memory-resident elements of the Intel386 SX Micro- 
processor paging mechanism are the same size, 
namely 4K bytes. A uniform size for all of the ele- 
ments simplifies memory allocation and reallocation 
schemes, since there is no problem with memory 
fragmentation. Figure 4.1a shows how the paging 
mechanism works. 


System 
U 
R 
PAGE TABLE ADDRESS 31..12 
Software 
a 
a 
D 
A 
a 
a - - 
P 
Defineable 
S 
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Figure 
4.12. Page Table 
Entry 
(Points 
to Page) 


dress. 
The 
contents 
of 
a 
Page 
Table 
Entry 
are 
shown in figure 4.12. The middle 10 bits of the linear 
address 
(A21-A12) 
are used as an index to select 
the correct 
Page Table 
Entry. 


The Page Frame Address 
contains 
the upper 20 bits 
• 
of a 32-bit physical 
address 
that is used as the base 
address for the Page Frame. The lower 12 bits of the 
Page 
Frame 
Address 
are 
zero 
so that 
the 
Page 
Frame addresses 
appear on 4 kbyte boundaries. 
For 
an Intel386 
DX CPU system 
the upper 
20 bits will 
select 
one 
of 
220 
Page 
Frames, 
but 
for 
an 
l~te1386 SX Microprocessor 
system 
the 
upper 
20 
~ltS only select one of 212 Page Frames. Again, this 
IS because 
the Intel386 
SX Microprocessor 
is limited 
t~ a 24-bit physical 
address 
space 
and the upper 8 
bits 
(A24-A31) 
are truncated 
when 
the 
address 
is 
output on its 24 address 
pins. 


System 
Software 
Defineable 


CR2 
is the 
Page 
Fault 
Linear 
Address 
register. 
It 
holds the 32-bit linear address which caused the last 
Page Fault detected. 


Page Descriptor 
Base Register 


CR3 
is the 
Page 
Directory 
Physical 
Base 
Address 
Register. 
It contains 
the physical 
starting 
address 
of 
the Page Directory 
(this value is truncated 
to a 24-bit 
value 
associated 
with 
the 
Intel386 
SX CPU's 
16 
megabyte 
physical 
memory 
limitation). 
The lower 12 
bi~s of CR~ are always zero to ensure that the Page 
Directory 
IS always 
page aligned. 
Loading 
it with a 
MOV CR3, reg instruction 
causes the page table en- 
try cache to be flushed, 
as will a task switch through 
a TSS which changes 
the value of CRO. 


Page Directory 


The Page Directory 
is 4k bytes long and allows up to 
1024 page directory 
entries. 
Each page directory 
en- 
try contains 
information 
about 
the 
page 
table 
and 
the 
address 
of the 
next 
level 
of tables, 
the 
Page 
Tables. 
The contents 
of a Page Directory 
Entry are 
shown 
in figure 4.11. The upper 10 bits of the linear 
address 
(A31-A22) 
are used as an index to select 
the correct 
Page Directory 
Entry. 


The page table 
address 
contains 
the upper 
20 bits 
of a 32-bit physical 
address that is used as the base 
address 
for the next set of tables, 
the page tables. 


The lower 12 bits of the page table address are zero 
so that the page table addresses 
appear on 4 kbyte 
boundaries. 
For a Intel386 
DX CPU system 
the up- 
per 20 bits will select one of 220 page tables, but for 
a Intel386 
SX Microprocessor 
system 
the upper 20 
bits only select one of 212 page tables. Again, this is 
because 
the Intel386 SX Microprocessor 
is limited to 
a 24-bit physical 
address 
and the upper 8 bits (A24- 
A31) are truncated 
when the address 
is output on its 
24 address 
pins. 


Page Tables 


Each Page Table is 4K bytes long and allows 
up to 
1024 Page table Entries. Each page table entry con- 
tains information 
about the Page Frame and its ad- 


Page Directory/Table 
Entries 


The 
lower 
12 bits of the 
Page 
Table 
Entries 
and 
Page Directory 
Entries contain 
statistical 
information 
about 
pages 
and 
page 
tables 
respectively. 
The 
P 
(Present) 
bit indicates 
if a Page Directory 
or Page 
Table 
entry 
can be used 
in address 
translation. 
If 
P = 1, the entry can be used for address 
translation. 
If P =0, the entry cannot 
be used for translation. 
All 
of the other 
bits are available 
for use by the 
soft- 
ware. 
For example, 
the remaining 
31 bits could 
be 
used to indicate 
where 
on disk the page is stored. 


The A (Accessed) 
bit is set by the Intel386 
SX CPU 
for both types 
of entries 
before 
a read or write 
ac- 
cess occurs to an address covered 
by the entry. The 
D (Dirty) bit is set to 1 before 
a write to an address 
covered 
by that page table entry occurs. The D bit is 
undefined 
for Page Directory 
Entries. When the P, A 
and D bits are updated 
by the Intel386 
SX CPU, the 
pr~cessor 
generates 
a 
Read- 
Modify-Write 
cycle 
which locks the bus and prevents 
conflicts 
with oth- 
er processors 
or peripherals. 
Software 
which 
modi- 
fies these bits should use the LOCK prefix to ensure 
the integrity 
of the page tables 
in multi-master 
sys- 
tems. 


The 3 bits marked 
system 
software 
definable 
in Fig- 
ures 4.11 
and 
Figure 
4.12 
are software 
definable. 
System 
software 
writers 
are free to use these 
bits 
for whatever 
purpose 
they wish. 


PAGE LEVEL 
PROTECTION 
(R/W, U/S BITS) 


The Intel386 SX Microprocessor provides a set of 
protection attributes for paging systems. The paging 
mechanism distinguishes between two levels of pro- 
tection: User, which corresponds to level 3 of the 
segmentation 
based 
protection, 
and 
supervisor 
which encompasses all of the other protection levels 
(0, 1, 2). Programs executing at Level 0, 1 or 2 by- 
pass the page protection, although segmentation- 
based protection is still enforced by the hardware. 


The U/S and R/W bits are used to provide User/Su- 
pervisor and Read/Write protection for individual 
pages or for all pages covered by a Page Table Di- 
rectory Entry. The U/S and R/W bits in the second 
level Page Table Entry apply only to the page de- 
scribed by that entry. While the U/S and R/W bits in 
the first level Page Directory Table apply to all pages 
described by the page table pointed to by that direc- 
tory entry. The U/S and R/W bits for a given page 
are obtained by taking the most restrictive of the 
U/S and R/W from the Page Directory Table Entries 
and using these bits to address the page. 


The Intel386 SX Microprocessor paging hardware is 
designed to support demand paged virtual memory 
systems. 
However, performance would 
degrade 
substantially if the processor was required to access 
two levels of tables for every memory reference. To 
solve this problem, the Intel386 SX Microprocessor 
keeps a cache of the most recently accessed pages, 
this cache is called the Translation Lookaside Buffer 
(TLB). The TLB is a four-way set associative 32-en- 
try page table cache. It automatically keeps the most 
commonly used page table entries in the processor. 
The 32-entry TLB coupled with a 4K page size re- 
sults in coverage of 128K bytes of memory address- 
es. For many common multi-tasking systems, the 
TLB will have a hit rate of greater than 98%. This 
means that the processor will only have to access 
the two-level page structure for less than 2% of all 
memory references. 


The paging hardware operates in the following fash- 
ion. The paging unit hardware receives a 32-bit lin- 
ear address from the segmentation unit. The upper 
20 linear address bits are compared with all 32 en- 
tries in the TLB to determine if there is a match. If 
there is a match (Le.a TLB hit), then the 24-bit phys- 
ical address is calculated and is placed on the ad- 
dress bus. 


If the page table entry is not in the TLB, the Intel386 
SX Microprocessor will read the appropriate Page 
Directory Entry. If P= 1 on the Page Directory Entry, 
indicating that the page table is in memory, then the 
Intel386 SX Microprocessor will read the appropriate 


Page Table Entry and set the Access bit. If P= 1 on 
the Page Table Entry, indicating that the page is in 
memory, the Intel386 SX Microprocessor will update 
the Access and Dirty bits as needed and fetch the 
operand. The upper 20 bits of the linear address, 
read from the page table, will be stored in the TLB 
for future accesses. If P= 0 for either the Page Di- 
rectory Entry or the Page Table Entry, then the proc- 
essor will generate a page fault Exception 14. 


The processor will also generate a Page Fault (Ex- 
ception 14) if the memory reference violated the 
page protection attributes. CR2 will hold the linear 
address which caused the page fault. Since Excep- 
tion 14 is classified as a fault, CS:EIPwill point to the 
instruction causing the page-fault. The 16-bit error 
code pushed as part of the page fault handler will 
contain status bits which indicate the cause of the 
page fault. 


The 16-bit error code is used by the operating sys- 
tem to determine how to handle the Page Fault. Fig- 
ure 4.13 shows the format of the Page Fault error 
code and the interpretation of the bits. Even though 
the bits in the error code (U/S, W/R, and P) have 
similar names as the bits in the Page Directory/Ta- 
ble Entries, the interpretation of the error code bits is 
different. Figure 4.14 indicates what type of access 
caused the page fault. 


UW 
U U U U U U U U U U U U U U - - P 
S R 


U/S: The U/S bit indicates whether the access 
causing the fault occurred when the processor was 
executing in User Mode (U/S = 1) or in Supervisor 
mode (U/S = 0) 


W/R: The W/R bit indicates whether the access 
causing the fault was a Read (W/R = 0) or a Write 
(W/R 
= 1) 


P: The P bit indicates whether a page fault was 
caused by a not-present page (P = 0), or by a page 
level protection violation (P = 1) 


U/S 
W/R 
Access Type 


0 
0 
Supervisor' Read 
0 
1 
Supervisor Write 
1 
0 
User Read 
1 
1 
User Write 


'Descriptor table access will fault with U/S = 0, even if 
the program is executing at level 3. 
Figure 4.14. Type of Access Causing 
Page Fault 


OPERATING 
SYSTEM 
RESPONSIBILITIES 


When the operating system enters or exits paging 
mode (by setting or resetting bit 31 in the CROregis- 
ter) a short JMP must be executed to flush the I~- 
tel386 SX Microprocessor's prefetch queue. This 
ensures that all instructions executed after the ad- 
dress mode change will generate correct addresses. 


The Intel386 SX Microprocessor takes care of the 
page address translation process, relieving the bur- 
den from an operating system in a demand-paged 
system. The operating system is responsible for set- 
ting up the initial page tables and.handli~ganY'page 
faults. The operating system also ISrequired to Inval- 
idate (Le. flush) the TLB when any changes are 
made to any of the page table entries. The operating 
system must reload CR3 to cause the TLB to be 
flushed. 


Setting up the tables is simply a matter of loading 
CR3 with the address of the Page Directory, and 
allocating space for the Page Directory and the 
Page Tables. The primary responsibility of the oper- 
ating system is to implement a swapping policy and 
handle all of the page faults. 


A final concern of the operating system is to ensure 
that the TLB cache matches the information in the 
paging tables. In particular, any time the operating 
systems sets the P (Present) bit of page table entry 
to zero. The TLB must be flushed by reloading CR3. 
Operating systems may want to take advantage.of 
the fact that CR3 is stored as part of a TSS, to give 
every task or group of tasks its own set of page 
tables. 


4.5 
Virtual 8086 Environment 


The Intel386 SX Microprocessor allows the execu- 
tion of 8086 application programs in both Real Mode 
and in the Virtual 8086 Mode. The Virtual 8086 
Mode allows the execution of 8086 applications, 
while still allowing the system designer to take full 
advantage of the Intel386 SX CPU's protection 
mechanism. 


VIRTUAL 
8086 ADDRESSING 
MECHANISM 


One of the major differences between Intel386 SX 
CPU Real and Protected modes is how the segment 
selectors are interpreted. When the processor is ex- 
ecuting in Virtual 8086 Mode, the segment registers 
are used in a fashion identical to Real Mode. The 
contents of the segment register are shifted left 4 
bits and added to the offset to form the segment 
base linear address. 


The Intel386 SX Microprocessor allows the operat- 
ing system to specify which programs use the 8086 


address mechanism and which programs use Pro- 
tected 
Mode addressing on 
a per task 
basis. 


Through the use of paging, the one megabyte ad- 
dress space of the Virtual Mode task can be mapped 
to anywhere in the 4 gigabyte linear address space 
of the Intel386 SX Microprocessor. Like Real Mode, 
Virtual Mode addresses that exceed one megabyte 
will cause an exception 13. However, these restric- 
tions should not prove to be important, because 
most tasks running in Virtual 8086 Mode will simply 
be existing 8086 application programs. 


PAGING 
IN VIRTUAL 
MODE 


The paging hardware allows the concur~ent running 
of multiple Virtual Mode tasks, and prOVidesprotec- 
tion and operating system isolation. Although it is 
not strictly necessary to have the paging hardware 
enabled to run Virtual Mode tasks, it is needed in 
order to run multiple Virtual Mode tasks or to relo- 
cate the address space of a Virtual Mode task to 
physical address space greater than one megabyte. 


The paging hardware allows the 20-bit linear ad- 
dress produced by a Virtual Mode program to be 
divided into as many as 256 pages. Each one of the 
pages can be located anywhere within the maximum 
16 megabyte physical address space of the Intel386 
SX Microprocessor. In addition, since CR3 (the Page 
Directory Base Register) is loaded by a task switch, 
each Virtual Mode task can use a different mapping 
scheme to map pages to different physical locations. 
Finally, the paging hardware allows the sharin~ of 
the 8086 operating system code between multiple 
8086 applications. 


PROTECTION 
AND I/O 
PERMISSION 
BIT MAP 


All Virtual Mode programs execute at privilege level 
3. As such, Virtual Mode programs are subject to all 
of the protection checks defined in Protected Mode. 
This is different than Real Mode, which implicitly is 
executing at privilege level O. Thus, an attempt t.o 
execute a privileged instruction in Virtual Mode Will 
cause an exception 13 fault. 


The following are privileged instructions, which may 
be executed only at Privilege Level O.Attempting to 
execute these instructions in Virtual 8086 Mode (or 
anytime CPL~ 0) causes an exception 13 fault: 


L1DT; 
MOV DRn,REG; 
MOV reg,DRn; 
LGDT; 
MOV TRn,reg; 
MOV reg,TRn; 


LMSW; MOV CRn,reg; 
MOV reg,CRn; 


CLTS; 
HLT; 


Several 
instructions, 
particularly 
those 
applying 
to 
the multitasking 
and the protection 
model, are avail- 
able only in Protected 
Mode. Therefore, 
attempting 
to execute 
the following 
instructions 
in Real Mode or 
in Virtual 8086 Mode generates 
an exception 
6 fault: 


LTR; 
LLDT; 
LAR; 
LSL; 
ARPL; 


STR; 
SLOT; 
VERR; 
VERW; 


The instructions 
which are 10PL sensitive 
in Protect- 
ed Mode are: 


IN; 
STI; 
OUT; 
CLI 
INS; 
OUTS; 
REPINS; 
REPOUTS; 


In Virtual 
8086 
Mode the following 
instructions 
are 
10PL -sensitive: 


INTn; 
STI; 
PUSHF; 
CLI; 
POPF; 
IRET; 


The PUSHF, POPF, and IRET instructions 
are 10PL- 
sensitive 
in Virtual 
8086 
Mode 
only. This provision 
allows the IF flag to be virtualized 
to the virtual 8086 
Mode program. 
The INT n software 
interrupt 
instruc- 
tion 
is also 
10PL-sensitive 
in Virtual 
8086 
mode. 
Note that the INT 3, INTO, and BOUND 
instructions 
are not 10PL-sensitive 
in Virtual 8086 Mode. 


The I/O instructions 
that directly 
refer to addresses 
in the processor's 
I/O space are IN, INS, OUT, and 
OUTS. The Intel386 SX Microprocessor 
has the abil- 
ity to selectively 
trap references 
to specific 
I/O ad- 
dresses. 
The structure 
that 
enables 
selective 
trap- 
ping is the I/O 
Permission 
Bit Map in the TSS seg- 
ment (see Figures 4.8 and 4.9). The I/O permission 
map is a bit vector. 
The size of the map and its loca- 
tion in the TSS segment 
are variable. 
The processor 
locates 
the I/O permission 
map by means of the I/O 
map base field in the fixed portion 
of the TSS. The 
I/O map base field is 16 bits wide and contains 
the 
offset 
of the beginning 
of the I/O permission 
map. 


In protected 
mode when an I/O instruction 
(IN, INS, 
OUT 
or OUTS) 
is encountered, 
the processor 
first 
checks 
whether 
CPL ~ 10PL. If this condition 
is true, 
the I/O operation 
may proceed. 
If not true, the proc- 
essor 
checks 
the 
I/O 
permission 
map 
(in Virtual 
8086 Mode, the processor 
consults 
the map without 
regard for the 10PL). 


Each bit in the map corresponds 
to an I/O port byte 
address; 
for example, 
the bit for port 41 is found 
at 
I/O map base + 5, bit offset 
1. The processor 
tests 
all the 
bits that 
correspond 
to the 
I/O 
addresses 
spanned 
by an I/O operation; 
for example, 
a double 
word operation 
tests four bits corresponding 
to four 
adjacent 
byte addresses. 
If any tested 
bit is set, the 
processor 
signals 
a general 
protection 
exception. 
If 
all the tested 
bits are zero, the I/O operations 
may 
proceed. 


It is not necessary 
for the 
I/O 
permission 
map to 
represent 
all the I/O addresses. 
I/O addresses 
not 
spanned 
by the map are treated 
as if they had one- 
bits in the 
map. The 
I/O 
map 
base 
should 
be at 
least one byte less than the TSS limit, the last byte 
beyond 
the 
I/O 
mapping 
information 
must 
contain 
all 1's. 


Because 
the I/O permission 
map is in the TSS seg- 
ment, different 
tasks can have different 
maps. Thus, 
the operating 
system can allocate 
ports tv a task by 
changing 
the I/O permission 
map in the task's 
TSS. 


IMPORTANT 
IMPLEMENTATION 
NOTE: 
Beyond 
the last byte of I/O 
mapping 
information 
in the I/O 
permission 
bit map must be a byte containing 
all 1'so 


The 
byte of all 1's must 
be within 
the 
limit of the 
Intel386 
SX CPU TSS segment 
(see Figure 4.8). 


Interrupt 
Handling 


In order 
to fully support 
the 
emulation 
of an 8086 
machine, 
interrupts 
in Virtual 
8086 
Mode 
are han- 
dled 
in a unique 
fashion. 
When 
running 
in Virtual 
Mode 
all interrupts 
and exceptions 
involve 
a privi- 


lege change 
back to the host Intel386 SX Microproc- 
essor operating 
system. The Intel386 
SX Microproc- 
essor 
operating 
system 
determines 
if the 
interrupt 
comes from a Protected 
Mode application 
or from a 
Virtual Mode program 
by examining 
the VM bit in the 
EFLAGS 
image stored on the stack. 


When a Virtual Mode program 
is interrupted 
and ex- 
ecution 
passes to the interrupt 
routine at level 0, the 
VM bit is cleared. 
However, 
the VM bit is still set in 
the EFLAG 
image on the stack. 


The Intel386 SX Microprocessor 
operating 
system in 
turn handles 
the exception 
or interrupt 
and then re- 
turns control 
to the 8086 program. 
The Intel386 
SX 
Microprocessor 
operating 
system 
may choose 
to let 
the 8086 operating 
system 
handle 
the interrupt 
or it 
may emulate 
the function 
of the 
interrupt 
handler. 


For example, 
many 8086 operating 
system 
calls are 
accessed 
by PUSHing parameters 
on the stack, and 
then executing 
an INT n instruction. 
If the 10PL is set 
to 0 then all INT n instructions 
will be intercepted 
by 
the Intel386 
SX Microprocessor 
operating 
system. 


An 
Intel386 
SX 
Microprocessor 
operating 
system 
can provide 
a Virtual 8086 Environment 
which ~sto- 
tally transparent 
to the application 
software 
by Inter- 
cepting 
and then emulating 
8086 operating 
system's 
calls, and intercepting 
IN and OUT instructions. 


Entering 
and Leaving 
Virtual 8086 Mode 


Virtual 
8086 mode 
is entered 
by executing 
a 32-bit 
IRET Instruction 
at CPL = 0 where the stack has a 1 
in the VM bit of its EFLAGS 
image, or a Task Switch 
(at any CPL) to a Intel386 
SX Microprocessor 
task 
whose 
Intel386 
SX CPU TSS has a EFLAGS 
image 
containing 
a 1 in the VM bit position 
while the proc- 
essor 
is executing 
in the 
Protected 
Mode. 
POPF 
does 
not 
affect 
the 
VM 
bit but 
a PUSHF 
always 
pushes 
a 0 in the VM bit. 


The transition 
out of Virtual 8086 mode to protected 
mode 
occurs 
only on receipt 
of an interrupt 
or ex- 
ception. 
In Virtual 
8086 mode, all interrupts 
and ex- 
ceptions 
vector 
through 
the 
protected 
mode 
lOT, 
and enter an interrupt 
handler in protected 
mode. As 
part of the interrupt 
processing 
the VM bit is cleared. 


Because 
the matching 
IRET must occur from level 0, 
Interrupt 
or Trap Gates 
used to field an interrupt 
or 
exception 
out of Virtual 8086 mode must perform 
an 
inter-level 
interrupt 
only to level O. Interrupt 
or Trap 
Gates 
through 
conforming 
segments, 
or 
through 
segments 
with OPL>O, 
will raise a GP fault with the 
CS selector 
as the error code. 


Task Switches 
To/From 
Virtual 8086 Mode 


Tasks which can execute 
in Virtual 8086 mode must 
be described 
by a TSS with the 
Intel386 
SX CPU 
format 
(type 9 or 11 descriptor). 
A task switch out of 
virtual 
8086 mode will operate 
exactly 
the same as 
any other task switch out of a task with a Intel386 SX 
CPU TSS. All of the programmer 
visible state, includ- 
ing the EFLAGS 
register 
with the VM bit set to 1, is 
stored in the TSS. The segment 
registers 
in the TSS 
will contain 
8086 segment 
base values 
rather than 
selectors. 


A task switch into a task described 
by a Intel386 
SX 
CPU TSS will have an additional 
check to determine 
if the 
incoming 
task 
should 
be resumed 
in Virtual 
8086 
mode. 
Tasks 
described 
by 286 format 
TSSs 
cannot 
be 
resumed 
in Virtual 
8086 
mode, 
so no 
check 
IS required 
there 
(the 
FLAGS 
Image 
in 286 
format 
TSS has only the low order 
16 FLAGS 
bits). 


Before 
loading 
the segment 
register 
images 
from a 
Intel386 
SX CPU TSS, the FLAGS 
image is loaded, 
so that 
the segment 
registers 
are loaded 
from the 
TSS Image as 8086 segment 
base values. The task 
is now ready to resume 
in Virtual 8086 mode 


Transitions 
Through 
Trap and Interrupt 
Gates, 
andlRET 


A task switch is one way to enter or exit Virtual 8086 
mode. The other method 
is to exit through 
a Trap or 
Interrupt 
gate, as part of handling 
an interrupt, 
~nd 
to enter 
as part 
of executing 
an IRET 
instruction. 


The transition 
out must use a Intel386 
SX CPU Trap 
Gate (Type 
14), or Intel386 
SX CPU Interru~t 
Gate 
(Type 15), which must point to a non-conforming 
lev- 
el 0 segment 
(OPL = 0) in order 
to permit 
the trap 
handler 
to IRET back to the Virtual 
8086 
program. 


The 
Gate 
must 
point 
to a non-conforming 
level 
0 
segment 
to perform 
a level switch to level 0 so that 
the matching 
IRET can change 
the VM bit. Intel386 
SX CPU gates 
must be used since 286 gates 
save 
only the low 16 bits of the EFLAGS 
register 
(the VM 
bit will not be saved). 
Also, the 16-bit IRET used to 
terminate 
the 286 interrupt 
handler 
will pop only the 
lower 16 bits from FLAGS, and will not affect the VM 
bit. The action taken for a Intel386 
SX CPU Trap or 
Interrupt 
gate if an interrupt 
occurs 
while the task is 
executing 
in virtual 8086 mode is given by the follow- 


ing sequence: 


1. Save the FLAGS 
register 
in a temp to push later. 


Turn off the VM, TF, and IF bits. 


2. Interrupt 
and 
Trap 
gates 
must 
perform 
a level 
switch from 3 (where the Virtual 
8086 Mode pro- 


gram executes) 
to level 0 (so IRET can return). 


3. Push the 8086 segment 
register 
values 
onto the 
new stack, 
in this order: 
GS, FS, OS, ES. These 
are pushed as 32-bit quantities. 
Then load these 4 
registers 
with null selectors 
(0). 


4. Push 
the 
old 8086 
stack 
pointer 
onto 
the 
new 
stack by pushing the SS register 
(as 32-bits), then 
pushing the 32-bit ESP register 
saved above. 


5. Push the 32-bit EFLAGS 
register 
saved in step 1. 


6. Push the old 8086 instruction 
onto the new stack 
by pushing the CS register (as 32-bits), then push- 
ing the 32-bit EIP register. 


7. Load up the new CS:EIP value from the interrupt 
gate, and begin execution 
of the interrupt 
routine 
in protected 
mode. 


The 
transition 
out 
of V86 
mode 
performs 
a level 
change 
and 
stack 
switch, 
in addition 
to changing 
back to protected 
mode. 
Also all of the 8086 
seg- 
ment 
register 
Images 
are stored 
on the stack 
(be- 
hind the SS:ESP 
Image), and then loaded 
with null 
(0) selectors 
before 
entering 
the 
Interrupt 
handler. 


ThiS will permit 
the handler 
to safely 
save 
and re- 
store the OS, ES, FS, and GS registers as 286 selec- 
tors. This is needed 
so that interrupt 
handlers 
which 
don't 
care 
about 
the mode 
of the Interrupted 
pro- 
gram can use the same prologue 
and epilogue 
code 
for state saving regardless 
of whether 
or not a 'na- 
tive' mode or Virtual 8086 Mode program 
was inter- 


rupted. 
Restoring 
null selectors 
to these 
registers 
before 
executing 
the IRET wilt cause 
a trap in the 
interrupt 
handler. 
Interrupt 
routines 
which 
expect 
or 
return 
values 
in the segment 
registers 
will have to 
obtain/return 
values 
from the 8086 register 
images 
pushed 
onto the new stack. They will need to know 
the 
mode 
of the 
interrupted 
program 
in order 
to 
know 
where 
to find/return 
segment 
registers, 
and 
also to know how to interpret 
segment 
register 
val- 
ues. 


The IRET instruction 
will perform 
the inverse 
of the 
above 
sequence. 
Only the 
extended 
IRET instruc- 


tion 
(operand 
size = 32) can be used and must be 
executed 
at level 0 to change 
the VM bit to 1. 


1. If the NT bit in the FLAGS register 
is on, an inter- 
task 
return 
is performed. 
The 
current 
state 
is 
stored 
in the current 
TSS, and the link field in the 
current 
TSS is used to locate the TSS for the in- 
terrupted 
task which is to be resumed. 
Otherwise, 
continue 
with the following 
sequence: 


2. Read the FLAGS 
image from SS:8[ESP] 
into the 
FLAGS 
register. 
This will set VM to the value ac- 
tive in the interrupted 
routine. 


3. Pop 
off 
the 
instruction 
pointer 
CS:EIP. 
EIP 
is 
popped 
first, then a 32-bit word is popped 
which 
contains 
the 
CS value 
in the 
lower 
16 bits. 
If 
VM = 0, this CS load is done as a protected 
mode 
segment 
load. 
If VM = 1, this wilt be done 
as an 
8086 segment 
load. 


4. Increment 
the 
ESP register 
by 4 to bypass 
the 
FLAGS 
image which was 'popped' 
in step 1. 


5. If VM = 1, load segment 
registers 
ES, OS, FS, and 
GS 
from 
memory 
locations 
SS:[ESP+8], 


SS:[ESP+ 
12], 
SS:[ESP+ 
16], 
and 
SS:[ESP= 
20], respectively, 
where the new value 
of ESP stored 
in step 
4 is used. 
Since 
VM = 1, 
these 
are done as 8086 segment 
register 
loads. 


Else if VM = 0, check that the selectors 
in ES, OS, 
FS, and GS are valid 
in the interrupted 
routine. 


Null out invalid 
selectors 
to trap if an attempt 
is 
made to access 
through 
them. 


6. If RPL(CS»CPL, 
pop the stack 
pointer 
SS:ESP 
from the stack. 
The ESP register 
is popped 
first, 
followed 
by 32-bits 
containing 
SS in the lower 16 
bits. If VM = 0, SS is loaded 
as a protected 
mode 
segment 
register 
load. 
If VM = 1, an 8086 
seg- 
ment register 
load is used. 


7. Resume 
execution 
of the interrupted 
routine. 
The 
VM bit in the FLAGS 
register 
(restored 
from the 
interrupt 
routine's 
stack 
image 
in step 
1) deter- 


mines whether 
the processor 
resumes 
the inter- 


rupted 
routine 
in Protected 
mode or Virtual 
8086 
Mode. 


The Intel386 
SX Microprocessor 
features 
a straight- 
forward 
functional 
interface 
to 
the 
external 
hard- 
ware. The Intel386 
SX Microprocessor 
has separate 
parallel 
buses for data and address. 
The data bus is 
16-bits in width, and bi-directional. 
The address 
bus 
outputs 24-bit address values using 23 address 
lines 
and two byte enable 
signals. 


The Intel386 
SX Microprocessor 
has two selectable 
address 
bus cycles: 
address 
pipelined 
and non-ad- 
dress 
pipelined. 
The 
address 
pipelining 
option 
al- 
lows as much time as possible 
for data access 
by 
starting 
the 
pending 
bus cycle 
before 
the 
present 
bus 
cycle 
is finished. 
A 
non-pipelined 
bus 
cycle 
gives the highest 
bus performance 
by executing 
ev- 
ery bus cycle in two processor 
CLK cycles. For maxi- 
mum design flexibility, 
the address 
pipelining 
option 
is selectable 
on a cycle-by-cycle 
basis. 


The processor's 
bus cycle 
is the basic 
mechanism 
for information 
transfer, 
either from system 
to proc- 
essor, or from processor 
to system. 
Intel386 
SX Mi- 
croprocessor 
bus cycles 
perform 
data transfer 
in a 
minimum 
of only two clock 
periods. 
The 
maximum 
transfer 
bandwidth 
at 
16 
MHz 
is 
therefore 
16 
Mbytes/sec. 
However, 
any bus cycle will be extend- 
ed for more than two clock 
periods 
if external 
hard- 
ware withholds 
acknowledgement 
of the cycle. 


The Intel386 
SX Microprocessor 
can relinquic::h con- 
trol of its local buses 
to allow 
mastership 
by other 
devices, 
such as direct memory access (OMA) chan- 


nels. When relinquished, 
HLOA is the only output pin 
driven by the Intel386 
SX Microprocessor, 
providing 
near-complete 
isolation 
of the 
processor 
from 
its 
system (all other output pins are in a float condition). 


5.1 Signal Description 
Overview 


Ahead is a brief description 
of the Intel386 SX Micro- 
processor 
input and output signals arranged 
by func- 
tional 
groups. 
Note 
the 
# 
symbol 
at the end 
of a 
signal name indicates 
the active, 
or asserted, 
state 
occurs 
when the signal is at a LOW voltage. 
When 
no # is present 
after the signal 
name, the signal is 
asserted 
when at the HIGH voltage 
level. 


Example 
signal: 
M/IO# 
- 
HIGH 
voltage 
indicates 
Memory 
selected 


- 
LOW 
voltage 
indicates 
I/O selected 


The signal descriptions 
sometimes 
refer to AC tim- 
ing parameters, 
such as 't25 Reset Setup Time' and 
't26 Reset Hold Time.' 
The values 
of these 
parame- 


ters can be found in Table 7.4. 


CLK2 provides the 
fundamental 
timing for 
the 
Intel386 SX Microprocessor. It is divided by two in- 
ternally to generate the internal processor clock 
used for instruction execution. The internal clock is 
comprised of two phases, 'phase one' and 'phase 
two'. Each CLK2 period is a phase of the internal 
clock. Figure 5.2 illustrates the relationship. If de- 
sired, the phase of the internal processor clock can 
be synchronized to a known phase by ensuring the 
falling edge of the RESET signal meets the applica- 
ble setup and hold times t25 and t26. 


These three-state bidirectional signals provide the 
general purpose data path between the Intel386 SX 
Microprocessor and other devices. The data bus 
outputs are active HIGH and will float during bus 
hold acknowledge. Data bus reads require that read- 
data setup and hold times t21 and t22 be met relative 
to CLK2 for correct operation. 
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ADDRESS 
BUS (A23-A1' 
BHE#, 
BLE#) 


These 
three-state 
outputs 
provide 
physical 
memory 
addresses 
or I/O port addresses. 
A23-A16 
are LOW 
during 
I/O 
transfers 
except 
for I/O 
transfers 
auto- 
matically 
generated 
by 
coprocessor 
instructions. 
During coprocessor 
I/O transfers, 
A22-A16 
are driv- 
en LOW, 
and A23 is driven 
HIGH 
so that 
this ad- 
dress line can be used by external 
logic to generate 
the coprocessor 
select signal. Thus, the I/O address 
driven 
by the 
Intel386 
SX Microprocessor 
for 
co- 


processor 
commands 
is 8000F8H, 
the I/O address- 


es driven by the Intel386 
SX Microprocessor 
for co- 
processor 
data are 8000FCH 
or 8000FEH 
for cycles 
to the Intel387™ 
SX. 


The address 
bus is capable 
of addressing 
16 mega- 
bytes of physical 
memory 
space 
(OOOOOOHthrough 
FFFFFFH), 
and 64 kilobytes 
of I/O 
address 
space 
(OOOOOOHthrough 
OOFFFFH) for programmed 
I/O. 
The address 
bus is active HIGH and will float during 
bus hold acknowledge. 


The Byte Enable outputs, 
BHE # and BLE #, directly 
indicate 
which 
bytes 
of the 
16-M 
data bus are in- 
volved 
with 
the 
current 
transfer 
BHE # 
applies 
to 
D15-D6 
and BLE# 
applies to Dy-Do. 
If both BHE# 
and 
BLE # 
are asserted, 
then 
16 bits of data 
are 
being transferred. 
See Table 
5.1 for a complete 
de- 
coding of these signals. The byte enables 
are active 
LOW and will float during bus hold acknowledge. 


BUS CYCLE 
DEFINITION 
SIGNALS 
(W/R#, 
D/C#, 
M/IO#, 
LOCK#) 


write and read cycles, 
D/C# 
distinguishes 
between 
data 
and 
control 
cycles, 
M/IO# 
distinguishes 
be- 


tween 
memory 
and I/O cycles, 
and LOCK # distin- 


guishes 
between 
locked 
and unlocked 
bus cycles. 


All of these 
signals 
are active 
LOW 
and will float 
during bus acknowledge. 


The primary 
bus cycle definition 
signals 
are W /R # , 


D/C# 
and M/IO#, 
since these are the signals driv- 
en valid as ADS # (Address 
Status output) 
becomes 
active. The LOCK # is driven valid at the same time 
the bus cycle begins, which 
due to address 
pipelin- 
ing, could be after ADS# 
becomes 
active 
Exact bus 
cycle definitions, 
as a function 
of W/R#, 
D/C#, 
and 
M/IO# 
are given in Table 5.2. 


LOCK # indicates 
that other system bus masters 
are 
not to gain control 
of the system 
bus while 
it is ac- 
tive. LOCK # is activated 
on the CLK2 edge that be- 


gins the first locked 
bus cycle (i.e .. It is not active at 
the same time as the other bus cycle definition 
pins) 
and is deactivated 
when ready is returned 
at the end 
of the last bus cycle which 
is to be locked. 
The be- 
ginning of a bus cycle is determined 
when READY # 


is returned 
in a previous 
bus cycle 
and another 
is 
pending 
(ADS# 
is active) 
or by the clock 
edge 
in 
which ADS # is driven active if the bus was idle. This 
means 
that 
it follows 
more 
closely 
with 
the 
write 
data rules when it is valid, but may cause the bus to 
be locked 
longer 
than 
desired. 
The 
LOCK # 
signal 
may be explicitly 
activated 
by the 
LOCK 
prefix 
on 
certain 
instructions. 
LOCK # 
is 
always 
asserted 
when 
executing 
the 
XCHG 
instruction, 
during 
de- 
scriptor 
updates, 
and during 
the interrupt 
acknowl- 


edge sequence. 


These three-state 
outputs 
define the type of bus cy- 
cle being 
performed: 
W/R# 
distinguishes 
between 


Table 
5 1. Byte Enable 
Definitions 


BHE# 
BLE# 
Function 


0 
0 
Word Transfer 
0 
1 
Byte transfer 
on upper byte of the data bus, D15-D6 
1 
0 
Byte transfer 
on lower byte of the data bus, D7-DO 


1 
1 
Never occurs 


M/lO# 
D/C# 
W/R# 
Bus Cycle 
Type 
Locked?-- 


0 
0 
0 
Interrupt Acknowledge 
Yes 
0 
0 
1 
does not occur 
- 
0 
1 
0 
I/O Data Read 
No 
0 
1 
1 
I/O Data Write 
No 
1 
0 
0 
Memory Code Read 
No 
1 
0 
1 
Halt 
Shutdown: 
No 
Address = 2 
Address = 0 
BHE# 
= 1 
BHE# 
= 1 
BLE# 
= 0 
BLE# 
= 0 
1 
1 
0 
Memory 
Data Read 
Some Cycles 


1 
1 
1 
Memory 
Data Write 
Some Cycles 
- - 
._'---- 


BUS CONTROL SIGNALS 
(ADS#, READY#, NA#) 


The following signals allow the processor to indicate 
when a bus cycle has begun, and allow other system 
hardware to control address pipelining and bus cycle 
termination. 


This three-state output indicates that a valid bus cy- 
cle definition and address (W/R#, 
D/C#, 
M/IO#, 
BHE#, BLE# and A23-Al) 
are being driven at the 
Intel386 SX Microprocessor pins. ADS# is an active 
LOW output. Once ADS# is driven active, valid ad- 
dress, byte enables, and definition signals will not 
change. In addition, ADS# will remain active until its 
associated bus cycle begins (when READY# is re- 
turned for the previous bus cycle when running pipe- 
lined bus cycles). When address pipelining is uti- 
lized, maximum throughput is achieved by initiating 
bus cycles when ADS# and READY# are active in 
the same clock cycle. ADS# will float during bus 
hold acknowledge. See sections Non-Plpellned Ad- 
dress and Pipelined Address for additional infor- 
mation on how ADS# is asserted for different bus 
states. 


This input indicates the current bus cycle is com- 
plete, and the active bytes indicated by BHE# and 
BLE# are accepted or provided. When READY# is 
sampled active during a read cycle or interrupt ac- 
knowledge cycle, the Intel386 SX Microprocessor 
latches the input data and terminates the cycle. 
When READY# is sampled active during a write cy- 
cle, the processor terminates the bus cycle. 


READY# is ignored on the first bus state of all bus 
cycles, and sampled each bus state thereafter until 
asserted. READY# must eventually be asserted to 
acknowledge every bus cycle, including Halt Indica- 
tion and Shutdown Indication bus cycles. When be- 
ing sampled, READY# must always meet setup and 
hold times t19 and t20 for correct operation. 


Next Address Request (NA # ) 


This is used to request address pipelining. This input 
indicates the system is prepared to accept new val- 
ues of BHE#, BLE#, A23-Al, 
W/R#, 
D/C# 
and 
M/IO# from the Intel386 SX Microprocessor even if 
the end of the current cycle is not being acknowl- 
edged on READY#. If this input is active when sam- 
pled, the next address is driven onto the bus, provid- 
ed the next bus request is already pending internally. 
NA# is ignored in CLK cycles in which ADS# or 


READY# is activated. This signal is active LOW and 
must satisfy setup and hold times t15 and t16 for 
correct 
operation. See Plpelined 
Address 
and 
Read and Write Cycles for additional information. 


This section describes the mechanism by which the 
processor relinquishes control of its local buses 
when requested by another bus master device. See 
Entering and Exiting Hold Acknowledge 
for addi- 


tional information. 


This input indicates some device other than the 
Intel386 SX Microprocessor requires bus master- 
ship. When control is granted, the Intel386 SX Mi- 
croprocessor floats A23-Al' 
BHE#, 
BLE#, 
D15- 


Do, LOCK#, M/IO#, D/C#, W/R# and ADS#, and 
then activates HLDA, thus entering the bus hold ac- 
knowledge state. The local bus will remain granted 
to the requesting master until HOLD becomes inac- 
tive. When HOLD becomes inactive, the Intel386 SX 
Microprocessor will deactivate HLDA and drive the 
local bus (at the same time), thus terminating the 
hold acknowledge condition. 


HOLD must remain asserted as long as any other 
device is a local bus master. External pull-up resis- 
tors may be required when in the hold acknowledge 
state since none of the Intel386 SX Microprocessor 
floated outputs have internal pull-up resistors. See 
Resistor Recommendations 
for additional informa- 
tion. HOLD is not recognized while RESET is active. 
If RESET is asserted while HOLD is asserted, RE- 
SET has priority and places the bus into an idle 
state, rather than the hold acknowledge (high-im- 
pedance) state. 


HOLD is a level-sensitive, active HIGH, synchronous 
input. HOLD signals must always meet setup and 
hold times t23 and t24 for correct operation. 


Bus Hold Acknowledge 
(HLDA) 


When 
active 
(HIGH), this 
output 
indicates the 
Intel386 SX Microprocessor has relinquished control 
of its local bus in response to an asserted HOLD 
signal, and is in the bus Hold Acknowledge state. 


The Bus Hold Acknowledge state offers near-com- 
plete signal isolation. In the Hold Acknowledge 
state, HLDA is the only signal being driven by the 
Intel386 SX Microprocessor. The other output sig- 
nals or bidirectional signals (D15-DO' BHE#, BLE#, 
A23-Al' 
W/R#, 
D/C#, 
M/IO#, 
LOCK# 
and 
ADS#) 
are in a high-impedance state so the re- 


• 


questing bus master may control them. These pins 
remain OFF throughout the time that HLDA remains 
active (see Table 5.3)). Pull-up resistors may be de- 
sired on several signals to avoid spurious activity 
when no bus master is driving them. See Resistor 
Recommendations 
for additional information. 


When 
the 
HOLD signal is made inactive, the 


Intel386 SX Microprocessor will deactivate HLDA 
and drive the bus. One rising edge on the NMI input 
is remembered for processing after the HOLD input 
is negated. 


Pin Value 
Pin Names 


1 
HLDA 
Float 
LOCK#, M/IO#, D/C#, W/R#, 
ADS#, A23-A1, BHE#, BLE#, 015-00 


In addition to the normal usage of Hold Acknowl- 
edge with DMA controllers or master peripherals, 
the near-complete isolation has particular attractive- 
ness during system test when test equipment drives 
the system, and in hardware fault-tolerant applica- 
tions. 


HOLD Latencies 


The maximum possible HOLD latency depends on 
the software being executed. The actual HOLD la- 
tency at any time depends on the current bus activi- 
ty, the state of the LOCK# signal (internal to the 
CPU) activated by the LOCK# prefix, and interrupts. 
The Intel386 SX Microprocessor will not honor a 
HOLD request until the current bus operation is 
complete. 


The Intel386 SX Microprocessor breaks 32-bit data 
or I/O accesses into 2 internally locked 16-bit bus 
cycles; the LOCK# 
signal is not asserted. The 


Intel386 SX Microprocessor breaks unaligned 16-bit 
or 32-bit data or I/O accesses into 2 or 3 internally 
locked 16-blt bus cycles. Again, the LOCK# signal is 
not asserted but a HOLD request will not be recog- 
nized until the end of the entire transfer. 


Wait states affect HOLD latency. The Intel386 SX 
Microprocessor will not honor a HOLD request until 
the end of the current bus operation, no matter how 
many wait states are required. Systems with DMA 
where data transfer is critical must insure that 
READY# returns sufficiently soon. 


intel~ 


COPROCESSOR 
INTERFACE 
SIGNALS 
(PEREQ, 
BUSY#, 
ERROR#) 


In the following sections are descriptions of signals 
dedicated to the numeric coprocessor interface. In 
addition to the data bus, address bus, and bus cycle 
definition signals, these following signals control 
communication between the Intel386 SX Microproc- 
essor and its Intel387TMSX processor extension. 


Coprocessor 
Request 
(PEREQ) 


When asserted (HIGH), this input signal indicates a 
coprocessor request for a data operand to be trans- 
ferred to/from memory by the Intel386 SX Micro- 
processor. In response, the Intel386 SX Microproc- 
essor transfers information between the coproces- 
sor and memory. Because the Intel386 SX Micro- 
processor has internally stored the coprocessor op- 
code being executed, it performs the requested data 
transfer with the correct direction and memory ad- 
dress. 


PEREa is a level-sensitive active HIGH asynchro- 
nous signal. Setup and hold times, t29 and t30, rela- 
tive to the CLK2 signal must be met to guarantee 
recognition at a particular clock edge. This signal is 
provided with a weak internal pull-down resistor of 
around 20 K-ohms to ground so that it will not float 
active when left unconnected. 


Coprocessor 
Busy (BUSY #) 


When asserted (LOW), this input indicates the co- 
processor is still executing an instruction, and is not 
yet able to accept another. When the Intel386 SX 
Microprocessor encounters 
any coprocessor 
in- 


struction which operates on the numerics stack (e.g. 
load, pop, or arithmetic operation), or the WAIT in- 
struction, this input is first automatically sampled un- 
til it is seen to be inactive. This sampling of the 
BUSY# input prevents overrunning the execution of 
a previous coprocessor instruction. 


The 
FNINIT, 
FNSTENV, 
FNSAVE, 
FNSTSW, 


FNSTCW and FNCLEX coprocessor instructions are 
allowed to execute even if BUSY# is active, since 
these instructions are used for coprocessor initializa- 
tion and exception-clearing. 


BUSY# is an active LOW, level-sensitive asynchro- 
nous signal. Setup and hold times, t29 and t30, rela- 


tive to the CLK2 signal must be met to guarantee 
recognition at a particular clock edge. This pin is pro- 
vided with a weak internal pull-up resistor of around 
20 K-ohms to Vcc so that it will not float active when 
left unconnected.. 


BUSY# serves an additional function. If BUSY# is 
sampled LOW at the falling edge of RESET, the 
Intel386 SX Microprocessor performs an internal 
self-test (see Bus Activity 
During 
and Following 
Reset. 
If BUSY# is sampled HIGH, no self-test is 


performed. 


Coprocessor 
Error (ERROR #) 


When asserted (LOW), this input signal indicates 
that the previous coprocessor instruction generated 
a coprocessor error of a type not masked by the 
coprocessor's control register. This input is automat- 
ically sampled by the Intel386 SX Microprocessor 
when a coprocessor instruction is encountered, and 
if active, the Intel386 SX Microprocessor generates 
exception 16 to access the error-handling software. 


Several coprocessor instructions, generally those 
which clear the numeric error flags in the coproces- 
sor or save coprocessor state, do execute without 
the Intel386 SX Microprocessor generating excep- 
tion 16 even if ERROR# is active. These instruc- 
tions 'are FNINIT, FNCLEX, FNSTSW, FNSTSWAX, 
FNSTCW, FNSTENV and FNSAVE. 


ERROR# is an active LOW, level-sensitive asyn- 
chronous signal. Setup and hold times, t29 and t30, 
relative to the CLK2 signal must be met to guarantee 
recognition at a particular clock edge. This pin is pro- 
vided with a weak internal pull-up resistor of around 
20 K-ohms to Vcc so that it will not float active when 
left unconnected. 


The following descriptions cover inputs that can in- 
terrupt or suspend execution of the processor's cur- 
rent instruction stream. 


Maskable 
Interrupt 
Request 
(INTR) 


When asserted, this input indicates a request for in- 
terrupt service, which can be masked by the Intel386 
SX CPU Flag Register IF bit. When the Intel386 SX 
Microprocessor responds to the INTR input, it per- 
forms two interrupt acknowledge bus cycles and, at 
the end of the second, latches an 8-bit interrupt vec- 
tor on DrDo to identify the source of the interrupt. 


INTR is an active HIGH, level-sensitive asynchro- 
nous signal. Setup and hold times, t27 and t28, rela- 
tive to the CLK2 signal must be met to guarantee 


recognition at a particular clock edge. To assure rec- 
ognition of an INTR request, INTR should remain 
active until the first interrupt acknowledge bus cycle 
begins. INTR is sampled at the beginning of every 
instruction in the Intel386 SX Microprocessor's Exe- 
cution Unit. In order to be recognized at a particular 
instruction boundary, INTR must be active at least 
eight CLK2 clock periods before the beginning of the 
instruction. If recognized, the Intel386 SX Microproc- 
essor will begin execution of the interrupt. 


This input indicates a request for interrupt service 
which cannot be masked by software. The non- 
maskable interrupt request is always processed ac- 
cording to the pointer or gate in slot 2 of the interrupt 
table. Because of the fixed NMI slot assignment, no 
interrupt acknowledge cycles are performed when 
processing NMI. 


NMI is an active HIGH, rising edge-sensitive asyn- 
chronous signal. Setup and hold times, t27 and t28, 
relative to the CLK2 signal must be met to guarantee 
,recognitionat a particular clock edge. To assure rec- 
ognition of NMI, it must be inactive for at least eight 
CLK2 periods, and then be active for at least eight 
CLK2 periods before the beginning of the instruction 
boundary in the Intel386 SX Microprocessor's Exe- 
cution Unit. 


Once NMI processing has begun, no additional 
NMI's are processed until after the next IRET in- 
struction, which is typically the end of the NMI serv- 
ice routine. If NMI is re-asserted prior to that time, 
however, one rising edge on NMI will be remem- 
bered for processing after executing the next IRET 
instruction. 


Interrupt 
Latency 


The time that elapses before an interrupt request is 
serviced (interrupt latency) varies according to sev- 
eral factors. This delay must be taken into account 
by the interrupt source. Any of the following factors 
can affect interrupt latency: 
1. If interrupts are masked, an INTR request will not 


be recognized until interrupts are reenabled. 


2. If an NMI is currently being serviced, an incoming 


NMI request will not be recognized until the 
Intel386 SX Microprocessor encounters the IRET 
instruction. 
3. An interrupt request is recognized only on an in- 


struction boundary of the Intel386 SX Microproc- 
essor's Execution Unit except for the following 
cases: 
- 
Repeat string instructions can be interrupted 
after each iteration. 


• 


- 
If the instruction 
loads the Stack Segment 
reg- 
ister, 
an interrupt 
is not processed 
until after 
the following 
instruction, 
which 
should 
be an 
ESP. This allows the entire stack pointer to be 
loaded 
without 
interruption. 


- 
If an instruction 
sets the interrupt 
flag (enabling 
interrupts), 
an interrupt 
is not processed 
until 
after the next instruction. 


The longest 
latency 
occurs when the interrupt 
re- 
quest 
arrives 
while the Intel386 
SX Microproces- 
sor is executing 
a long instruction 
such as multipli- 
cation, 
division, 
or a task-switch 
in the protected 
mode. 


4. Saving the Flags register 
and CS:EIP registers. 


5. If interrupt 
service 
routine 
requires 
a task switch, 
time must be allowed 
for the task switch. 


6. If the interrupt 
service 
routine saves registers 
that 
are not 
automatically 
saved 
by the 
Intel386 
SX 
Microprocessor. 


RESET 


This input signal suspends 
any operation 
in progress 
and 
places 
the 
Intel386 
SX 
Microprocessor 
in a 
known 
reset state. The Intel386 
SX Microprocessor 
is reset 
by asserting 
RESET 
for 15 or more 
CLK2 
periods 
(80 or more CLK2 periods 
before requesting 
self-test). 
When RESET is active, all other input pins, 


except FLT #, are ignored, and all other bus pins are 
driven to an idle bus state as shown 
in Table 5.5. If 
RESET and HOLD are both active at a point in time, 
RESET takes priority 
even if the Intel386 
SX Micro- 
processor 
was in a Hold Acknowledge 
state prior to 
RESET active. 


RESET 
is an active 
HIGH, 
level-sensitive 
synchro- 
nous signal. Setup and hold times, t25 and t26, must 
be met in order 
to assure 
proper 
operation 
of the 
Intel386 
SX Microprocessor. 


Table 5.5. Pin State (Bus Idle) During Reset 


Pin Name 
Signal Level During Reset 


ADS# 
1 


D15-DO 
Float 
BHE#, 
BLE# 
0 


A23-Al 
1 
W/R# 
0 
D/C# 
1 
M/IO# 
0 
LOCK# 
1 
HLDA 
0 


All data transfers 
occur 
as a result of one or more 
bus cycles. 
Logical 
data operands 
of byte and word 
lengths 
may be transferred 
without 
restrictions 
on 


physical 
address 
alignment. 
Any byte boundary 
may 
be used, although 
two physical 
bus cycles 
are per- 
formed 
as required 
for unaligned 
operand 
transfers. 


The Intel386 
SX Microprocessor 
address signals are 
designed 
to 
simplify 
external 
system 
hardware. 


Higher-order 
address 
bits are provided 
by A23-Al. 


BHE # and BLE # provide 
linear selects 
for the two 
bytes of the 16-bit data bus. 


Byte Enable outputs 
BHE# 
and BLE# 
are asserted 
when 
their associated 
data bus bytes 
are involved 
with the present 
bus cycle, a~ listed in Table 5.6. 


Table 5.6. Byte Enables and Associated 
Data 
and Operand 
Bytes 


Byte Enable 
Associated 
Data Bus Signals 
Signal 


BLE# 
DrDo 
,I (byte 0 -least 
significant) 
BHE# 
D15-D8 
(byte 1 - 
most significant) 


Each 
bus cycle 
is composed 
of at least 
two 
bus 
states. 
Each bus state requires 
one processor 
clock 
period. 
Additional 
bus states 
added 
to a single 
bus 
cycle 
are called 
wait 
states. 
See 
section 
5.4 Bus 
Functional 
Description. 


5.3 
Memory and I/O Spaces 


Bus cycles 
may access 
physical 
memory 
space 
or 
I/O space. 
Peripheral 
devices 
in the system 
may ei- 
ther 
be memory-mapped, 
or I/O-mapped, 
or both. 


As shown in Figure 5.3, physical 
memory 
addresses 
range from OOOOOOHto OFFFFFFH 
(16 megabytes) 
and 
I/O 
addresses 
from 
OOOOOOHto 
OOFFFFH 
(64 kilobytes). 
Note the I/O 
addresses 
used by the 
automatic 
I/O 
cycles 
for coprocessor 
communica- 
tion are 8000F8H 
to 8000FFH, 
beyond 
the address 
range of programmed 
I/O, to allow easy generation 
of a coprocessor 
chip 
select 
signal 
using 
the A23 
and M/IO# 
signals. 


5.4 
Bus Functional 
Description 


The Intel386 
SX Microprocessor 
has separate, 
par- 
allel buses for data and address. 
The data bus is 16- 
bits in width, and bidirectional. 
The address 
bus pro- 
vides a 24-bit value using 23 signals 
for the 23 up- 
per-order 
address 
bits and 2 Byte Enable 
signals to 
directly 
indicate 
the active 
bytes. 
These 
buses 
are 
interpreted 
and controlled 
by several 
definition 
sig- 
nals. 


The definition 
of each 
bus cycle 
is given 
by three 
signals: 
M/IO#, 
W/R# 
and 
D/C#. 
At the 
same 
time, a valid address 
is present 
on the byte enable 
signals, 
BHE # 
and 
BLE #, 
and the other 
address 
signals 
A23-Al. 
A status 
signal, 
ADS #, 
indicates 


I 
I 
I 
I 


• 
NOT 
: 
ACCESSIBLE • 
•I 
I 
I 
I. 
:ggg~~~ 
f3-_.. 
COPROCESSOR 


(NOTE) 
: 
I 
I 
I 


NOT 
: 
I ACCESSIBLE 
I 
I 
I 
I 
I 
I 
I 


• 
I 
• 
I 
OOffffH 
B' 
, 
} 
ACCESSIBLE 
64 kBYTE 
PROGRAIo4Io4EO 
OOOOOOH L..__ 
...J 
OOOOOOH 
I/O 
SPACE 


NOTE: 
PHYSICAL 
Io4EIo40RYSPACE 
I/O 
SPACE 
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Since 
A23 
is HIGH 
during 
automatic 
communication 
with 
coprocessor, 
A23 
HIGH 
and MIlO", 
LOW can 
be used 
to 
easily generate 
a coprocessor 
select 
signal. 


CLK2 
[ 
(INPUT) 


BHEN,BLEN.A 
l-A23, 
[ 
104/ION, O/CN, W/RN 
(OUTPUTS) 


AOSN [ 
(OUTPUT) 


NAN [ 
(INPUT) 


REAOYN [ 
(INPUT) 


LOCKN [ 
(OUTPUT) 


00-01S[ 
(INPUT 
OURING REAO) 


CYCLE 
1 
CYCLE 2 
CYCLE 3 
NON-PIPELINED 
NON-PIPELINED 
NON-PIPELINED 
(READ) 
(READ) 
(READ) 


T1 
T2 
T1 
T2 
T1 
T2 
.11.2 
.11.2 
.11.2 .11.2 .11.2 
.11.2 
.1 
• 


when the Intel386 SX Microprocessor issues a new 
bus cycle definition and address. 


Collectively, the address bus, data bus and all asso- 
ciated control signals are referred to simply as 'the 
bus'. When active, the bus performs one of the bus 
cycles below: 
1. Read from memory space 
2. Locked read from memory space 
3. Write to memory space 
4. Locked write to memory space 
5. Read from I/O space (or coprocessor) 
6. Write to I/O space (or coprocessor) 
7. Interrupt acknowledge (always locked) 
8. Indicate halt. or indicate shutdown 


Table 5.2 shows the encoding of the bus cycle defi- 
nition signals for each bus cycle. See Bus Cycle 
Definition 
Signals for additional information. 


CYCLE 1 
PIPELINED 
(READ) 


TlP 
T2P 


,11,2 
,11,2 


CLK2 [ 
(INPUT) 


BHE#,BLE#,A 
1-A23, 
[ 
t.l/IO#, 
D/C#, 
W/R# 


(OUTPUTS) 


ADS# [ 
(OUTPUT) 


NA# [ 
(INPUT) 


READY# [ 
(INPUT) 


LOCK# [ 
(OUTPUT) 


When the Intel386 SX Microprocessor bus is not 
performing one of the activities listed above, it is ei- 
ther Idle or in the Hold Acknowledge state, which 
may be detected externally. The idle state can be 
identified by the Intel386 SX Microprocessor giving 
no further assertions on its address strobe output 
(ADS#) since the beginning of its most recent bus 
cycle, and the most recent bus cycle having been 
terminated. The hold acknowledge state is identified 
by the Intel386 SX Microprocessor asserting its hold 
acknowledge (HLDA) output. 


The shortest time unit of bus activity is a bus state. A 
bus state is one processor clock period (two CLK2 
periods) in duration. A complete data transfer occurs 
during a bus cycle, composed of two or more bus 
states. 


The fastest Intel386 SX Microprocessor bus cycle 
requires only two bus states. For example, three 
consecutive bus read cycles, each consisting of two 
bus states, are shown by Figure 5.4. The bus states 
in each cycle are named T1 and T2. Any memory or 
1/0 address may be accessed by such a two-state 
bus cycle, if the external hardware is fast enough. 


CYCLE 2 
PIPELINED 
(READ) 


Tl P 
T2P 


,11,2 
,11,2 


CYCLE 3 
PIPELINED 
(READ) 


TlP 
T2P 


,11,2 
,11,2 


Every bus cycle continues until it is acknowledged 
by the external system hardware. using the Intel386 
SX Microprocessor READY# input. Acknowledging 
the bus cycle at the end of the first T2 results in the 
shortest bus cycle, requiring only T1 and T2. If 
READY# is not immediately asserted however, T2 
states are repeated indefinitely until the READY# 
input is sampled active. 


address status output (ADS#) is asserted. Figure 
5.5 illustrates the fastest read cycles with pipelined 
address timing. 


Note from Figure 5.5 the fastest bus cycles using 
pipelined address require only two 
bus states. 


named T1P and T2P. Therefore cycles with pipe- 
lined address timing allow the same data bandwidth 
as non-pipelined cycles. but address-to-data access 
time is increased by one T-state time compared to 
that of a non-pipelined cycle. 
The address pipelining option provides a choice of 
bus cycle timings. Pipelined or non-pipelined ad- 
dress timing is selectable on a cycle-by-cycle basis 
with the Next Address (NA#) input. 


When address pipelining is selected the address 
(BHE#, BLE# and A23-A1) and definition (W/R#. 
D/C#, 
M/IO# 
and LOCK#) of the next cycle are 
available before the end of the current cycle. To sig- 
nal their availability, the Intel386 SX Microprocessor 


Data transfers occur as a result of bus cycles, classi- 
fied as read or write cycles. During read cycles, data 
is transferred from an external device to the proces- 
sor. During write cycles, data is transferred from the 
processor to an external device. 


IDLE 
I 


n 


CYCLE 1 
NON-PIPELINED 
(WRITE) 


CYCLE 2 
I 
NON-PIPELINED 
(READ) 


T1 
T2 


CYCLE 3 
NON-PIPELINED 
(WRITE) 


IDLE I 
CYCLE -4 
NON-PIPELINED 
(READ) 


IDLE I 


n 


PROCESSOR CLK [ 


BHEH.BLEH. [ 
Al-A23. 
tol/IOH.O/CH 
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Idle states 
are shown 
here for diagram 
variety 
only. Write cycles 
are not 
always 
followed 
by an idle state. 
An active 
bus 


cycle 
can immediately 
follow 
the write cycle. 


• 


Two choices 
of address 
timing 
are dynamically 
se- 
lectable: 
non-pipelined 
or pipelined. 
After an idle bus 
state, 
the processor 
always 
uses non-pipelined 
ad- 
dress timing. 
However 
the NA# 
(Next Address) 
in- 
put may be asserted 
to select pipe lined address tim- 
ing for the next bus cycle. When pipelining 
is select- 
ed and the 
Intel386 
SX Microprocessor 
has a bus 
request 
pending 
internally, 
the address 
and defini- 
tion of the next cycle is made available 
even before 
the current bus cycle is acknowledged 
by READY #. 


Terminating 
a read or write cycle, like any bus cycle, 
requires 
acknowledging 
the cycle 
by asserting 
the 
READY # input. 
Until acknowledged, 
the processor 
inserts wait states into the bus cycle, to allow adjust- 
ment for the speed of any external 
device. 
External 
hardware, 
which 
has decoded 
the address 
and bus 
cycle type, asserts 
the READY # input at the appro- 
priate time. 


IDLE 
I 
CYCLE 1 
NON-PIPEUNED 
(READ) 


PROCESSOR CLK [ 


BHE#,BLE#, [ 
A1- A23, 
t.4/IO#,D/C# 


W/R# [ 


ADS# 
[ 


NA# [ 


At the end of the second 
bus state 
within 
the bus 
cycle, 
READY # is sampled. 
At that time, if external 
hardware 
acknowledges 
the bus cycle 
by asserting 
READY #, the bus cycle terminates 
as shown in Fig- 
ure 5.6. If READY # is negated 
as in Figure 5.7, the 
Intel386 
SX Microprocessor 
executes 
another 
bus 
state 
(a wait state) and READY # is sampled 
again 
at the end of that state. 
This continues 
indefinitely 
until the cycle is acknowledged 
by READY # assert- 
ed. 


When 
the 
current 
cycle 
is 
acknowledged, 
the 
Intel386 
SX Microprocessor 
terminates 
it. When 
a 
read cycle is acknowledged, 
the Intel386 
SX Micro- 
processor 
latches the information 
present 
at its data 
pins. 
When 
a 
write 
cycle 
is 
acknowledged, 
the 
Intel386 
SX CPU's write data remains valid through- 
out phase one of the next bus state, to provide write 
data hold time. 


CYCLE 2 
NON-PIPELINED 
(WRITE) 
I 
IDLE 


TI 


CYCLE 3 
NON-PIPEUNED 
(READ) 
I 
IDLE 


n 
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Idle states 
are shown 
here for diagram 
variety 
only. Write cycles 
are not always 
followed 
by an idle state. An active 
bus 
cycle 
can immediately 
follow 
the write cycle 


Non·Pipelined Address 


Any bus cycle may be performed with non-pipelined 
address timing. For example, Figure 5.6 shows a 
mixture of read and write cycles with non-pipelined 
address timing. Figure 5.6 shows that the fastest 
possible cycles with non-pipelined address have two 
bus states per bus cycle. The states are named T1 
and T2. In phase one of n, the address signals and 
bus cycle definition signals are driven valid and, to 
signal their availability, address strobe (ADS#) is 
simultaneously asserted. 


During read or write cycles, the data bus behaves as 
follows. If the cycle is a read, the Intel386 SX Micro- 
processor floats its data signals to allow driving by 
the external device being addressed. The Intel386 
SX Microprocessor 
requires 
that all data bus 
pins be at a valid logic state (HIGH or LOW) at 
the end of each read cycle, when READY# is 
asserted. 
The system 
MUST be designed 
to 
meet this requirement. 
If the cycle is a write, data 
signals are driven by the Intel386 SX Microproces- 
sor beginning in phase two of T1 until phase one of 
the bus state following cycle acknowledgment. 


Figure 5.7 illustrates non-pipelined bus cycles with 
one wait state added to Cycles 2 and 3. READY# is 
sampled inactive at the end of the first T2 in Cycles 
2 and 3. Therefore Cycles 2 and 3 have T2 repeated 
again. At the end of the second T2, READY# is 
sampled active. 


When address pipelining is not used, the address 
and bus cycle definition remain valid during all wait 
states. When wait states are added and it is desir- 
able to maintain non-pipelined address timing, it is 
necessary to negate NA# during each T2 state ex- 
cept the last one, as shown in Figure 5.7 Cycles 2 
and 3. If NA# is sampled active during a T2 other 
than the last one, the next state would be T21or T2P 
instead of another T2. 


When address pipelining is not used, the bus states 
and transitions are completely illustrated by Figure 
5.8. The bus transitions 
between fou[ 
possible 
states, T1, T2, Ti, and Th. Bus cycles consist of T1 
and T2, with T2 being repeated for wait states. Oth- 
erwise the bus may be idle, Ti, or in the hold ac- 
knowledge state Th. 


READYN ASSERTED' 
HOLD 
NEGATED. 
REQUEST 
PENDING 


Bus States: 
T1-first 
clock 
of a non-pipelined 
bus cycle 
(Inte1386™ 
SX CPU drives 
new address 
and asserts 
ADSiI'). 
T2-subsequent 
clocks 
of a bus cycle when NAil' has not been sampled 
asserted 
in the current 
bus cycle. 
Ti-idle 
state. 


Th-hold 
acknowledge 
state 
(Inte1386 SX CPU asserts 
HLDA). 


The fastest 
bus cycle 
consists 
of two states 
T1 and T2. 
Four basic bus states 
describe 
bus operation 
when 
not using pipelined 
address. 


Bus cycles always begin with T1. T1 always leads to 
T2. If a bus cycle is not acknowledged during T2 and 
NA# is inactive, T2 is repeated. When a cycle is 
acknowledged during T2, the following state will be 
T1 of the next bus cycle if a bus request is pending 
internally, or Tj if there is no bus request pending, or 
Th if the HOLD input is being asserted. 


Use of pipelined address allows the Intel386 SX Mi- 
croprocessor to enter three additional bus states not 
shown in Figure 5.8. Figure 5.12 is the complete bus 
state diagram, including pipelined address cycles. 


Pipelined 
Address 


Address pipelining is the option of requesting the 
address and the bus cycle definition of the next in- 


IDLE 
CYCLE 
1 
NON-PIPELINED 


(WRITE) 


intel~ 


ternally pending bus cycle before the current bus 
cycle is acknowledged with READY# 
asserted. 
ADS# is asserted by the Intel386 SX Microproces- 
sor when the nex1address is issued. The address 
pipelining option is controlled on a cycle-by-cycle 
basis with the NA# input signal. 


Once a bus cycle is in progress and the current ad- 
dress has been valid for at least one entire bus 
state, the NA# input is sampled at the end of every 
phase one until the bus cycle is acknowledged. Dur- 
ing non-pipelined bus cycles NA# is sampled at the 
end of phase one in every T2. An example is Cycle 2 
in Figure 5.9, during which NA# is sampled at the 
end of phase one of every T2 (it was asserted once 
during the first T2 and has no further effect during 
that bus cycle). 


CYCLE 
2 
NON-PIPELINED 


(READ) 


CYCLE 
3 
PIPELINED 


(WRITE) 


CYCLE 
4 
PIPELINED 


(READ) 


n 
T1 
T2 
T1 
T2 
T2P 
T1P 
T2P 
T1P 
T21 
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[ 
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A23, 
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[ 
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Following 
any idle bus state 
(Ti), addresses 
are non-pipelined. 
Within 
non-pipelined 
bus cycles, 
NA# 
is only 
sampled 
during wait states. 
Therefore, 
to begin address 
pipelining 
during a group of non-pipe lined bus cycles 
requires 
a non-pipe- 
lined cycle 
with at least one wait state (Cycle 
2 above). 


If NA# 
is sampled active, the Intel386 SX Micro- 
processor is free to drive the address and bus cycle 
definition of the next bus cycle, and assert ADS#, 
as soon as it has a bus request internally pending. It 
may drive the next address as early as the next bus 
state, whether the current bus cycle is acknowl- 
edged at that time or not. 


Regarding the details of address pipelining, the 
Intel386 SX Microprocessor has the following char- 
acteristics: 


1. The next address may appear as early as the bus 
state after NA# was sampled active (see Figures 
5.9 or 5.10). In that case, state T2P is entered 
immediately. However, when there is not an inter- 
nal bus request already pending, the next address 
will not be available immediately after NA# is as- 
serted and T21is entered instead of T2P (see Fig- 


ClK2 
[ 


PROCESSOR ClK 
[ 


BHE#,BlE#, 
[ 
A1- 23, 
104/IO#,D/C# 


W/R# 
[ 


READY# [ 


lOCK# 
[ 


00-015 [ 


CYCLE 1 
NON-PIPELINED 
(WRITE) 


ure 5.11 Cycle 3). ProVidedthe current bus cycle 
isn't yet acknowledged by READY# 
asserted, 


T2P will be entered as soon as the Intel386 SX 
Microprocessor does drive the next address. Ex- 
ternal hardware should therefore observe the 
ADS# output as confirmation the next address is 
actually being driven on the bus. 


2. Any address which is validated by a pulse on the 
ADS# output will remain stable on the address 
pins for at least two processor clock periods. The 
Intel386 SX Microprocessor cannot produce a 
new address more frequently than every two 
processor clock periods (see Figures 5.9, 5.10, 
and 5.11). 


3. Only the address and bus cycle definition of the 
very next bus cycle is available. The pipelining ca- 
pability cannot look further than one bus cycle 
ahead (see Figure 5.11 Cycle 1). 


CYCLE 2 
PIPELINED 
(READ) 


CYCLE 3 
PIPELINED 
(WRITE) 


CYCLE 4 
PIPELINED 


(READ) 


240187-25 
Following 
any bus state 
(Ti) the address 
is always 
non-pipelined 
and NA# 
is only sampled 
during 
wait states. 
To start 
address 
pipelining 
after an idle state requires 
a non-pipe lined cycle 
with at least one wait state (cycle 
1 above) 
The pipelined 
cycles 
(2, 3, 4 above) 
are shown 
with various 
numbers 
of wait states. 


• 


-. 
~~ 


5.12. Note it is a superset of the diagram for non- 
pipelined address only, and the three additional bus 
states for pipelined address are drawn in bold. 


CLK2 [ 


PROCESSOR CLK [ 


BHE#,BLE#. 
[ 
Al-A23, 
M/IO#.D/C# 


W/R# 
[ 


ADS# 
[ 


READY# 
[ 


LOCK# 
[ 


00-015 
[ 


non-pipelined address it is T1 and T2). T1P is the 
first bus state of a pipelined cycle. 


CYCLE 1 
PIPELINED 
(WRITE) 


T2P 


CYCLE 2 
PIPELINED 
(READ) 


T2 


CYCLE 3 
PIPELINED 
(WRITE) 


T21 


CYCLE 4 
PIPELINED 
(READ) 


I 
ADS# IS ASSERTED AS 
SOON AS THE CPU HAS ANOTHER 
BUS CYCLE TO PERFORM, 
WHICH IS NOT ALWAYS 
IMMEDIATELY AFTER NA# 
IS ASSERTED 


'------' 
AS LONG AS THE CPU ENTERS THE 
T2P STATE DURING CYCLE 3, 


ADDRESS PIPELINING IS 
MAINTAINED IN CYCLE 4 


ASSERTING NA# MORE 
THAN ONCE DURING 
ANY CYCLE HAS NO 
ADDITIONAL EFFECTS 


NA# COULD HAVE 
BEEN ASSERTED 
IN 11 P IF DESIRED. 
ASSERTION NOW IS 
THE LATEST TIME 
POSSIBLE TO ALLOW 
THE CPU TO ENTER T2P 
STATE TO MAINTAIN 
PIPELINING IN CYCLE 3 


READY* ASSERTED- 
HOLD NEGATED- 
NO REQUEST 


Bus States: 
T1-first 
clock of a non-pipelined bus cycle (Inte1386™SX CPU 
drives new address and asserts ADS#). 
T2-subsequent 
clocks of a bus cycle when NA# has not been 
sampled asserted in the current bus cycle. 
T21-subsequent 
clocks of a bus cycle when NA# has been 
sampled asserted in the current bus cycle but there is not yet 
an internal bus request pending (Inte1386SX CPU will not drive 
new address or assert ADS#). 
T2P-subsequent 
clocks of a bus cycle when NA# has been 
sampled asserted in the current bus cycle and there is an inter- 
nal bus request pending (Inte1386SX CPU drives new address 
and asserts ADS#). 
T1P-first 
clock of a pipelined bus cycle. 


Ti-idle 
state. 


Th-hold 
acknowledge state (Inte1386SX CPU asserts HLDA). 
Asserting NA# for pipelined address gives access to three 
more bus states: T21,T2P and T1P. 
Using pipelined address, the fastest bus cycle consists of T1P 
and T2P. 


Initiating 
and Maintaining 
Pipelined 
Address 


Using the state diagram Figure 5.12, observe the 
transitions from an idle state, Tj, to the beginning of 
a pipelined bus cycle T1P. From an idle state, Tj, the 
first bus cycle must begin with T1, and is therefore a 
non-pipelined bus cycle. The next bus cycle will be 
pipelined, however, provided NA# i's asserted and 
the first bus cycle ends in a T2P state (the address 
for the next bus cycle is driven during T2P). The fast- 
est path from an idle state to a bus cycle with pipe- 
lined address is shown in bold below: 


T" Ti. Ti, T1 - T2 - T2P, T1P - T2P, 
idle 
non-pipelined 
pipelined 
states 
cycle 
cycle 


T1-T2-T2P are the states of the bus cycle that es- 
tablish address pipelining for the next bus cycle, 
which begins with T1P. The same is true after a bus 
hold state, shown below: 
Th' Th, Th, T1 - T2 - T2P, T1p· 
T2P, 
hold acknowledge 
non-pipelined 
pipelined 
states 
cycle 
cycle 


The transition to pipelined address is shown func- 
tionally by Figure 5.10 Cycle 1. Note that Cycle 1 is 
used to transition into pipelined address timing for 
the subsequent Cycles 2, 3 and 4, which are pipe- 
lined. The NA# input is asserted at the appropriate 
time to select address pipelining for Cycles 2, 3 and 
4. 


Once a bus cycle is in progress and the current ad- 
dress has been valid for one entire bus state, the 
NA# input is sampled at the end of every pbase one 
until the bus cycle is acknowledged. Sampling be- 
gins in T2 during Cycle 1 in Figure 5.10. Once NA# 
is sampled active during the current cycle, the 
Intel386 SX Microprocessor is free to drive a new 
address and bus cycle definition on the bus as early 
as the next bus state. In Figure 5.10 Cycle 1 for 
example, the next address is driven during state 
T2P. Thus Cycle 1 makes the transition to pipelined 
address timing, since it begins with T1 but ends with 
T2P. Because the address for Cycle 2 is available 
before Cycle 2 begins, Cycle 2 is called a pipelined 


bus cycle, and it begins with T1P. Cycle 2 begins as 
soon as READY# asserted terminates Cycle 1. 


Examples of transition bus cycles are Figure 5.10 
Cycle 1 and Figure 5.9 Cycle 2. Figure 5.10 shows 
transition during the very first cycle after an idle bus 
state, which is the fastest possible transition into ad- 
dress pipelining. Figure 5.9 Cycle 2 shows a tran- 
sition cycle occurring during a burst of bus cycles. In 
any case, a transition cycle is the same whenever it 
occurs: it consists at least of T1, T2 (NA# is assert- 
ed at that time), and T2P (provided the Intel386 SX 
Microprocessor has an internal bus request already 
pending, which it almost always has). T2P states are 
repeated if wait states are added to the cycle. 


Note that only three states (T1, T2 and T2P) are 
required in a bus cycle performing a transition 
from 
non-pipelined address into pipelined address timing, 
for example Figure 5.10 Cycle 1. Figure 5.10 Cycles 
2, 3 and 4 show that address pipelining can be main- 
tained with two-state bus cycles consisting only of 
T1P and T2P. 


Once a pipelined bus cycle is in progress, pipelined 
timing is maintained for the next cycle by asserting 
NA# and detecting that the Intel386 SX Microproc- 
essor enters T2P during the current bus cycle. The 
current bus cycle must end in state T2P for pipelin- 
ing to be maintained in the next cycle. T2P is identi- 
fied by the assertion of ADS#. Figures 5.9 and 5.10 
however, each show pipelining ending after Cycle 4 
because Cycle 4 ends in T21. This indicates the 
Intel386 SX Microprocessor didn't have an internal 
bus request prior to the acknowledgement of Cycle 
4. If a cycle ends with a T2 or T21,the next cycle will 
not be pipelined. 


Realistically, address pipelining is almost always 
maintained as long as NA# is sampled asserted. 
This is so because in the absence of any other re- 
quest, a code prefetch request is always internally 
pending until the instruction decoder and code pre- 
fetch queue are completely full. Therefore, address 
pipelining is maintained for long bursts of bus cycles, 
if the bus is available (Le., HOLD inactive) and NA# 
is sampled active in each of the bus cycles. 


In response 
to an interrupt 
request 
on the INTR in- 
put when interrupts 
are enabled, 
the Intel386 
SX Mi- 
croprocessor 
performs 
two 
interrupt 
acknowledge 
cycles. 
These 
bus cycles 
are similar to read cycles 
in that bus definition 
signals 
define 
the type of bus 
activity 
taking 
place, and each cycle continues 
until 
acknowledged 
by READY # sampled 
active. 


The 
state 
of A2 distinguishes 
the first and second 
interrupt 
acknowledge 
cycles. 
The 
byte 
address 
driven during the first interrupt 
acknowledge 
cycle is 
4 (A23-A3' 
A1' SLE# 
LOW, A2 and SHE# 
HIGH). 


The byte address 
driven during the second 
interrupt 
acknowledge 
cycle 
is 0 (A23-Al' 
SLE# 
LOW, and 
SHE# 
HIGH). 


PREVIOUSj 


CYCLE 


T2 
T1 


INTERRUPT 
ACKNOWLEDGE 
CYCLE 
1 


T2 
T2 


ADS' 
[ 


NA*[ 


--ep-- 


The LOCK # output 
is asserted 
from 
the beginning 
of the first interrupt 
acknowledge 
cycle until the end 
of the second 
interrupt 
acknowledge 
cycle. Four idle 
bus states, Tj, are inserted 
by the Intel386 
SX Micro- 
processor 
between 
the two 
interrupt 
acknowledge 
cycles 
for 
compatibility 
with 
spec 
TRHRL 
of 
the 
8259A 
Interrupt 
Controller. 


During 
both 
interrupt 
acknowledge 
cycles, 
015-00 
float. No data is read at the end of the first interrupt 
acknowledge 
cycle. 
At the end of the second 
inter- 


rupt acknowledge 
cycle, the Intel386 
SX Microproc- 
essor will read an external 
interrupt 
vector 
from Dr 
Do of the data bus. The vector 
indicates 
the specific 
interrupt 
number 
(from 0-255) 
requiring 
service. 


INTERRUPT 
ACKNOWLEDGE 
CYCLE 
2 


T2 
T21 


--ep--- 


Interrupt Vector (0-255) is read on 00-07 
at end of second interrupt Acknowledge bus cycle. 


Because each Interrupt Acknowledge bus cycle is followed by idle bus states. asserting NA'" has no practical effect. 
Choose the approach which is simplest for your system hardware design. 


The execution unit halts as a result of executing a 
HLT instruction. Signaling its entrance into the halt 
state, a halt indication cycle is performed. The halt 
indication cycle is identified by the state of the bus 
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cl(l Cluure5S 
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indication cycle must be acknowledged by READY# 
asserted. A halted Intel386 SX Microprocessor re- 
sumes execution when INTR (if interrupts are en- 
abled), NMI or RESET is asserted. 


CYCLE 1 
NON-PIPELINED 
(WRITE) 


Tl 
T2 


CYCLE 2 
NON-PIPELINED 
(HALT) 


T1 
T2 


I 
IDLE 


Ti 


NOTE: HALT CYCLE ljUST BE 
ACKNOWLEDGEDBY READY'" 
ASSERTED. WAIT STATES ljAY 
BE ADDED TO THE CYCLE If 
DESIRED. 


- (fLOATING) 
- - -- 
I 
I 


Intol386 TII SX CPU REljAINS 
HALTED UNTIL INTR. Nljl 
OR 
RESET IS ASSERTED. 


I 
I 
Intol386 Tlj SX CPU RESPONDS 
TO HOLD INPUT WHILE IN 
THE HALT STATE. 


ENTERING 
AND EXITING 
HOLD 
ACKNOWLEDGE 
The Intel386 SX Microprocessor shuts down as a 
result of a protection fault while attempting to pro· 
cess a double fault. Signaling its entrance into the 
shutdown state, a shutdown indication cycle is per· 
formed. The shutdown indication cycle is identified 
by the state of the bus definition signals shown in 
Bus Cycle Definition 
Signals and an address of O. 
The shutdown indication cycle must be acknowl· 
edged by READY# asserted. A shutdown Intel386 
SX Microprocessor resumes execution when NMI or 
RESET is asserted. 


The bus hold acknowledge state, Th, is entered in 
response to the HOLD input being asserted. In the 
bus hold acknowledge state, the Intel386 SX Micro- 
processor floats all outputs or bidirectional signals, 
except for HLDA. HLDA is asserted as long as the 
Intel386 SX Microprocessor remains in the bus hold 
acknowledge state. In the bus hold acknowledge 
state, all inputs except HOLD, FLT # and RESET are 
ignored. 


CYCLE 
1 
PIPELINED 
(READ) 


TIP 
T2P 


CYCLE 2 
PIPELINED 
(SHUTDOWN) 


TIP 
T21 


I 
IDLE 


Ti 


Intel386™ 
SX CPU REMAINS 
SHUTDOWN UNTIL 
NMI 
OR RESET IS ASSERTED. 


I 
I 
Intel386™ 
SX CPU RESPONDS 
TO HOLD INPUT WHILE IN 
THE SHUTDOWN STATE. 
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Th may be entered from a bus idle state as in Figure 
5.16 or after the acknowledgement of the current 
physical bus cycle if the LOCK# signal is not assert· 
ed, as in Figures 5.17 and 5.18. 


This 
exited in response to the HOLD input being 
negated. The following state will be Ti as in Figure 
5.16 if no bus request is pending. The following bus 
state will be T1 if a bus request is internally pending, 
as in Figures 5.17 and 5.18. This exited in response 
to RESET being asserted. 


If a rising edge occurs on the edge-triggered NMI 
input while in Th, the event is remembered as a non- 
maskable interrupt 2 and is serviced when This exit- 
ed unless the Intel386 SX Microprocessor is reset 
before This exited. 


BHEH,BlEH, [ 
Al-A23, 
M/IOH 
DICH, W/RH 


ADSH[ 


NAH[ 


RESET being asserted takes priority over HOLD be- 
ing asserted. If RESET is asserted while HOLD re- 
mains asserted, the Intel386 SX Microprocessor 
drives its pins to defined states during reset, as in 
Table 5.5 Pin State During Reset, and performs 
internal reset activity as usual. 


If HOLD remains asserted when RESET is inactive, 
the Intel386 SX Microprocessor enters the hold ac- 
knowledge state before performing its first bus cy- 
cle, provided HOLD is still asserted when the 
Intel386 SX Microprocessor would otherwise per- 
form its first bus cycle. 


I-- 
HOLD 
--l 
I 
_ 
ACKNOWLEDGE_ 
I 


Th 
Th 
Th 


(FLOATING)•••• 


I 
,----- 
(FlOATING)-··- 


- - - - 
(FLOATING)-· 
-. 
I 
00-015 [ 
~F~2A!I~~)---- 


NOTE: 
For maximum design flexibility the Intel386™ SX CPU has no inlernal pullup resistors on its outputs. Your design may 
require an external pullup on ADS# and other outputs to keep them negated during float periods. 
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Activating the FLT # input floats all Intel386 SX bidi- 
rectional and output signals, including HLDA. Assert- 
ing FLT# isolates the Intel386 SX from the sur- 
rounding circuitry. 


As the Intel386 SX is packaged in a surface mount 
PQFP, it cannot be removed from the motherboard 
when In-Circuit Emulation (ICE) is needed. The 
FLT# input allows the Intel386 SX to be electrically 
isolated from the surrounding circuitry. This allows 
connection of an emulator to the Intel386 SX PQFP 
without removing it from the PCB. This method of 
emulation is referred to as ON-Circuit Emulation 
(ONCE). 


FLT# is an asynchronous. active-low input. It is rec- 
ognized on the rising edge of CLK2. When recog- 
nized, it aborts the current bus cycle and floats the 
outputs of the Intel386 SX (Figure 5.20). FLT# must 
be held low for a minimum of 16 CLK2 cycles. Reset 
should be asserted and held asserted until after 
FLT # 
isdeasserted. 
This will ensure that the 
Intel386 SX will exit float in a valid state. 


CYCLE 
1 
NON-PIPELINED 
(READ) 


T1 
T2 
T2 


HLD" [ 


IHE'.IL£I ••••l-A23. [ 
IA/IOI. D/CI. W/RI 


READYI 
[ 


(NE 


LOCKI[ 


Asserting the FLT# input unconditionally aborts the 
current bus cycle and forces the Intel386 SX into the 
FLOAT mode. Since activating FLT# unconditional- 
ly forces the Intel386 SX into FLOAT mode. the 
Intel386 SX is not guaranteed to enter FLOAT in a 
valid state. After deactivating FLT#, the Intel386 SX 
is not guaranteed to exit FLOAT mode in a valid 
state. This is not a problem as the FLT # pin is 
meant to be used only during ONCE. After exiting 
FLOAT, the Intel386 SX must be reset to return it to 
a valid state. Reset should be asserted before FLT # 
is deasserted. This will ensure that the Intel386 SX 
will exit float in a valid state. 


FLT# has an internal pull-up resistor, and if it is not 
used it should be unconnected. 


BUS ACTIVITY 
DURING 
AND FOLLOWING 
RESET 


RESET is the highest priority input signal, capable of 
interrupting any processor activity when it is assert- 
ed. A bus cycle in progress can be aborted at any 
stage, or idle states or bus hold acknowledge states 
discontinued so that the reset state is established. 


CYCLE 
2 
NON-PIPELINED 
(WRITE) 


T1 
T2 


NOTE: 
HOLD II a synchronous Input and can be asserted at any CLK2 edge, provided setup and hold (t23 and t24) require- 
ments are met. This waveform is useful for determining Hold AcknoWledge latency. 
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penoes 
to 
ensure 
It 
IS recognizee 
mrougnout 
me 
Intel386 
SX Microprocessor. 
and at least 
80 CLK2 
periods 
if self-test 
is going 
to be requested 
at the 
falling 
edge. 
RESET 
asserted 
pulses 
less than 
15 
CLK2 periods 
may not be recognized. 
RESET puls- 
es less than 80 CLK2 periods followed 
by a self-test 
may cause 
the self-test 
to report 
a failure 
when no 
true failure 
exists. 


Provided 
the RESET 
falling 
edge 
meets 
setup 
and 
hold times t25 and t26. the internal 
processor 
clock 
phase is defined 
at that time as illustrated 
by Figure 
5.19 and Figure 7.7. 


CYCLE 1 
PIPELINED 
(WRITE) 


T21 


BHEN,BLEN.Al-A23. 
[ 
VALID 
1 
t.i/ION. D/CN. W/RN 


goes Inactive 
oy navlng me tlu::;y # Input at a LUW 
level as shown in Figure 5.19. The self-test 
requires 
approximately 
(220 + 
60) 
CLK2 
periods 
to 
com- 
plete. 
The self-test 
duration 
is not affected 
by the 
test results. Even if the self-test 
indicates 
a problem. 
the Intel386 SX Microprocessor 
attempts 
to proceed 
with the reset sequence 
afterwards. 


After the RESET falling edge (and after the self-test 
if it was requested) 
the Intel386 
SX Microprocessor 
performs 
an internal 
initialization 
sequence 
for ap- 
proximately 
350 to 450 CLK2 periods. 


HOLD 
CYCLE2 
ACKNOWLEDGE 
NON-PIPELINED 
(READ) 


NOTE: 
HOLD 
is a synchronous 
input and can be asserted 
at any CLK2 
edge. 
provided 
setup 
and hold 
(t23 and t24) require- 
ments 
are met. This waveform 
is useful for determ"ining 
Hold Acknowledge 
latency. 


RESET 


~ 1 S CLK2 
DURA nON 
If 


NOT 
GOING 
TO 
REQUEST 
SELF-TEST. 


NO 
SELF-TEST 


(NOTE 
1) 


LOW 
TO 
BEGIN 
SELF-TEST(NOTE 
2) 


ERRORH 
[ 


BHEH.BLEH. 


W!RH.~!IOH. 
[ 
HLDA 


Al-A23. 
[ 
D!CH.LOCKH 


ADSH 
[ 


NAH[ 


NOTES: 
1. BUSY# should be held stable for 8 CLK2 periods before and after the CLK2 period in which RESET falling edge 
occurs. 
2. If self-test is requested the outputs remain in their reset state as shown here. 


CK2 


FUH 
~ 


CTRL ::::) 
VALID 


DATA --·0--< 
VALID 


ADDR =::x 
VALID 


RESET 


•• 


5.5 Self-test 
Signature 


Upon completion of self-test (if self-test was re- 
quested by driving BUSY# LOW at the falling edge 
of RESET) the EAX register will contain a signature 
of OOOOOOOOH 
indicating the Intel386 SX Microproc- 
essor passed its self-test of microcode and major 
PLA contents with no problems detected. The pass- 
ing signature in EAX, OOOOOOOOH, 
applies to all revi- 
sion levels. Any non-zero signature indicates the unit 
is faulty. 


5.6 Component 
and Revision 
Identifiers 


To assist users, the Intel386 SX Microprocessor af- 
ter reset holds a component identifier and revision 
identifier in its OX register. The upper 8 bits of OX 
hold 23H as identification of the Intel386 SX Micro- 
processor (the lower nibble, 03H, refers to the 
Intel386 OXArchitecture. The upper nibble, 02H, re- 
fers to the second member of the Intel386 OX Fami- 
ly). The lower 8 bits of OX hold an 8-bit unsigned 
binary number related to the component revision 
level. The revision identifier will, in general, chrono- 
logically track those component steppings which are 
intended to have certain improvements or distinction 
from previous steppings. The Intel386 SX Microproc- 
essor revision identifier will track that of the Intel386 
OX CPU where possible. 
The revision identifier is intended to assist users to a 
practical extent. However, the revision identifier val- 
ue is not guaranteed to change with every stepping 
revision, or to follow a completely uniform numerical 
sequence, depending on the type or intention of re- 
vision, or manufacturing materials required to be 
changed. Intel has sole discretion over these char- 
acteristics of the component. 


Table 5.7. Component 
and 
Revision 
Identifier 
History 


Stepping 
Revision 
Identifier 


AO 
04H 
B 
05H 
C 
08H 
0 
08H 
E 
08H 


5.7 Coprocessor 
Interfacing 


The Intel386 SX Microprocessor provides an auto- 
matic interface for the Intel Intel387 SX numeric 
floating-point coprocessor. The Intel387 SX coproc- 
essor uses an I/O mapped interface driven automat- 
ically by the Intel386 SX Microprocessor and assist- 
ed by three dedicated signals: BUSY#, ERROR# 
and PEREQ. 


As the Intel386 SX Microprocessor begins support- 
ing a coprocessor instruction, it tests the BUSY# 
and ERROR# signals to determine if the coproces- 


sor 
can accept 
its 
next instruction. 
Thus, the 
BUSY# and ERROR# inputs eliminate the need for 
any 'preamble' bus cycles for communication be- 
tween processor and coprocessor. The Intel387 SX 
can be given its command opcode immediately. The 
dedicated signals provide instruction synchroniza- 
tion, and eliminate the need of using the WAIT op- 
code (9BH) for Intel387 SX instruction synchroniza- 
tion (the WAIT opcode was required when the 8086 
or 8088 was used with the 8087 coprocessor). 


Custom coprocessors can be included in Intel386 
SX Microprocessor based systems by memory- 
mapped or I/O-mapped interfaces. Such coproces- 
sor interfaces allow a completely custom protocol, 
and are not limited to a set of coprocessor protocol 
'primitives'. 
Instead, 
memory-mapped 
or 
1/0- 
mapped interfaces may use all applicable instruc- 
tions for high-speed coprocessor communication. 
The BUSY# and ERROR# inputs of the Intel386 
SX Microprocessor may also be used for the custom 
coprocessor interface, if such hardware assist is de- 
sired. These signals can be tested by the WAIT op- 
code (9BH). The WAIT instruction will wait until the 
BUSY# input is inactive (interruptable by an NMI or 
enabled INTR input), but generates an exception 16 
fault if the ERROR# pin is active when the BUSY# 
goes (or is) inactive. If the custom coprocessor inter- 
face is memory-mapped, protection of the address- 
es used for the interface can be provided with the 
Intel386 SX CPU's on-chip paging or segmentation 
mechanisms. If the custom interface is I/O-mapped, 
protection of the interface can be provided with the 
10PL (I/O Privilege Level) mechanism. 


The Intel387 SX numeric coprocessor interface is 
I/O mapped as shown in Table 5.8. Note that the 
Intel387 SX coprocessor interface addresses are 
beyond the OH-OFFFFHrange for programmed I/O. 
When the Intel386 SX Microprocessor supports the 
Intel387 SX coprocessor, the Intel386 SX Micro- 
processor automatically generates bus cycles to the 
coprocessor interface addresses. 
Table 5.8. Numeric Coprocessor 
Port Addresses 


Address 
In Intel386 
SX 
Intel387SX 
CPU I/O Space 
Coprocessor 
Register 


8000F8H 
Opcode Register 
8000FCH/8000FEH' 
Operand Register 


To correctly map the Intel387 SX registers to the 
appropriate I/O addresses, connect the CMOOand 
CM01 lines of the Intel387 SX as listed in Table 5.9. 


Table 5.9. Connections 
for CMDO 
and CMD1 Inputs for the Intel387 
SX 


Signal 
Connection 


CMOO 
Connect directly 
to Intel386 SX CPU A2 signal 
CM01 
Connect to ground. 


Software Testing for Coprocessor 
Presence 


When software is used to test for coprocessor 
(Inte1387SX) presence, it should use only the follow- 
ing coprocessor opcodes: FINIT, FNINIT, FSTCW 
mem, FSTSW mem and FSTSW AX. To use other 
coprocessor opcodes when a coprocessor is known 
to be not present, first set EM = 1 in the Intel386 SX 
CPU's CROregister. 


6.0 PACKAGE 
THERMAL 
SPECIFICATIONS 


The Intel386 SX Microprocessor is specified for op- 
eration when case temperature (Tcl is within the 
range of 0·C-1 OO·C.The case temperature may be 
measured in any environment, to determine whether 
the Intel386 SX Microprocessor is within specified 
operating range. The case temperature should be 
measured at the center of the top surface opposite 
the pins. 


The ambient temperature (Tal is related to Te and 
the thermal conductivity parameters 8ja and 8jefrom 
the following equations (eqn. 3 is derived by elimi- 
nating the junction temperature (Tj) between eqns. 
1 and 2): 
1) Tj = Te + P08je 
2) Ta = Tj - 
PO/lja 
3) Te = Ta + PO[8ja - 
8je! 


Values for /lja and /lje are given in Tab.le6.1 .for the 
100 lead fine pitch. /lja is given at vanous airflows. 
The power (P) dissipated by the chip as heat is 
Vccolcc. A guaranteed maximum safe Ta can be cal- 
culated from eqn. 3 by using the maximum safe Teof 
100·C, along with the maximum power drawn by the 
chip in the given design, and /lje and 8ia values from 
Table 6.1. (The /lja value depends on the airflow, 
measured at the top of the chip, provided by the 
system ventilation.) 


The following sections describe recommended elec- 
trical connections for the Intel386 SX Microproces- 
sor, and its electrical specifications. 


7.1 Power and Grounding 


The Intel386 SX Microprocessor is implemented in 
CHMOS IV technology and has modest power re- 
quirements. However, its high clock frequency and 
47 output buffers (address, data, control, and HLDA) 
can cause power surges as multiple output buffers 
drive new signal levels simultaneously. For clean on- 
chip power distribution at high frequency, 14 Vcc 
and 18 Vss pins separately feed functional units of 
the Intel386 SX Microprocessor. 


Power and ground connections must be made to all 
external Vcc and Vss pins of the Intel386 SX Micro- 
processor. On the circuit board, all Vcc pins should 
be connected on a Vcc plane and all Vss pins 
should be connected on a GND plane. 


Liberal decoupling capacitors should be placed near 
the Intel386 SX Microprocessor. The Intel386 SX Mi- 
croprocessor driving its 24-bit address bus and 
16-bit data bus at high frequencies can cause tran- 
sient power surges, particularly when driving large 
capacitive loads. Low inductance capacitors and in- 
terconnects are recommended for best high fre- 
quency electrical performance. Inductance can be 
reduced by shortening circuit board traces between 
the Intel386 SX Microprocessor and decoupling ca- 
pacitors as much as possible. 


81aversus Airflow· 
ft/mln (m/sec) 
Package 
/lJe 
0 
200 
400 
600 
800 
1000 
(0) 
(1.01) 
(2.03) 
(3.04) 
(4.06) 
(5.07) 


100 Lead 
7.5 
34.5 
29.5 
25.5 
22.5 
21.5 
21 
Fine Pitch 


Pin 
Signal 
Pull-up 
Value 
Purpose 


16 
ADS# 
20 KO ±10% 
Lightly pull ADS# 
inactive during 
Intel386™ 
SX CPU hold acknowledge 
states 


26 
LOCK# 
20 KO ±10% 
Lightly pull LOCK # inactive during 
Intel386TM SX CPU hold acknowledge 
states 


RESISTOR 
RECOMMENDATIONS 


The ERROR #, FLT # and BUSY # inputs have inter- 
nal pull-up resistors 
of approximately 
20 KO and the 
PEREa 
input 
has an internal 
pull-down 
resistor 
of 
approximately 
20 KO built into the Intel386 
SX Mi- 
croprocessor 
to keep 
these 
signals 
inactive 
when 
the Intel387 
SX is not present 
in the system 
(or tem- 
porarily 
removed 
from its socket). 


In 
typical 
designs, 
the 
external 
pull-up 
resistors 
shown 
in Table 
7.1 are recommended. 
However, 
a 
particular 
design 
may have reason 
to adjust the re- 
sistor values 
recommended 
here, or alter the use of 
pull-up 
resistors 
in other ways. 


For reliable 
operation, 
always 
connect 
unused 
in- 
puts to an appropriate 
signal level. N/C 
pins should 
always 
remain 
unconnected. 
Connection 
of NIC 
pins 
to Vcc or Vss will 
result 
In component 
mal· 
function 
or Incompatibility 
with 
future 
stepplngs 
of the 
Intel386 
SX Microprocessor. 


Particularly 
when not using interrupts 
or bus hold (as 
when first prototyping), 
prevent 
any chance 
of spuri- 
ous activity by connecting 
these associated 
inputs to 
GND: 
Signal 
INTR 
NMI 
HOLD 


If not using address 
pipelining, 
connect 
pin 6, NA #, 


through 
a pull-up in the range of 20 KO to Vcc. 


7.2 Maximum Ratings 


Table 
7.2. Maximum 
Ratings 


Parameter 
Maximum 
Rating 


Storage temperature 
- 65 ·C to 150 ·C 
Case temperature 
under bias 
- 65 ·C to 110 ·C 
Supply voltage with respect 
to Vss 
-.5Vt06.5V 
Voltage on other pins 
- .5V to (Vcc + .5)V 


Table 
7.2 gives 
stress 
ratings 
only, 
and functional 
operation 
at the maximums 
is not guaranteed. 
Func- 
tional operating 
conditions 
are given in section 
7.3, 
D.C. Specifications, 
and section 
7.4, A.C. Specifi- 
cations. 


Extended 
exposure 
to the Maximum 
Ratings may af- 
fect 
device 
reliability. 
Furthermore, 
although 
the 
Intel386 
SX Microprocessor 
contains 
protective 
cir- 
cuitry to resist damage from static electric 
discharge, 
always take precautions 
to avoid high static voltages 
or electric 
fields. 


,.'" ",.v . ..,.,'trW"III"a"'"I~ 
Functional 
operating 
range: Vee 
= 
5V ± 10%; TeASE = 
O°C to 100°C 


Symbol 
Parameter 
Min 
Max 
Unit 
Test Condition 


VIL 
Input LOW Voltage 
-0.3 
+0.8 
V 


VIH 
Input HIGH Voltage 
2.0 
Vee+0.3 
V 


VILe 
CLK2 Input LOW Voltage 
-0.3 
+0.8 
V 


VIHe 
CLK2 Input HIGH Voltage 
Vee-0.8 
Vee+0.3 
V 


VOL 
Output LOW Voltage 
IOL=4 
mA: 
A23-A1,D1S-DO 
0.45 
V 
IOL=5mA: 
BHE# ,BLE#,W/R#,D/C#, 
0.45 
V 
M/IO# 
,LOCK# ,ADS#,HLDA 


VOH 
Output HIGH Voltage 
IOH= -1 
mA: 
A23-A1,D1S-DO 
2.4 
V 
IOH= - 0.2 mA: 
A23-A1,D1S-DO 
Vee-0.5 
V 
IOH= -0.9 
mA: 
BHE#,BLE#,W/R#, 
2.4 
V 
D/C#,M/IO#,LOCK#, 
ADS#,HLDA 
IOH= -0.18 
mA: 
BHE#,BLE#,w/R#, 
Vee-0.5 
V 
D/C#,M/IO#,LOCK#, 
ADS#,HLDA 


III 
Input Leakage Current 
±15 
JJ-A 
OV~VIN~Vee 
(for all pins except PER EO, BUSY #, FLT # 
and ERROR#) 


IIH 
Input Leakage Current 
200 
JJ-A 
VIH = 2.4V, Note 1 
(PER EO pin) 


IlL 
Input Leakage Current 
-400 
JJ-A 
VIL = 0.45V, Note 2 
(BUSY #, ERROR # and FLT # pins) 


ILO 
Output Leakage Current 
±15 
JJ-A 
0.45V~VOUT~Vee 


Ice 
Supply Current 
(See Note 3) 
CLK2 = 32 MHz: with 16 MHz Intel386 SX CPU 
220 
mA 
Ice typ = 150 mA 
CLK2 = 40 MHz: with 20 MHz Intel386 SX CPU 
250 
mA 
Ice typ= 
180 mA 
CLK2 = 50 MHz: with 25 MHz Intel386 SX CPU 
280 
mA 
leetyp=210 
mA 
CLK2 = 66 MHz: with 33 MHz Intel386 SX CPU 
380 
mA 
Ice typ = 290 mA 


CIN 
Input Capacitance 
10 
pF 
Fe = 1 MHz, Note 4 


COUT 
Output or I/O Capacitance 
12 
pF 
Fe = 1 MHz, Note 4 


CeLK 
CLK2 Capacitance 
20 
pF 
Fe = 1 MHz, Note 4 


All values except Icc tested at the minimum operating frequency of the part (eLK2 = 8 MHz). 


NOTES: 
1. PEREQ input has an internal pull-down resistor. 
2. BUSY#, FLT# and ERROR# inputs each have an internal pull-up resistor. 
3. Icc max measurement at worst case frequency, Vcc and temperature, with SOpF output load. 
4. Not 100% tested. 


•• 
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Table 
7.4. Low Power 
(LP) Intel386™ 
SX Microprocessor 
D.C. Characterlstlcs-33 
MHz, 25 MHz, 20 MHz, 16 MHz, and 12 MHz 


Symbol 
Parameter 
Mln 
Max 
Unit 
Test Condition 


VIL 
Input LOW Voltage 
-0.3 
+0.8 
V 


VIH 
Input HIGH Voltage 
2.0 
Vee+0.3 
V 


VILe 
CLK2 Input LOW Voltage 
-0.3 
+0.8 
V 


VIHe 
CLK2 Input HIGH Voltage 
Vee-0.8 
Vee+0.3 
V 


VOL 
Output LOW Voltage 
IOL=4mA: 
A23-A1,D1S-DO 
0.45 
V 
IOL=5mA: 
BHE#,BLE#,W/R#,D/C#, 
0.45 
V 


I 
M/IO#,LOCK#,ADS#,HLDA 


VOH 
Output HIGH Voltage 
IOH= -1 
mA: 
A23-A1,D1S-DO 
2.4 
V 
IOH= - 0.2 mA: 
A23-A1,D1S-DO 
Vee-0.5 
V 
IOH= - 0.9 mA: 
BHE#,BLE#,W/R#, 
2.4 
V 
D/C# 
,MIIO# 
,LOCK#, 
ADS#,HLDA 
IOH= -0.18 
mA: 
BHE#,BLE#,W/R#, 
Vee-0.5 
V 
D/C#,MIIO#,LOCK#, 
ADS#,HLDA 


III 
Input Leakage Current 
±15 
p.A 
OV:5:VIN:5:Vce 
(for all pins except PEREQ, BUSY #, FLT # 
and ERROR#) 


IIH 
Input Leakage Current 
200 
p.A 
VIH = 2.4V, Note 1 


(PEREQ pin) 


IlL 
Input Leakage Current 
-400 
p.A 
VIL = 0.45V, Note 2 


(BUSY #, ERROR # and FLT # pins) 


ILO 
Output Leakage Current 
±15 
p.A 
0.45V:5:VOUT:5:Vee 


Ice 
Supply Current 
(See Note 3) 
CLK2=4MHz 
100 
mA 
Ice typ = 50 mA 
CLK2 = 24 MHz: with 12 MHz Intel386 SX CPU 
190 
mA 
Ice typ= 
120 mA 
CLK2 = 32 MHz: with 16 MHz Intel386 SX CPU 
220 
mA 
Ice typ= 
150 mA 
CLK2 = 40 MHz: with 20 MHz Intel386 SX CPU 
250 
mA 
Ice typ= 
180 mA 
CLK2 = 50 MHz: with 25 MHz Intel386 SX CPU 
280 
mA 
Icetyp=210mA 
CLK2 = 66 MHz: with 33 MHz Intel386 SX CPU 
380 
mA 
Ice typ = 290 mA 


CIN 
Input Capacitance 
10 
pF 
Fe = 1 MHz, Note 4 


GoUT 
Output or 1/0 Capacitance 
12 
pF 
Fe= 
1 MHz, Note 4 


CeLK 
CLK2 Capacitance 
20 
pF 
Fe = 1 MHz, Note 4 


All values except Ice tested at the minimum operating frequency of the part (CLK2 = 4 MHz). 


NOTES: 
1. PEREa input has an internal pull-down resistor. 
2. BUSY#, FLT# and ERROR/I inputs each have an internal pUll-Upresistor. 
3. Ice max measurement at worst case frequency, Vce and temperature, with 50 pF output load. 
4. Not 100% tested. 


intel~ 


The AG. specifications given in Tables 7.5 through 
7.8 consist of output delays, input setup require- 
ments and input hold requirements. All AG. specifi- 
cations are relative to the GlK2 rising edge crossing 
the 2.QVlevel. 


AG. spec measurement is defined by Figure 7.1. In- 
puts must be driven to the voltage levels indicated 
by Figure 7.1 when AG. specifications are mea- 
sured. Output delays are specified with minimum 
and maximum limits measured as shown. The mini- 
mum delay times are hold times provided to external 
circuitry. Input setup and hold times are specified 


CLK2[ 


OUTPUTS 
(Al-A23.8HEI.8LEI. 
[ 
AOSI ••••/IOI.O/CI. 
W/RI.LOCKI.HLOA) 


OUTPUTS[ 
(00-015) 


INPUTS[ 
(N/AI,INTR.N"'I) 


INPUTS 
(REAOVI.HOLO,[ 
fLTI.ERRORI.8USVI, 
PEREO,00-015) 


as minimums. defining the smallest acceptable sam- 
pling window. Within the sampling window, a syn- 
chronous input signal must be stable for correct op- 
eration. 


Outputs AOS#, 
W/R#, 
O/G#, 
M/IO#, 
lOGK#, 


SHE#, SlE #, A23-A1 and HlOA only change at 
the beginning of phase one. 015-00 
(write cycles) 


only change at the beginning of phase two. The 
REAOY#, 
HOLD. 
SUSY#. 
ERROR#, 
PEREa, 


FlT# 
and 015-00 (read cycles) inputs are sampled 
at the beginning of phase one. The NA#, INTR and 
NMI inputs are sampled at the beginning of phase 
two. 


LEGEND 
A - 
MaximUlII 
Output 
Delay Spec 


,B - 
Minimum 
Output 
Delay Spec 
C - 
Minimum 
Input Setup 
Spec 
D - 
Minimum 
Input Hold Spec 


A.C. SPECIFICATIONS 
Functional 
operating 
range: Vcc 
= 5V ± 10%; TCASE = O°C to 100°C 


33 MHz 
25 MHz 


Symbol 
Parameter 
Intel386 
SX 
Intel386 
SX 
Unit 
Figure 
Notes 


Min 
Max 
Min 
Max 


Operating 
Frequency 
4 
33 
4 
25 
MHz 
Half CLK2 Frequency 


t1 
CLK2 Period 
15 
125 
20 
125 
ns 
7.3 
.- 


t2a 
CLK2 HIGH Time 
6.25 
7 
ns 
7.3 
at 2V(3) 


t2b 
CLK2 HIGH Time 
4.0 
4 
ns 
7.3 
at (Vcc-0.8)V(3); 
Note 3 


t3a 
CLK2 LOW Time 
6.25 
7 
ns 
7.3 
at 2V(3) 


t3b 
CLK2 LOW Time 
4.5 
5 
ns 
7.3 
at 0.8V(3) 


4 
CLK2 Fall Time 
4 
7 
ns 
7.3 
(Vcc-0.8)V 
to 0.8V(3) 


t5 
CLK2 Rise Time 
4 
7 
ns 
7.3 
0.8V to (Vcc-0.8)V(3) 


ts 
A23-A1 
Valid Delay 
4 
15 
4 
17 
ns 
7.5 
CL = 50 pF(4) 


t7 
A23-A1 
Float Delay 
4 
20 
4 
30 
ns 
7.6 
(Note 1) 


t8 
BHE#, 
BLE#, 
LOCK# 
4 
15 
4 
17 
ns 
7.5 
CL = 50 pF(4) 


Valid Delay 


t9 
BHE#, 
BLE#, 
LOCK# 
4 
20 
4 
30 
ns 
7.6 
(Note 1) 
Float Delay 


tlO 
W/R#, 
M/IO#, 
D/C#, 
4 
15 
4 
17 
ns 
7.5 
CL = 50 pF(4) 


ADS# 
Valid Delay 


t11 
W/R#, 
M/IO#, 
D/C#, 
4 
20 
4 
30 
ns 
7.6 
(Note 1) 
ADS # Float Delay 


t12 
015-00 
Write Data 
7 
23 
7 
23 
ns 
7.5 
CL = 50 pF(4, 5) 
Valid Delay 


t12a 
015-00 
Write Data 
2 
2 
ns 
CL = 50 pF(4) 


Hold Time 


t13 
015-00 
Write Data 
4 
17 
4 
22 
ns 
7.6 
(Note 1) 
Float Delay 


t14 
HLDA Valid Delay 
4 
20 
4 
22 
ns 
7.6 
CL = 75 pF(4) 


t15 
NA# 
Setup Time 
5 
5 
ns 
7.4 


t16 
NA # Hold Time 
2 
3 
ns 
7.4 


t19 
READY # Setup Time 
7 
9 
ns 
7.4 


t20 
READY # Hold Time 
4 
4 
ns 
7.4 


t21 
015-00 
Read Data 
5 
7 
ns 
7.4 


Setup Time 


t22 
015-00 
Read Data 
3 
5 
ns 
7.4 


Hold Time 


Functional 
operating 
range: Vcc = 5V ± 10%; TCASE = O°C to 100°C 


Table 
7.5. Intel386™ 
SX Microprocessor 
A.C. Characterlstlcs-33 
MHz and 25 MHz (Continued) 


33 MHz 
25 MHz 


Symbol 
Parameter 
Intel386 
SX 
Intel386SX 
Unit 
Figure 
Notes 


Mln 
Max 
Mln 
Max 


t23 
HOLD Setup Time 
9 
9 
ns 
7.4 


t24 
HOLD Hold Time 
2 
3 
ns 
7.4 


t25 
RESET Setup Time 
5 
8 
ns 
7.7 


t26 
RESET Hold Time 
2 
3 
ns 
7.7 


t27 
NMI, INTR Setup Time 
5 
6 
ns 
7.4 
(Note 2) 


t28 
NMI, INTR Hold Time 
5 
6 
ns 
7.4 
(Note 2) 


t29 
PEREa, 
ERROR#, 
BUSY#, 
5 
6 
ns 
7.4 
(Note 2) 


FLT II Setup Time 


t30 
PEREa, 
ERROR II , BUSY II, 
4 
5 
ns 
7.4 
(Note 2) 
FLT II Hold Time 


NOTES: 
1. Float condition occurs when maximum output current becomes less than ILO in magnitude. Float delay is not 100% 
tested. 
2. These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing purposes 
to assure recognition within a specific CLK2 period. 
3. These are not tested. They are guaranteed by design characterization. 
4. Tested with CL set at 50 pF. See Figures 7 and 8 for load capacitance derating curve. 
5. Minimum time not 100% tested. 


33 MHz 
25 MHz 


Symbol 
Parameter 
Intel386 
SX 
Intel386SX 
Unit 
Figure 
Notes 


Min 
Max 
Min 
Max 


Operating 
Frequency 
2 
33 
2 
25 
MHz 
Half CLK2 Frequency 


t1 
CLK2 Period 
15 
250 
20 
250 
ns 
7.3 


t2a 
CLK2 HIGH Time 
6.25 
7 
ns 
7.3 
at 2V(3) 


t2b 
CLK2 HIGH Time 
4.0 
4 
ns 
7.3 
at (Vcc-0.8)V(3); 
Note 3 


t3a 
CLK2 LOW Time 
6.25 
7 
ns 
7.3 
at2V(3) 


t3b 
CLK2 LOW Time 
4.5 
5 
ns 
7.3 
at 0.8V(3) 


t4 
CLK2 Fall Time 
4 
7 
ns 
7.3 
(Vcc-0.8)V 
to 0.8V(3) 


t5 
CLK2 Rise Time 
4 
7 
ns 
7.3 
0.8V to (Vcc-0.8)V(3) 


t6 
A23-A1 
Valid Delay 
4 
15 
4 
17 
ns 
7.5 
CL = 50 pF(4) 


t7 
A23-A1 
Float Delay 
4 
20 
4 
30 
ns 
7.6 
(Note 1) 


t8 
BHEII, 
BLEil, 
LOCKII 
4 
15 
4 
17 
ns 
7.5 
CL = 50 pF(4) 


Valid Delay 


t9 
BHEII, 
BLEil, 
LOCKII 
4 
20 
4 
30 
ns 
7.6 
(Note 1) 
Float Delay 


33 MHz 
25 MHz 


Symbol 
Parameter 
Intel386 
SX 
Intel386 
SX 
Unit 
Figure 
Notes 


Min 
Max 
Min 
Max 


t10 
W/R#, 
M/IO#, 
D/C#, 
4 
15 
4 
17 
ns 
7.5 
CL = 50 pF(4) 


ADS# 
Valid Delay 


tl1 
W/R#, 
M/IO#, 
D/C#, 
4 
20 
4 
30 
ns 
7.6 
(Note 1) 
ADS # Float Delay 


t12 
D15-DO Write Data 
7 
23 
7 
23 
ns 
7.5 
CL = 50 pF(4, 5) 


Valid Delay 


t12a 
D15-DO Write Data 
2 
2 
ns 
CL = 50 pF(4) 
Hold Time 


t13 
D15-DO Write Data 
4 
17 
4 
22 
ns 
7.6 
(Note 1) 
Float Delay 


t14 
HLDA Valid Delay 
4 
20 
4 
22 
ns 
7.6 
CL = 50 pF(4) 


t15 
NA# 
Setup Time 
5 
5 
ns 
7.4 


t16 
NA # Hold Time 
2 
3 
ns 
7.4 


t19 
READY # Setup Time 
7 
9 
ns 
7.4 


t20 
READY # Hold Time 
4 
4 
ns 
7.4 


t21 
D15-DO Read Data 
5 
7 
ns 
7.4 


Setup Time 


t22 
D15-DO Read Data 
3 
5 
ns 
7.4 


Hold Time 


t23 
HOLD Setup Time 
9 
9 
ns 
7.4 


t24 
HOLD Hold Time 
2 
3 
ns 
7.4 


t25 
RESET Setup Time 
5 
8 
ns 
7.7 


t26 
RESET Hold Time 
2 
3 
ns 
7.7 


t27 
NMI, INTR Setup Time 
5 
6 
ns 
7.4 
(Note 2) 


t28 
NMI, INTR Hold Time 
5 
6 
ns 
7.4 
(Note 2) 


t29 
PEREQ, ERROR#, 
BUSY#, 
5 
6 
ns 
7.4 
(Note 2) 
FLT # Setup Time 


t30 
PEREQ, ERROR#, 
BUSY#, 
4 
5 
ns 
7.4 
(Note 2) 
FLT # Hold Time 


Table 
7.6. Low Power 
(LP) Intel386™ 
SX Microprocessor 
A.C. Characteristics-33 
MHz and 25 MHz (Continued) 


NOTES: 
1. Float condition occurs when maximum output current becomes less than 'LO in magnitude. Float delay is not 100% 
tested. 
2. These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing purposes 
to assure recognition within a specific CLK2 period. 
3. These are not tested. They are guaranteed by design characterization. 
4. Tested with CL set at 50 pF. See Figures 7 and 8 f;'r load capacitance derating curve. 
5. Minimum time not 100% tested. 


20 MHz 
16 MHz 


Symbol 
Parameter 
Intel386 
SX 
Intel386SX 
Unit 
Figure 
Notes 


Min 
Max 
Min 
Max 


Operating 
Frequency 
4 
20 
4 
16 
MHz 
Half CLK2 Frequency 


t1 
CLK2 Period 
25 
125 
31 
125 
ns 
7.3 


t2a 
CLK2 HIGH Time 
8 
9 
ns 
7.3 
at 2V(3) 


t2b 
CLK2 HIGH Time 
5 
5 
ns 
7.3 
at (Vcc-0.8)V(3) 


t3a 
CLK2 LOW Time 
8 
9 
ns 
7.3 
at 2V(3) 


t3b 
CLK2 LOW Time 
6 
7 
ns 
7.3 
at 0.8V(3) 


t4 
CLK2 Fall Time 
8 
8 
ns 
7.3 
(Vcc-0.8)V 
to 0.8V(3) 


t5 
CLK2 Rise Time 
8 
8 
ns 
7.3 
0.8V to (Vcc-0.8)V(3) 


t6 
A23-A1 
Valid Delay 
4 
30 
4 
36 
ns 
7.5 
CL = 120 pF(4) 


t7 
A23-A1 
Float Delay 
4 
32 
4 
40 
ns 
7.6 
(Note 1) 


ta 
BHE#, 
BLE#, 
LOCK# 
4 
30 
4 
36 
ns 
7.5 
CL = 75 pF(4) 
Valid Delay 


t9 
BHE#, 
BLE#, 
LOCK# 
4 
32 
4 
40 
ns 
7.6 
(Note 1) 
Float Delay 


tlOa 
M/IO# 
D/C# 
Valid Delay 
6 
28 
6 
33 
ns 
7.5 
CL = 75 pF(4) 
r---- 


t10b 
W/R#, 
ADS# 
Valid Delay 
26 


tl1 
W/R#, 
M/IO#, 
D/C#, 
6 
30 
6 
35 
ns 
7.6 
(Note 1) 
ADS # Float Delay 


t12 
015-00 
Write Data 
4 
38 
4 
40 
tls 
7.5 
CL = 120 pF(4) 
Valid Delay 


t13 
015-00 
Write Data 
4 
27 
4 
35 
ns 
7.6 
(Note 1) 
Float Delay 


t14 
HLDA Valid Delay 
4 
28 
4 
33 
ns 
7.5 
CL = 75 pF(4) 


t15 
NA # Setup Time 
5 
5 
ns 
7.4 


t16 
NA# 
Hold Time 
12 
21 
ns 
7.4 


t19 
READY # Setup Time 
12 
19 
ns 
7.4 
. 


t20 
READY # Hold Time 
4 
4 
ns 
7.4 


t21 
015-00 
Read Data 
9 
9 
ns 
7.4 


Setup Time 


t22 
015-00 
Read Data 
6 
6 
ns 
7.4 


Hold Time 


t23 
HOLD Setup Time 
17 
26 
ns 
74 


t24 
HOLD Hold Time 
5 
5 
ns 
7.4 


t25 
RESET Setup Time 
12 
13 
ns 
7.7 


t26 
RESET Hold Time 
4 
4 
ns 
7.7 


Functional 
operating 
range: VCC = 5V ± 10%; TCASE = O°C to 100°C 


Table 
7.7.lnteI386™ 
SX A.C. Characterlstics-20 
MHz and 16 MHz (Continued) 


20 MHz 
16 MHz 


Symbol 
Parameter 
Intel386 
SX 
Intel386 
SX 
Unit 
Figure 
Notes 


Min 
Max 
Min 
Max 


t27 
NMI, INTR Setup Time 
16 
16 
ns 
7.4 
(Note 2) 


t28 
NMI, INTR Hold Time 
16 
16 
ns 
7.4 
(Note 2) 


t29 
PEREQ, ERROR#, 
BUSY#, 
14 
16 
ns 
7.4 
(Note 2) 


FLT # Setup Time 
-- 


t30 
PEREQ, ERROR #, BUSY #, 
5 
5 
ns 
7.4 
(Note 2) 


FLT # Hold Time 


20 MHz 
16 MHz 
12 MHz 


Symbol 
Parameter 
Intel386 
SX 
Intel386 
SX 
Intel386 
SX 
Unit Figure 
Notes 


Min 
Max 
Min 
Max 
Min 
Max 
- 


Operating 
Frequency 
2 
20 
2 
16 
2 
12.5 
MHz 
Half CLK2 Frequency 


t1 
CLK2 Period 
25 
250 
31 
250 
40 
250 
ns 
7.3 


t2a 
CLK2 HIGH Time 
8 
9 
11 
ns 
7.3 
at 2V (Note 3) 


t2b 
CLK2 HIGH Time 
5 
5 
7 
ns 
7.3 
at(Vcc 
- 
0.8V)(3) 


t3a 
CLK2 LOW Time 
8 
9 
11 
ns 
7.3 
at 2V(3) 


t3b 
CLK2 LOW Time 
6 
7 
9 
ns 
7.3 
at 0.8V(3) 


t4 
CLK2 Fall Time 
8 
8 
8 
ns 
7.3 
(Vcc 
- 
0.8V) to 0.8V(3) 


ts 
CLK2 Rise Time 
8 
8 
8 
ns 
7.3 
o 8V to (Vcc 
- 
0.8V)(3) 


ts 
A23 
A1 Valid Delay 
4 
30 
4 
36 
4 
42 
ns 
7.5 
CL = 120 pF(4) 


t7 
A23-A1 
Float Delay 
4 
32 
4 
40 
4 
45 
ns 
7.6 
(Note 1) 


t8 
BHE#, 
BLE#, 
LOCK# 
4 
30 
4 
36 
4 
36 
ns 
7.5 
CL = 75 pF 
Valid Delay 


t9 
BHE#, 
BLE#, 
LOCK# 
4 
32 
4 
40 
4 
40 
ns 
76 
(Note 1) 


Float Delay 


t10 
M/IO#, 
D/C#, 
W/R#, 
6 
28 
6 
33 
4 
33 
ns 
7.5 
CL = 75 pF 
ADS# 
Valid Delay 


t11 
M/IO#, 
D/C#, 
W/R#, 
6 
30 
6 
35 
4 
35 
ns 
7.6 
(Note 1) 
ADS# 
Float Delay 


t12 
015-00 
Write 
4 
38 
4 
40 
4 
50 
ns 
7.5 
CL = 120 pF(4) 


Data Valid Delay 


t13 
D15-DOWnte 
4 
27 
4 
35 
4 
40 
ns 
7.6 
(Note 1) 
Data Float Delay 
I 


t14 
HLDA Valid Delay 
4 
28 
6 
33 
4 
33 
ns 
7.5 
CL = 75 pF(4) 


t1S 
NA # Setup Time 
5 
5 
7 
ns 
7.4 


t16 
NA # Hold Time 
12 
21 
21 
ns 
7.4 


Table 
7.8. Low Power 
(LP) Intel386TM 
SX 
A.C. Characterlstlcs-20 
MHz, 16 MHz and 12 MHz (Continued) 


20 MHz 
16 MHz 
12 MHz 


Symbol 
Parameter 
Intel386 
SX 
Intel386 
SX 
Intel386SX 
Unit 
Figure 
Notes 


Min 
Max 
Min 
Max 
Min 
Max 


t19 
READY '*' Setup Time 
12 
19 
19 
ns 
7.4 


t20 
READY '*' Hold Time 
4 
4 
4 
ns 
7.4 


t21 
015-00 Read Data 
9 
9 
9 
ns 
7.4 


Setup Time 


t22 
015-00 Read Data 
6 
6 
6 
ns 
7.4 


Hold Time 


t23 
HOLD Setup Time 
17 
26 
26 
ns 
7.4 


t24 
HOLD Hold Time 
5 
5 
7 
ns 
7.4 


t25 
RESET Setup Time 
12 
13 
15 
ns 
7.7 


t26 
RESET Hold Time 
4 
4 
6 
ns 
7.7 


t27 
NMI, INTR Setup Time 
16 
16 
16 
ns 
7.4 
(Note 2) 


t28 
NMI, INTR Hold Time 
16 
16 
16 
ns 
7.4 
(Note 2) 


t29 
PEREa, 
ERROR '*', BUSY '*', 
14 
16 
16 
ns 
7.4 
(Note 2) 


FLT'*' Setup Time 


t30 
PEREa, 
ERROR '*', BUSY '*', 
5 
5 
5 
ns 
7.4 
(Note 2) 


FLT '*' Hold Time 


NOTES: 
1. Float condition occurs when maximum output current becomes less than ILO in magnitude. Float delay is not 100% 
tested. 
2: These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing purposes, 
to assure recognition within a specific CLK2 period. 
3: These are not tested. They are guaranteed by design characterization. 
4: Tested with CL set at 50 pf and derated to support the indicated distributed capacitive load. See Figures 7.8 though 7.10 
for the capacitive derating curve. 
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Figure 7.8. Typical 
Output Valid Delay versus 
Load Capacitance 
at Maximum 
Operating 
Temperature 
(CL = 120 pF) 


Figure 7.9. Typical Output 
Valid Delay versus 
Load Capacitance 
at Maximum 
Operating 
Temperature 
(CL = 75 pF) 
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Figure 7.10. Typical 
Output Rise Time versus 
Load Capacitance 
at Maximum 
Operating 
Temperature 
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7.5 
Designing for the 
ICE™·lnteI386TM 
SX Emulator 


Sockets 
that 
accept 
this 
probe 
are available 
from 
3M 
(part 
# 2-0100-07243-000) 
or from 
AMP 
(part 


#821959-1 
and part 
#821949-4). 
The ICE-386 
SX 


emulator 
probe attaches 
to the target 
system via an 
adapter 
that replaces 
the Intel386 
SX component 
in 
the target 
system. 


ICE-lntel386 
SX is the in-circuit 
emulator 
for the In- 
tel386™ 
SX CPU. The 
ICE-386 
SX emulator 
pro- 


vides a 1OO-pin fine pitch flat-pack 
probe for connec- 
tion 
to 
a 
socket 
located 
on 
the 
target 
system. 


• 


Due to the high operating 
frequency 
of Intel386 
SX 
CPU based 
systems, 
there 
is no buffering 
between 
the Intel386 
SX emulation 
processor 
(on the emula- 


tor probe) 
and the target 
system. 
A direct 
result 
of 
the 
non-buffered 
interconnect 
is 
that 
the 
ICE- 
Intel386 
SX emulator 
shares 
the address 
and data 
busses 
with the target 
system. 


In order to avoid problems 
with the shared 
bus and 
maintain 
signal 
integrity, 
the system 
designer 
must 
adhere to the following 
guidelines: 


1. The bus controller 
must only enable 
data trans- 
ceivers onto the data bus during valid read cycles 
(initiated 
by assertion 
of AOS#) 
of the Intel386 
SX CPU, other 
local 
devices 
or other 
bus mas- 
ters. 


2. Before 
another 
bus master drives the local proc- 
essor 
address 
bus, the other 
master 
must gain 
control 
of the 
address 
bus by asserting 
HOLD 
and receiving 
the HLOA response. 


3. The 
emulation 
processor 
receives 
the 
RESET 
signal 2 or 4 CLK2 cycles 
later than an Intel386 
SX CPU would, 
and 
responds 
to RESET 
later. 


Correct 
phase of the response 
is guaranteed. 


In order 
to avoid 
problems 
that 
might 
arise due to 
the shared 
busses, 
an Optional 
use Isolation 
Board 
(OIB) is included 
with the emulator 
hardware. 
The 
OIB may be used to provide 
buffering 
between 
the 
emulation 
processor 
and the target 
system, 
but in- 
serts a delay of approximately 
10 ns in signal path. 


In 
addition 
to 
the 
above 
considerations, 
the 
ICE-386 SX emulator 
processor 
module 
has several 
electrical 
and mechanical 
characteristics 
that should 
be 
taken 
into 
consideration 
when 
designing 
the 
Intel386 
SX CPU system. 


Capacitive Loading: ICE-lntel386 
SX adds up to 27 
pF to each Intel386 
SX CPU signal. 


Drive Requirements: ICE-lntel386 
SX 
adds 
one 
FAST TTL load on the CLK2, control, 
address, 
and 
data 
lines. 
These 
loads 
are 
within 
the 
processor 
module and are driven by the Intel386 SX CPU emu- 
lation processor, 
which has standard 
drive and load- 
ing capability 
listed in Tables 
7.3 and 7.4. 


Power 
Requirements: 
For 
noise 
immunity 
and 
CMOS latch-up 
protection 
the ICE-lntel386 
SX emu- 
lator processor 
module 
is powered 
by the user sys- 


tem. 


The Circuitry on the processor 
module 
draws 
up to 
1.4A including 
the maximum 
Intel386 
SX CPU 
lee 


from the user Intel386 
SX CPU socket. 


Intel386 SX CPU Location and Orientation: The 
ICE-lntel386 
SX emulator 
processor 
module 
may re- 
quire lateral clearance. 
Figure 7.12 shows the clear- 


ance requirements 
of the iMP adapter. 
The optional 
isolation 
board (OIB), which provides 
extra electrical 
buffering 
and 
has the 
same 
lateral 
clearance 
re- 


quirements 
as Figure 
7.12, 
adds 
an additional 
0.5 
inches to the vertical 
clearance 
requirement. 
This is 


illustrated 
in Figure 7.13. 


Optional Isolation Board (OIB) and the CLK2 
speed reduction: Due to the unbuffered 
probe 
de- 


sign, the ICE-lntel386 
SX emulator 
is susceptible 
to 
errors 
on the user's 
bus. The OIB allows 
the 
ICE- 


Intel386 
SX emulator 
to function 
in user 
systems 
with faults (shorted 
signals, etc.). After electrical 
ver- 


ification 
the OIB may be removed. 
When the OIB is 
installed, 
the 
user 
system 
must 
have 
a maximum 
CLK2 frequency 
of 20 MHz. 


8.0 
DIFFERENCES 
BETWEEN 
THE 
Intel386™ 
SX CPU AND THE 
Intel386™ 
OX CPU 


The following 
are the major differences 
between 
the 
Intel386 
SX CPU and the Intel386 
OX CPU: 


1. The Intel386 
SX CPU generates 
byte selects 
on 
BHE# 
and BLE# 
(like the 8086 
and 80286) 
to 
distinguish 
the upper and lower bytes on its 16-bit 
data 
bus. The 
Intel386 
OX CPU uses four 
byte 
selects, 
BEO # -BE3 #, to distinguish 
between 
the 
different 
bytes on its 32-bit bus. 


2. The 
Intel386 
SX CPU has no bus sizing 
option. 


The Intel386 
OX CPU can select 
between 
either 
a 32-bit bus or a 16-bit bus by use of the BS16# 
input. The Intel386 SX CPU has a 16-bit bus size. 


3. The NA# 
pin operation 
in the Intel386 
SX CPU is 
identical 
to that of the NA# 
pin on the Intel386 
OX CPU with one exception: 
the Intel386 
OX CPU 
NA # 
pin cannot 
be activated 
on 16-bit 
bus cy- 
cles 
(where 
BS16# 
is LOW 
in the 
Intel386 
OX 
CPU case), 
whereas 
NA # 
can be activated 
on 
any Intel386 
SX CPU bus cycle. 


4. The contents 
of all Intel386 
SX CPU registers 
at 
reset are identical 
to the contents 
of the Intel386 
OX CPU registers 
at reset, except 
the OX regis- 


ter. The OX register 
contains 
a component-step- 


ping identifier 
at reset, Le. 


in Intel386 
OX CPU, OH = 3 indicates 
Intel386 
OX CPU after reset 
OL = reVision number; 


in Intel386 SX CPU, 
OH = 23H indicates 
Intel386 
SX CPU after reset 
OL = revision 
number. 


5. The Intel386 OX CPU uses A31 and MilOI' 
as 
selects 
for 
the 
numerics 
coprocessor. 
The 
Intel386 SX CPU uses A23and MilOI' 
as selects. 
6. The Intel386 OX CPU prefetch unit fetches code 
in four-byte units. The Intel386 SX CPU prefetch 
unit reads two bytes as one unit (like the 80286). 
In BS16 mode, the Intel386 OX CPU takes two 
consecutive bus cycles to complete a prefetch re- 
quest. If there is a data read or write request after 
the prefetch starts, the Intel386 OXCPU will fetch 
all four bytes before addressing the new request. 


7. Both Intel386 OX CPU and Intel386 SX CPU have 
the same logical address space. The only differ- 
ence is that the Intel386 OX CPU has a 32-bit 
physical address space and the Intel386 SX CPU 
has a 24-bit physical address space. The Intel386 
SX CPU has a physical memory address space of 
up to 16 megabytes instead of the 4 gigabytes 
available to the Intel386 OX CPU. Therefore, in 
Intel386 SX CPU systems, the operating system 
must be aware of this physical memory limit and 
should allocate memory for applications programs 
within this limit. If a Intel386 OXCPU system uses 
only the lower 16 megabytes of physical address, 
then there will be no extra effort required to mi- 
grate Intel386 OX CPU software to the Intel386 
SX CPU. Any application which uses more than 
16 megabytes of memory can run on the Intel386 
SX CPU if the operating system utilizes the 
Intel386 SX CPU's paging mechanism. In spite of 
this difference in physical address space, the 
Intel386 SX CPU and Intel386 OX CPU can run 
the same operating systems and applications 
within their 
respective 
physical memory con- 
straints. 


8. The Intel386 SX has an input called FLT# which 
tri-states all bidirectional and output pins, includ- 
ing HLOA#, when asserted. It is used with ON 
Circuit Emulation (ONCE). In the Intel386 OX 
CPU, FLT# is found only on the plastic quad flat 
package version and not on the ceramic pin grid 
array version. For a more detailed explanation of 
FLT# and testability, please refer to section 5.4. 


This section describes the instruction set. Table 9.1 
lists all instructions along with instruction encoding 
diagrams and clock counts. Further details of the 
instruction encoding are then provided in the follow- 
ing sections, which completely describe the encod- 
ing structure and the definition of all fields occurring 
within instructions. 


9.1 
Intel386™ 
SX CPU Instruction 
Encoding and Clock Count 
Summary 


To calculate elapsed time for an instruction, multiply 
the instruction clock count, as listed in Table 9.1 be- 


low, by the processor clock period (e.g. 62.5 ns 
for an Intel386 SX Microprocessor operating at 
16 MHz). The actual clock count of an Intel386 SX 
Microprocessor program will average 5% more than 
the calculated clock count due to instruction se- 
quences which execute faster than they can be 
fetched from memory. 


Instruction Clock Count Assumptions 
1. The instruction has been prefetched, decoded, 
and is ready for execution. 
2. Bus cycles do not require wait states. 
3. There are no local bus HOLD requests delaying 
processor access to the bus. 
4. No exceptions are detected during instruction ex- 
ecution. 


5. If an effective address is calculated, it does not 
use two general register components. One regis- 
ter, scaling and displacement can be used within 
the clock counts shown. However, if the effective 
address calculation uses two general register 
components, add 1 clock to the clock count 
shown. 


Instruction Clock Count Notation 
1. If two clock counts are given, the smaller refers to 
a register operand and the larger refers to a mem- 
ory operand. 
2. n = number of times repeated. 
3. m = number of components in the next instruc- 
tion executed, where the entire displacement (if 
any) counts as one component, the entire imme- 
diate data (if any) counts as cne component, and 
all other bytes of the instruction and prefix(es) 
each count as one component. 


Misaligned or 32-Bit Operand Accesses 
- 
If instructions accesses a misaligned 16-bit oper- 
and or 32-bit operand on even address add: 
2' 
clocks for read or write 
4" 
clocks for read and write 
- 
If instructions accesses a 32-bit operand on odd 
address add: 
4' 
clocks for read or write 
8" 
clocks for read and write 


Wait states add 1 clock per wait state to instruction 
execution for each data access. 


intel~ 


CLOCK COUNT 
NOTES 


Real 
Real 
INSTRUCTION 
FORMAT 
Addreaa 
Protected 
Addreaa 
Protected 


Mode or 
Virtual 
Mode or 
Virtual 
, 
Virtual 
Address 
Virtual 
Addreaa 
8086 
Mode 
8086 
Mode 


Mode 
Mode 


GENERAL DATA TRANSFER 
MOV ~ Move: 


Register to Register/Memory 
I 
1000100w 
mod reg 
rim I 
2/2 
2/2' 
b 
h 


Register IMemory 
to Register 
I 
1000101w 
mod reg 
r/ml 
2/4 
2/4' 
b 
h 


Immediate to Register/Memory 
I 
1100011 
w 
modOOO 
r/ml 
immediate data 
2/2 
2/2' 
b 
h 


Immediate to Register (short form) 
11011 
w 
reg 
immediate data 
2 
2 


Memory to Accumulator 
(short form) 
I 
1010000w 
full displacement 
4' 
4' 
b 
h 


Accumulator 
to Memory (short form) 
I 
1010001w 
I tull displacement 
2' 
2' 
b 
h 


Register Memory to Segment Register 
I 
10001110 
I modsreg3 
r/ml 
2/S 
22/23 
b 
h, i,j 


segment 
Register to Register/Memory 
I 
10001100 
I modsreg3 
r/ml 
2/2 
2/2 
b 
h 


MOVSX ~ Move With Sign Extension 


Register From Register/Memory 
I 
00001111 
I 1011111 
w I mod reg 
r/ml 
3/6' 
3/6' 
b 
h 


MOVZX ~ Mova With Zero Extension 


Register From Register IMemory 
00001111 
I 
1011011 
w I mod reg 
rim I 
3/6' 
3/6' 
b 
h 


PUSH ~ Push: 


Register/Memory 
11111111 
I mod 110 
r/ml 
SI7' 
7/9' 
b 
h 


Register (short form) 
010 
t 0 
reg 
2 
4 
b 
h 


Segment Register (ES, CS, 55 or OS) 
000sreg2110 
2 
4 
b 
h 
(shorttorm) 


Segment Register (ES, CS, 55, OS, 
I 
00001111 
10sreg3000 
I 
2 
4 
b 
h 
FSor GS) 


Immediate 
I 
01101050 
immediate data 
2 
4 
b 
h 


PUSHA ~ Push All 
I 
01100000 
18 
34 
b 
h 


POP = Pop 


RegIster/Memory 
I 
10001111 
modOOO 
r/ml 
S/7 
719 
b 
h 


Register (short form) 
101011 
reg 
6 
6 
b 
h 


Segment Register (ES, CS, 55 or OS) 
1000Sreg2111 
7 
2S 
b 
h,i,j 
(Short form) 
Segment Register (ES, CS. 55 or OS), 
I 
00001111 
1 Osreg300 
1 I 
7 
2S 
b 
h,l,j 
FSorGS 


POPA ~ Pop All 
I 
01100001 
24 
40 
b 
h 


XCHG ~ Exchange 


Register/Memory 
With Register 
I 
1000011w 
I mod reg 
r/ml 
3/S" 
3/S" 
b,f 
f, h 


Register With Accumulator 
(short form) 
110010 
reg I 
ClkCount 
3 
3 


IN = Inputfrom: 
Vlrtusl 
8086 Mode 


Fixed Port 
I 
1110010w 
I 
port number 
126 
12' 
6'/26' 
s/t,m 


Variable Port 
I 
1110110w 
I 
t27 
13' 
7' 127' 
s/t,m 


OUT = Output to: 


Fixed Port 
I 
1110011 
w I 
port number 
124 
10' 
4'/24' 
s/t,m 


Variable Port 
I 
1110 
t 11 w I 
'2S 
11' 
S'/2S' 
s/t,m 


LEA ~ Load EA to Register 
I 
t 000 
1101 
Imod reg 
r/ml 
2 
2 


CLOCK COUNT 
NOTES 


Real 
Real 
INSTRUCTION 
FORMAT 
Address 
Protected 
Address 
Protected 
Mode or 
Virtual 
Mode or 
Virtual 
Virtual 
Addre •• 
Virtual 
Address 


8086 
Mode 
8086 
Mode 
Mode 
Mode 


SEGMENT CONTROL 


LOS ~ Load Pointer to OS 
11000101 
I mod reg 
r/ml 
7' 
26'/28' 
b 
h, i,j 


LES ~ Load Pointer to ES 
11000100 
I mod reg 
r/ml 
7' 
26'/28' 
b 
h, i,j 


LFS ~ Load Pointer to FS 
00001111 
I 
10110100 
I mod reg 
r/ml 
7' 
29'/31' 
b 
h, i,j 


LGS ~ Load Pointer to GS 
00001111 
1 10110101 
I mod reg 
r/ml 
7' 
26'/28' 
b 
h, i,j 


LSS ~ Load Pointer to SS 
00001111 
1 10110010 
I mod reg 
r/ml 
7' 
26'/28' 
b 
h, i,j 


FLAG CONTROL 


CLC ~ Clear Carry Flag 
11111000 
2 
2 


CLO ~ Clear Direction Flag 
11111100 
2 
2 


CLI ~ Clear Interrupt 
Enable Flag 
11111010 
8 
8 
m 


CLTS ~ Clear Task Switched Flag 
00001111 
00000110 
1 
5 
5 
c 
I 


CMC ~ Complement 
Carry Flag 
11110101 
2 
2 


LAHF ~ Load AH Into Flag 
I 10011111 
2 
2 


POPF ~ Pop Flags 
I 
10011101 
5 
5 
b 
h,n 


PUSHF - 
Push Flags 
I 
10011100 
4 
4 
b 
h 


SAHF ~ Store AH Into Flags 
I 
10011110 
3 
3 


STC ~ Set Carry Flag 
I 
11111001 
2 
2 


STD ~ set Dlrecllon 
Flag 
I 
11111101 


STI ~ set Interrupt 
Enable Flag 
I 
11111011 
8 
8 
m 


ARITHMETIC 
ADD ~ Add 


Register to Register 
I OOOOOOdw 
mod reg 
rim 1 
2 
2 


Register to Memory 
I OOOOOOOw 
mod reg 
rim 1 
7" 
7" 
b 
h 


Memory to Register 
I 0000001w 
mod reg 
rim 1 
6' 
6' 
b 
h 


Immediate to Register/Memory 
1 100000sw 
madOOO 
r/ml 
immediate data 
217" 
2/7" 
b 
h 


Immediate to Accumulator 
(short form) 
1 0000010w 
immediate data 
2 
2 


AOC = Add With Carry 


Register to Register 
000100dw 
I mod reg 
rim 1 
2 
2 


Register to Memory 
0001000w 
I mod reg 
r/ml 
7" 
7" 
b 
h 


Memory to Register 
0001001w 
1mod reg 
r/ml 
6' 
6' 
b 
h 


Immediate to Register/Memory 
100000sw 
ImodOl0 
r/ml 
immediate data 
217" 
217" 
b 
h 


Immediate to Accumulator 
(short form) 
0001010w 
I 
immediate data 
2 
2 


IHe = Increment 


Register/Memory 
1 1111111w 
1modOOO 
rim 1 
2/6" 
2/6" 
b 
h 


Register (short form) 
101000 
reg 1 
2 
2 


SUB ~ Subtract 


Register from Register 
1 001010dw 
1mod reg 
rim I 
2 
2 


CLOCK COUNT 
NOTES 


Real 
Real 
INSTRUCTION 
FORMAT 
Addre •• 
Protected 
Addre •• 
Protected 
Mode or 
Virtual 
Mode or 
Virtual 
Virtual 
Addre •• 
Virtual 
Addra •• 
8086 
Mode 
8086 
Mode 
Mode 
Mode 


RITHMETIC 
(Continued) 


agister from Memory 
100101 
OOw Imod reg 
rId 
7" 
7" 
b 
h 


Vlemory from Register 
10010101w!modreg 
rId 
6' 
6' 
b 
h 


mmediate 
from Register/Memory 
11 OOOOOsw 
lmod 1 0 1 
r/ml immediate 
data 
2/7" 
2/7" 
b 
h 


mmediate from Accumulator 
(short form) 
10010110wl 
immediate 
data 
2 
2 


BB = SUbtract with Borrow 


egister 
from Register 
I 000 
1 1 0 d w Imod reg 
r/ml 
2 
2 


egister from Memory 
100011 
OOw Imodreg 
rId 
7" 
7" 
b 
h 


l.1emoryfrom Register 
I 0001 
1 0 1 w lmod reg 
rId 
6' 
6' 
b 
h 


mmediate 
from Register/Memory 
1, OOOOOsw 
ImOd011 
r/ml immediate 
data 
217" 
2/7" 
b 
h 


mmediate 
from Accumulator 
(short form) 
10001110wl 
immediate 
data 
2 
2 


OEC ~ Qecrement 


agister/Memory 
11111111 
w Iregoo 
1 
r/ml 
2/6 
2/6 
b 
h 


egister (short form) 
101001 
regl 
2 
2 


MP = Compare 


~egister with Register 
00 1 1 1 0 d w lmod reg 
rId 
2 
2 


'v1emory with Register 
00 1 1 1 00 w Imod reg 
r/ml 
5' 
5' 
b 
h 


egister with Memory 
00 1 1 1 0 1 w lmod reg 
rId 
6' 
6' 
b 
h 


mmediate 
with Register/Memory 
1 OOOOOsw 
!mod 111 
rid immediate 
data 
2/5' 
2/5' 
b 
h 


mmediate 
with Accumulator 
(short form) 
001111 
Ow I 
immediate 
data 
2 
2 


~EG ~ Change Sign 
1111011Wlmod011 
rId 
2/6' 
2/6' 
b 
h 


AA ~ ASCII Adjusllor 
Add 
00110111 
I 
4 
4 


AS ~ ASCII Adjust lor Subtract 
00111111 
I 
4 
4 


OAA ~ Decimal Adjust lor Add 
00100111 
I 
4 
4 


OAS = Decimal Adjuat lor Subtract 
100101111 
I 
4 
4 


lIIUL ~ Multiply (unalgned) 


ccumulator 
with Register/Memory 
11 1 1 1 0 1 1 w Imod 1 00 
rd 
Multiplier-Byte 
12-17115-20' 
12-17115-20' 
b,d 
d, h 
-Word 
12-25115-28' 
12-25115-28' 
b,d 
d, h 
-Doubleword 
12-41/17-46' 
12-41117-46' 
b,d 
d, h 


MUL = Integar Multiply (algnad) 


ccumulator 
with Register/Memory 
11 1 1 1 0 1 1 w Imod 1 0 1 
r/ml 


Multiplier·Syte 
12-17115-20' 
12-17/15-20' 
b,d 
d, h 


·Word 
12-25115-28' 
12-25115-28' 
b, d 
d, h 
·Doubleword 
12-41117-46' 
12-41117-46' 
b, d 
d, h 


egister with Register/Memory 
100001111 
I 10101111 
Imodreg 
rId 


Multiplier·Syte 
12-17/15-20' 
12-17/15-20' 
b, d 
d, h 
·Word 
12-25/15-28' 
12-25/15-28' 
b, d 
d, h 
·Doubleword 
12-41/17-46' 
12-41/17-46' 
b, d 
d, h 


~egister/Memory with Immediate 
to Register! 
01 
1 0 1 0 s 1 Imod reg 
rid 
immediate 
data 


·Word 
13-26 
13-26114-27 
b, d 
d, h 
·Doubleword 
13-42 
13-42116-45 
b,d 
d, h 


CLOCK COUNT 
NOTES 


Real 
Real 
INSTRUCTION 
FORMAT 
Addre ••• 
Protected 
Address 
Protected 
Mode or 
Virtual 
Mode or 
Virtual 
Virtual 
Address 
Virtual 
Address 
8086 
Mode 
8086 
Mode 
Mode 
Mode 


ARITHMETIC 
(Continued) 


DIV ~ Olvlde (Unsigned) 


ccumulator 
by Register/Memory 
1 1 1 1 1 0 1 1 w Imod 1 1 0 
r/ml 


Divisor-Byte 
14/17 
14/17 
b,e 
e,h 
-Word 
22/25 
22/25 
b,e 
e,h 


-Doubleword 
38/43 
38/43 
b,e 
e,h 


IDIV ~ Integer 
Divide (Signed) 


Accumulator 
By Register/Memory 
I 1 1 1 1 0 1 1 w Imod 1 1 1 
r/ml 


Divisor-8yte 
19/22 
19/22 
b,e 
e,h 
-Word 
27/30 
27/30 
b,e 
e,h 
-Doubleword 
43/48 
43/48 
b,e 
e,h 


AAD - 
ASCII Adjust 
lor Divide 
I 11010101 
1 00001010 
I 
19 
19 


AAM ~ ASCII AdJust lor Multiply 
1 11010100 
1 000010101 
17 
17 


CBW - 
Convert 
By1e to Word 
1 100110001 
3 
3 


CWO ~ Convert 
Word to Double 
Word 1 10011001 
1 
2 
2 


LOGIC 


Shift Rotate Instructions 


Not Through Carry (ROL, ROR, SAL, SAR, SHL, and SHR) 


RegisterlMemory 
by 1 
11101000wimodTTT 
r/ml 
317·· 
317·· 
b 
h 


RegisterlMemory 
by CL 
11101001 
w ImodTTT 
r/ml 
317· 
31l" 
b 
h 


Register/Memory 
by Immediate Count 
1 11 OOOOOw 
ImodTTT 
r/mlimmed 
a-bit data 
3/7· 
31l" 
b 
h 


hrough Carry (RCL and RCR) 


RegisterlMemory 
by 1 
11101 
OOOw 
ImodTTT 
r/ml 
9/10· 
9/10· 
b 
h 


RegisterlMemory 
by CL 
I 1101001 
w ImodTTT 
r/ml 
9/10· 
9/10· 
b 
h 


Register/Memory 
by Immediate Count I 11 OOOOOw 
ImodTTT 
r/mlimmed 
8-bit data 
9/10· 
9/10· 
b 
h 


TTT 
Instruction 


000 
RDL 


001 
RDR 


010 
RCL 


011 
RCR 


100 
SHL/SAL 


101 
SHR 


111 
SAR 


SHLD - 
Shift Left Double 


ReglsterlMemory 
by Immediate 
1 00001111 
1 10100100 
1mod reg 
rIml immed a·bit data 
3/7·· 
3/7·· 


Register IMemory 
by CL 
I 00001111 
1 10100101 
1mod reg 
r/ml 
317·· 
317·· 


SHRD = ShIft Right Double 


RegisterlMemory 
by Immediate 
I 00001111 
1 10101100 
1mod reg 
r/mlimmed 
a-bit data 
317·· 
3/7·· 


Reglster/Memory 
by CL 
1 00001111 
I 10101101 
ImOdreg 
r/ml 
317-· 
3/7·· 


AND - 
And 


Register to Register 
1001000dw!modreg 
r/ml 
2 
2 


• 


CLOCK COUNT 
NOTES 


Real 
Real 
INSTRUCTION 
FORMAT 
Address 
Protected 
Addres. 
Protected 
Mode or 
Virtual 
Mode or 
Virtual 
Virtual 
Address 
Virtual 
Address 


8086 
Mode 
8088 
Mode 
Mode 
Mode 


LOGIC 
(Continued) 


Register to Memory 
I 001 
OOOOw 
Imodreg 
r/ml 
7" 
7" 
b 
h 


Memory to Register 
I 0010001w 
I mod reg 
r/ml 
6' 
S' 
b 
h 


Immediate to Register/Memory 
I 1 OOOOOOw 
I mod 100 
r/ml 
immediate data 
217' 
217" 
b 
h 


Immediate to Accumulator 
(Short Form) 
I 001001 
Ow I immediate data 
2 
2 


TEST ~ And Function 
to Flags, No Result 


Register/Memory 
and Register 
I 1000010w 
I mod reg 
r/ml 
2/5' 
2/5' 
b 
h 


Immediate Data and Register/Memory 
I 1111011w 
ImodOOO 
r/ml 
immediate data 
2/5' 
2/5' 
b 
h 


Immediate Data and Accumulator 
I 1 0 1 0 1 00 w I immediate data 
(Short Form) 
2 
2 


OR = Or 


Register to Register 
000010dw 
I mod reg 
r/ml 
2 
2 


Register to Memory 
0000100w 
Imodreg 
r/ml 
7" 
7" 
b 
h 


Memory to Register 
0000101w 
I mod reg 
r/ml 
S' 
S' 
b 
h 


Immediate to Register/Memory 
1 OOOOOOw 
ImOdOO 1 
r/ml 
immediate data 
217" 
217" 
b 
h 


Immediate to Accumulator 
(Short Form) 
0000 
11 Ow I immediate data 
2 
2 


XOR = Exclusive 
Or 


Register to Register 
001100dw 
I mod reg 
r/ml 
2 
2 


Register to Memory 
0011 
OOOw 
I mod reg 
r/ml 
7" 
7" 
b 
h 


Memory to Register 
0011001w 
I mod reg 
r/ml 
S' 
S' 
b 
h 


Immediate to Register/Memory 
1 OOOOOOw 
ImOd 11 0 
r/ml 
immediate data 
217" 
217" 
b 
h 


Immediate to Accumulator 
(Short Form) 
I 00 1 1 0 1 0 w I immediate data 
2 
2 


NOT ~ Invert 
Register/Memory 
I 1111011w 
ImodOl0 
r/ml 
2/S" 
2/S" 
b 
h 
Clk 


STRING MANIPULATION 
Count 
Virtual 


CMPS - 
Compare 
Byte Word 
I 1010011 
w 
8086 
10' 
10' 
b 
h 
Mode 


INS ~ Input BytelWord 
from OX Port 
I 0110110w 
I 
t29 
15 
9'/29" 
b 
sIt, h,m 


LODS - 
Load Byte/Word 
to AL/ AX/EAX 
I 1010110w 
5 
5' 
b 
h 


MOVS ~ Move Byte Word 
I 1010010w 
7 
7" 
b 
h 


OUTS ~ Output 
BytelWord 
to OX Port 
I 0110111 
w 
I 
128 
14 
8'/28' 
b 
s/t,h,m 


SCAS ~ Scan Byte Word 
I 1010111 
w 
7' 
7' 
b 
h 


STOS ~ Store Byte/Word 
from 


AL/AX/EX 
I 1010101 
wi 
4' 
4' 
b 
h 


XLAT = Translate 
String 
I 11010111 
I 
5' 
5' 
h 


REPEATED STRING MANIPULATION 


Repeated by Count in CX or ECX 


REPE CMPS ~ Compare 
String 


(Find Non-Match) 
I 
11110011 
I 1010011 
wi 
5 + 9n" 
5 + 9n·· 
b 
h 


CLOCK COUNT 
NOTES 


Real 
Real 


INSTRUCTION 
FORMAT 
Addre •• 
Protected 
Addreaa 
Protected 
Mode or 
Virtual 
Mode or 
Virtual 


Virtual 
Addre •• 
Virtual 
Addre •• 


8086 
Mode 
8086 
Mode 


Mode 
Mode 


REPEATED STRING MANIPULATION (Continued) 


REPNE CMPS = Compare String 
ClkCount 


(Find Match) 
I 1111001011010011Wl 
Virtual 
5+90" 
5+90" 
b 
h 
8086 Mode 


REP INS ~ Input String 
I 1111001010110110wl 
I 
t 
13+60' 
7+60" 
b 
s/t.h,m 


27+60' 


REP LODS ~ Load String 
1111100101101011 
Ow I 
5+60' 
5+60' 
b 
h 


REP MOVS ~ Move String 
11111001011010010W! 
7+40' 
7+40" 
b 
h 


REP OUTS ~ Output String 
I 11110010 
10110111Wl 
I 
t 
12+50' 
6+50" 
b 
sit. h, m 


26+50' 


REPE SCAS ~ SCan String 


(Find Non·ALI AX/EAX) 
I 11110011 
11010111 
w I 
5+80' 
5+80' 
b 
h 


REPNE SCAS - 
scan String 


(Find ALl AX/EAX) 
I 1111001011010111Wl 
5+80' 
5+80' 
b 
h 


REP STOS ~ Store String 
I 1111001011010101Wl 
5+50' 
5+50' 
b 
h 


BIT MANIPULATION 


BSF ~ scan Bit Forward 
100001111 
110111100 
lmodreg 
rid 
10+3n' 
10+30" 
b 
h 


BSR = scan Bit Reverse 
I 00001 
1 1 1 11 01 1 11 01 
lmod reg 
rid 
10+3n' 
10+30" 
b 
h 


BT ~ Teat Bit 


Register/Memory, 
Immediate 
I 00001111 
I 10111010lmod100 
r/dimmed 
e·bit det~ 
3/6' 
3/6' 
b 
h 


Register/Memory, Register 
I 00001111 
1101000111modreg 
rid 
3/12' 
3/12' 
b 
h 


BTC = Teat Bit end Complement 


Register/Memory, 
Immediate 
100001111 
110111010lmod111 
rldimmed 
e·bit det~ 
6/e' 
6/e' 
b 
h 


Register/Memory, 
Register 
100001111 
1101110111modreg 
rid 
6/13' 
6/13' 
b 
h 


BTR = Test Biland 
Reset 


Register/Memory, Immediate 
100001111 
I 1 0 1 1 1 0 1 0 lmod 1 1 0 
r/dimmede.bitdetal 
6/e' 
6/e' 
b 
h 


Register/Memory, 
Register 
100001111 
I 10110011 
lmodreg 
rid 
6/13' 
6/13' 
b 
h 


BTS - 
Teat Blland 
set 


Register/Memory, 
Immediate 
100001111 
11 0 1 1 1 0 1 0 lmod 1 0 1 
rldimmed 
8-bit detd 
6/e' 
6/e' 
b 
h 


Register/Memory. Register 
I 00001111 
110101011 
lmodreg 
rid 
6/13' 
6/13' 
b 
h 


CONTROL TRANSFER 


CALL ~ Call 


Direct Within segment 
11 1 1 0 1 0 0 0 I full displacement 
7+m' 
9+m' 
b 
r 


RegisterlMemory 


Indirect Within Segment 
111111111 
ImodO 1 0 rid 
7+m'/10+m' 
9+ml 
b 
h. r 
12+m' 


Direct Intersegment 
I 1 0 0 1 1 0 1 0 lunsigned full offset. selector 
17+m' 
42+m' 
b 
i,k,r 


NOTE: 
t Clock 
count 
shown 
applies 
if 110 permission 
allows 
110 to the port in virtual 
8086 
mode. 
If 110 bit map denies 
permission 
exception 
13 fault occurs; 
refer to clock 
counts 
for INT 3 instruction. 


CLOCK COUNT 
NOTES 


Real 
Real 
INSTRUCTION 
FORMAT 
Address 
Protected 
Address 
Protected 
Mode or 
Virtual 
Mode or 
Virtual 
Virtual 
Address 
Virtual 
Addre •• 
8086 
Mode 
8086 
Mode 


Mode 
Mode 


ONTROl 
TRANSFER 
(Continued) 


rotected 
Mode Only (Direct Intersegment) 


Via Call Gate to Same 
Privilege Level 
64+m 
h,j,k,r 


Via Call Gate to Different 
Privilege Level, 


(No Parameters) 
98+m 
h,j,k,r 


Via Call Gate to Different 
Privilege Level, 


(x Parameters) 
lo6+8x+m 
h,j,k,r 


From 286 Task to 286 TSS 
285 
h,j,k,r 
From 286 Task to Intel386TM SX CPU TSS 
310 
h,j,k,r 


From 286 Task to Virtual 8086 Task (Inte1386 SX CPU TSS) 
229 
h,j,k,r 


From Intel386 SX CPU Task to 286 TSS 
285 
h,j,k,r 
From Intel386 SX CPU Task to Intel386 SX CPU TSS 
392 
h,j,k,r 


From Intel386 SX CPU Task to Virtual 8086 Task (Inte1386 SX CPU TSS) 
309 
h,j,k,r 


ndirect Intersegment 
111111111 
Imod011 
r/ml 
30+m 
46+m 
b 
h,j,k,r 


rotected Mode Only (Indirect Intersegment) 


Via Call Gate to Same 
Privilege Level 
68+m 
h,j,k,r 


Via call Gate to Different 
Privilege Level, 


(No Parameters) 
102+m 
h,j,k,r 


Via Call Gate to Different 
Privilege Level, 


(x Parameters) 
110+8x+m 
h,j,k,r 
From 286 Task to 286 TSS 
h,j,k,r 
From 286 Task to Intel386 SX CPU TSS 
h,j,k,r 


From 286 Task to Virtual 8086 Task (Inte1386 SX CPU TSS) 
h,j,k,r 


From Intel386 SX CPU Task to 286 TSS 
h,j,k,r 
From Intel386 SX CPU Task to Intel386 SX CPU TSS 
399 
h,j,k,r 
From Intel386 SX CPU Task 10Virtual 8086 Task (Inte1386 SX CPU TSS) 
h,j,k,r 
MP = Unconditional 
Jump 


hort 
I 1 1 1 0 1 0 1 1 18-bit disPlacemen~ 
7+m 
7+m 
r 


Direct within Segment 
I 11101001 
I full displacement 
7+m 
7+m 
r 


agister/Memory 
Indirect 
111111111 
Imod100 
r/ml 
9+m/14+m 
9+m/14+m 
b 
h,r 
ithin Segment 


11 
1 1 0 1 0 1 0 lunSigned 
full offset, selector 
iract Intersegment 
16+m 
31+m 
j,k,r 


rotected 
Mode Only (Direct Intersegment) 


Via Call Gate to Same 
Privilege Level 
53+m 
h,j,k,r 
From 286 Task to 286 TSS 
h,j,k,r 
From 286 Task 10Intel386 SX CPU TSS 
h,j,k,r 
From 286 Task to Virtual 8086 Task (Inle1386 SX CPU TSS) 
h,j,k,r 


From Intel386 SX CPU Task to 286 TSS 
h,j,k,r 
From Inlel386 SX CPU Task to Intel386 SX CPU TSS 
h,j,k,r 
From Inlel386 SX CPU Task 10Virtual 8086 Task (Inte1386 SX CPU TSS) 
395 
h,j,k,r 


ndirect Intersegment 
111111111 
Imod 1 01 
r/ml 
17+m 
31+m 
b 
h,j,k,r 


rotected Mode Only (Indirect Intersegmenl) 


Via Call Gate to same 
Privilege Level 
49+m 
h,j,k,r 
From 286 Task 10286 TSS 
h,j,k,r 
From 286 Task 10Intel386 SX CPU TSS 
h,j,k,r 
From 286 Task 10Virtual 8086 Task (Inle1386 SX CPU TSS) 
h,j,k,r 
From Inlel386 SX CPU Task to 286 TSS 
h,j,k,r 
From Inlel386 SX CPU Task 10Intel386 SX CPU TSS 
328 
h,j,k,r 
From Intel386 SX CPU Task to Virtual 8086 Task (InteI386 SX CPU TSS) 
h,j,k,r 


CLOCK COUNT 
NOTES 


Real 
Real 
INSTRUCTION 
FORMAT 
Addre •• 
Protected 
Address 
Protected 
Mode or 
Virtual 
Mode or 
Virtual 
Virtual 
Address 
Vlrtua' 
Addre •• 
8086 
Mode 
8086 
Mode 
Mode 
Mode 


CONTROL TRANSFER 
(Continued) 


RET ~ Return from CALL: 


Within Segment 
I 
11000011 
I 
12+m 
b 
g, h, r 


Within Segment Adding Immediate to SP I 11000010 
I 
16-bit displ 
I 
12+m 
b 
g, h, r 


Intersegment 
I 
11001011 
I 
36+m 
b 
g, h, j, k, r 


tntersegment 
Adding Immediate 
to SP 
I 
11001010 
I 
16-bit displ 
I 
36+m 
b 
g, h,j, k, r 


Protected Mode Only (RET): 


to Different Privilege Level 


Intersegment 
72 
h, j, k, r 


Intersegment Adding Immediate to SP 
72 
h, j, k, r 


CONDITIONAL JUMPS 


NOTE: 
Times Are Jump "Taken 
or Not Taken" 


JO ~ Jump on Overflow 


8·Bit Displacement 
I 
01110000 
I 
8-bitdispl 
I 
7+mor3 
7+mor3 
r 


Full Displacement 
I 
00001111 
I 10000000 
I full displacement 
7+m 
or3 
7+mor3 
r 


JNO = Jump on Not Overflow 


8·Bit Displacement 
I 01110001 
I 
8-bitdispl 
I 
7+mor3 
7+mor3 
r 


Full Displacement 
I 00001111 
I 
10000001 
I full displacement 
7+mor3 
7+mor3 
r 


JB/JNAE 
- 
Jump on Below/Not 
Above or Equal 


8·Bit Displacement 
I 01110010 
I 
8-bitdispl 
I 
7+mor3 
7+mor3 
r 


Full Displacement 
I 0000 
1 1 1 1 I 
1 00000 
1 0 I full displacement 
7+mor3 
7+mor3 
r 


JNB/JAE 
= Jump on Not Below/Above 
or Equaf 


a-Bit Displacement 
I 01110011 
I 
8-bitdispl 
I 
7+mor3 
7+mor3 
r 


Full Displacement 
I 00001111 
I 
10000011 
I full displacement 
7+m 
or3 
7+mor3 
r 


JE/ JZ - 
Jump on Equal/Zero 


8-Bit Displacement 
I 
01110100 
I 
8-bitdispl 
I 
7+mor3 
7+mor3 
r 


Full Displacement 
I 
00001111 
I 
10000100 
I full displacement 
7+mor3 
7+mor3 
r 


JNE/JNZ 
= Jump on Not Equal/Not 
Zero 


8-Bit Displacement 
I 
01110101 
I 
8-bitdispl 
I 
7+mor3 
7+mor3 
r 


Full Displacement 
I 
00001111 
I 10000101 
I full displacement 
7+mor3 
7+mor3 
r 


JBE/JNA 
~ Jump on Below or Equal/Not 
Above 


8-Bit Displacement 
I 
01110110 
I 
8-bit displ 
I 
7+mor3 
7+mor3 
r 


Full Displacement 
I 00001111 
I 
10000110 
I full displacement 
7+mor3 
7+mor3 
r 


JNBE/ JA = Jump on Not Below or Equal/ Above 


8-Bit Displacement 
I 01110111 
I 
8-bit displ 
I 
7+mor3 
7+mor3 
r 


Full Displacement 
I 00001111 
I 
10000111 
I full displacement 
7+mor3 
7+mor3 
r 


JS - 
Jump on Silln 


8-Bit Displacement 
I 01111000 
I 
8-bitdlspl 
I 
7+mor3 
7+mor3 
r 


Full Displacement 
I 
00001111 
I 
10001000 
I full displacement 
7+mor3 
7+mor3 
r 


• 


CLOCK COUNT 
NOTES 


Real 
Real 
INSTRUCTION 
FORMAT 
Addre •• 
Protected 
Addre •• 
Protected 
Mode or 
Virtual 
Mode or 
Virtual 


Virtual 
Addre •• 
Virtual 
Addr ••• 
8086 
Mode 
8086 
Mode 
Mode 
Mode 


CONDITIONAL JUMPS (Continued) 


JNS ~ Jump on Not Sign 


8-Bit Displacement 
I 
01111001 
I 
8-bit displ 
I 
7+mor3' 
7+mor3 
r 


Full Displacement 
1 
00001111 
I 
10001001 
I full displacement 
7+mor3 
7+mor3 
r 


JP/JPE = Jump on Parity/Parity 
Even 


8-Bit Displacement 
I 
01111010 
I 
8-bitdispl 
I 
7+mor3 
7+mor3 
r 


Full Displacement 
I 
00001111 
I 
10001010 
I full displacement 
7+mor3 
7+mor3 
r 


JNP/JPO 
~ Jump on Not Parity/Parity 
Odd 


a-Bit Displacement 
I 01111011 
I 
8-bitdispl 
I 
7+mor3 
7+mor3 
r 


Full Displacement 
I 00001111 
I 
10001011 
I full displacement 
7+mor3 
7+mor3 
r 


JLlJNGE 
~ Jump on LeA/Not 
Greater or Equal 


a-Bit Displacement 
I 01111100 
I 
8-bitdispl 
I 
7+mor3 
7+mor3 
r 


Full Displacement 
I 
00001111 
I 
10001100 
I full displacement 
7+mor3 
7+mor3 
r 


JNLlJGE = Jump on Not LeA/Greatar 
or Equal 


a-Bit Displacement 
I 
01111101 
I 
8-bitdispl 
I 
7+m or3 
7+mor3 
r 


Full Displacement 
I 
00001111 
I 
10001101 
I full displacement 
7+mor3 
7+mor3 
r 


JLE/JNG 
~ Jump on Le•• or Equal/Not Greater 


a-Bit Displacement 
I 
01111110 
I 
8-bitdispl 
I 
7+mor3 
7+mor3 
r 


Full Displacement 
I 
00001111 
I 
10001110 
I full displacement 
7+mor3 
7+mor3 
r 


JNLE/JG 
~ Jump on Not Le•• or Equal/Greater 


a-Bit Displacement 
I 
01111111 
I 
8-bitdispl 
I 
7+mor3 
7+mor3 
r 


Full Displacement 
I 
00001111 
I 
10001111 
I full displacement 
7+mor3 
7+mor3 
r 


JCXZ = Jump on CX Zero 
I 
11100011 
I 
8-bit displ 
I 
9+mor5 
9+mor5 
r 


JECXZ ~ Jump on ECX Zero 
I 
11100011 
I 
8-bitdispl 
I 
9+mor5 
9+mor5 
r 
- 


(Address Size Prefix Differentiates JCXZ from JECXl) 


LOOP ~ Loop CX TIme. 
I 
11100010 
I 
8-bitdispl 
I 
11+m 
11+m 
r 


LooPZ/LooPE 
~ Loop with 
I 
I 
I 
Zero/Equal 
11100001 
8-Mdispl 
11+m 
11+m 
r 


LooPNZ/LooPNE 
= Loop While 
I 
I 
I 
Not Zero 
11100000 
8-bitdispi 
11+m 
11+m 
r 


CONDITIONAL BYTE SET 


NOTE: Times Are Register/Memory 


SETO ~ set Byte on Overflow 


To Register/Memory 
I 
00001111 
I 
10010000 
I mcdOOO 
r/ml 
4/5' 
4/5' 
h 


SETNO ~ set Byte on Not Overflow 


To Register/Memory 
I 00001111 
I 
10010001 
I mcdOOO 
rIm I 
4/5' 
4/5' 
h 


SETB/SETNAE 
~ set Byte on Below/Not 
Above or Equal 


To Register/Memory I 
00001111 
I 
10010010 
I mcdOOO 
r/ml 
4/5' 
4/5' 
h 


CLOCK COUNT 
NOTES 


Real 
Real 
INSTRUCTION 
FORMAT 
Addre •• 
Protected 
Addre •• 
Protected 
Mode or 
Virtual 
Mode or 
Virtual 
Virtual 
Addreaa 
Virtual 
Addreaa 


8086 
Mode 
8086 
Mode 
Mode 
Mode 


CONDITIONAL 
BYTE SET (Continued) 


SETNB - 
set Byte on Not Below/ Above or Equal 


To Register/Memory 
I 
00001111 
I 
10010011 
I modOOO 
r/ml 
4/5' 
4/5' 
h 


SETE/SETZ 
~ set Byte on Equal/Zero 


To Register/Memory 
I 00001111 
I 
10010100 
I modOOO 
rim I 
4/5' 
4/5' 
h 


SETNE/SETNZ 
~ set Byte on Not Equal/Not 
Zero 


To Register/Memory 
I 
00001111 
I 
10010101 
I modOOO 
r/ml 
4/5' 
4/5' 
h 


SETBE/SETNA 
~ set Byte on Below or Equal/Not 
Above 


To RegisterlMemory I 00001111 
I 
10010110 
I modOOO 
r/ml 
4/5' 
4/5' 
h 


SETNBE/SETA 
= set Byte on Not Below or Equall Above 


To RegisterlMemory I 
00001111 
I 
10010111 
I modOOO 
r/ml 
4/5' 
4/5' 
h 


SETS = set Byte on SIgn 


To Register/Memory 
I 
00001111 
I 
10011000 
I modOOO 
rim I 
4/5' 
4/5' 
h 


SETNS - 
set Byte on Not Sign 


To Register/Memory 
I 00001111 
I 
10011001 
I modOOO 
r/ml 
4/5' 
4/5' 
h 


SETP/SETPE 
~ set Byte on Parity/Parity 
Even 


To Register/Memory 
I 00001111 
I 
10011010 
I modOOO 
r/ml 
4/5' 
4/5' 
h 


SETNP/SETPO 
- 
set Byte on Not ParltylParity 
Odd 


To Register/Memory 
I 
00001111 
I 
10011011 
I modOOO 
r/ml 
4/5' 
4/5' 
h 


SETLISETNGE 
~ set Byte on Leaa/Not 
Greater or Equal 


To Register/Memory I 
00001111 
I 
10011100 
I modOOO 
rim I 
4/5' 
4/5' 
h 


SETNLlSETGE 
= set Byte on Not LelS/Greater 
or Equal 


To Register/Memory 
I 
00001111 
I 
01111101 
I modOOO 
rim I 
4/5' 
4/5' 
h 


SETLE/SETNG 
~ Set Byte on LeIS or EquallNot 
Greater 


To Register/Memory 
I 
00001111 
I 
10011110 
I modOOO 
rim I 
4/5' 
4/5' 
h 


SETNLE/SETG 
- 
set Byte on Not Le•• or Equal/Greater 


To Register/Memory 
I 
00001111 
I 
10011111 
I modOOO 
rim I 
4/5' 
4/5' 
h 


ENTER - 
Enter Procedure 
I 
1 1 0 0 1 0 0 0 I 16-bit displacement. 8-bit level 
I 


L~O 
10 
10 
b 
h 


L - 
1 
14 
14 
b 
h 


L> 
1 
17+ 
17 + 
b 
h 


8(n - 
1) 
8(n - 
1) 


LEAVE = Leave Procedure 
I 
11001001 
I 
4 
4 
b 
h 


CLOCK COUNT 
NOTES 


Raa' 
Raal 


INSTRUCTION 
FORMAT 
Add •• aa 
Protected 
Add,... 
Protected 
Mode or 
VIrtual 
Mode or 
Vlrtua' 
VIrtuet 
Add •••• 
VIrtuet 
A_ 
- 


Mode - 


Mode 
Mode 
Mode 


INTERRUPT 
INSTRUCTIONS 


INT = Interrupt: 


Type Specilied 
I 
11001101 
I 
type 
I 
37 
b 


Type 3 
I 
11001100 
I 
33 
b 


INTO ~ Interrupt 
4 " Overflow 
Flag Set I 
11001110 
I 


1I0F~ 
1 
35 
b,a 


II OF ~ 0 
3 
3 
b,a 


Bound 
~ Intarrupt5 
If oetect 
Vllua 
I 01100010 
I mod reg 
rIm I 


OufofRlnga 


II Out of Range 
44 
b,a 
a,g,h,l,k.r 


II In Range 
10 
10 
b,a 
a,g.h,l.k,r 


Protected 
Moda Only (INT) 


INT: Type Specified 


Via Interrupt or Trap Gate 


Via Interrupt or Trap Gate 


to Same Privilege Level 
71 
g,l. k,r 


to Different Privilege Level 
111 
g,l.k.r 
From 286 Task to 286 TSS via Task Gate 
438 
g.l. k.r 


From 286 Task to Intel386"" 
SX CPU T55 via Task Glte 
465 
g,l.l<,r 


From 286 Task to virt 8086 md via Task Gate 
382 
g,l. k.r 


From Inte1386"" 
SX CPU Task to 286 T55 via Task Gate 
440 
g,l. k,r 


From Intel386™ 
SX CPU Task to Intel386TM SX CPU T55 vii Task Gate 
467 
g,l. k,r 


From Intel386TM SX CPU Task to virt 8086 md via Task Gate 
384 
g,l. k.r 


From virt 8086 md to 286 TSS via Task Gate 
445 
g,l.k.r 


From virt 8086 md to Intel386"" 
SX CPU T55 via Task Gate 
472 
g,l, k,r 


From virt 8086 md to priv level 0 via Trap Gate or Interrupt Glte 
275 


INT:TYPE3 


Via Interrupt or Trap Gate 


to Same Privilege Level 
71 
g,l.k,r 


Via Interrupt or Trap Gate 


to Different Privilege Level 
lfl 
g.~ I<,r 


From 286 Task to 286 T55 via Task Gate 
382 
g,~l<,r 


From 286 Task to Inte1386"" 
SX CPU T55 via Tlsk 
Glte 
- 


g,~ k, r 


From 286 Task to Virt 8086 md via Task Glte 
32e 
g,l.k,r 


From Intel386TM SX CPU Task to 288 T55 via Tlsk 
Gltl 
384 
11011<,' 


From InteI386"" 
SX CPU Task to InteI386"" 
SX CPU T55 via TIsk Gill 
411 
g,~I<,' 


From Inte1386"" 
SX CPU Task to Virt 8088 md via Talk Glta 
328 
g.~ I<,r 


From virt 8086 md to 286 T55 vii Tlsk 
Glta 
3e8 
g.~I<,' 


From vilt 8086 md to Inte1388"" 
SX CPU T55 via Tlsk 
Gata 
418 
g,~1<, r 


From virt 8086 md to priv level 0 via Trap Gate or Interrupt Glta 
223 


INTO: 


Via Interrupt or Trap Grete 


to Same Privilege Level 
71 
g,~ I<,r 


Via Interrupt or Trap Gate 


to Different Privilege Leyel 
111 
g,l. k,r 
From 286 Task to 286 TSS via Task Gate 
384 
g,l. k,r 
From 286 Task to Intel386TM SX CPU TSS via Tlsk 
Glte 
411 
g,l.l<,r 


From 286 Task to virt 8088 md via Task Gate 
328 
g, I, I<,r 


From InteI386"" 
SX CPU Task to 286 T55 via Talk Glta 
1nt11388OX 
g,~ I<,r 


From Inte1386"" 
SX CPU Task to Inte1388"" 
SX CPU T55 via TIsk Gill 
413 
g,I.l<,r 


From InteI386"" 
SX CPU Task to virt 8088 md vii Talk Glta 
3211 
g.I,I<" 


From virt 8086 md to 286 TSS via Task Glte 
391 
g.!, k,r 
From virt 8086 md to Intel386TM SX CPU TSS vii Tlsk 
Gate 
418 
g,l, k, r 


From virt 8086 md to priv level 0 via Trap Gate or Interrupt Glte 
223 


CLOCK COUNT 
NOTES 


Real 
Real 
INSTRUCTION 
FORMAT 
Addreas 
Protected 
Addreas 
Protected 
Mode or 
Virtual 
Mode or 
Virtual 
Virtual 
Addreas 
Virtual 
Addreas 
8088 
Mode 
8086 
Mode 
Mode 
Mode 


INTERRUPT 
INSTRUCTIONS 
(Continued) 


BOUND: 


Via Interrupt or Trap Gate 


to Same Privilege Level 
71 
g,j, k, r 
Via Interrupt or Trap Gate 


to Different Privilege Level 
111 
g, j, k, r 
From 286 Task to 286 TSS via Task Gate 
358 
g,j, k, r 
From 286 Task to Intel386N 
SX CPU TSS via Task Gate 
388 
g,j, k, r 
From 268 Task to vir! 8086 Mode via Task Gate 
335 
g,j, k, r 
From Intel386 SX CPU Task to 286 TSS via Task Gate 
368 
g,j, k, r 
From Intel388 SX CPU Task to Intel386 SX CPU TSS via Task Gate 
398 
g,j, k, r 
From Intel388 SX CPU Task to vIrt 8088 Mode via Task Gate 
347 
9>j, k, r, 
From vir! 8088 Mode to 286 TSS via Task Gate 
368 
g,j, k, r 
From vir! 8088 Mode to Intel386 SX CPU TSS via Task Gate 
398 
g,j, k, r 
From vir! 8088 md to priv level 0 via Trap Gate or Interrupt Gate 
223 


INTERRUPT 
RETURN 


IRET = Intenupt 
Return 
I 11001111 
I 
24 
g, h, j, k, r 


Protected 
Mode Only (IRE1) 


To the Same Privilege Level (within task) 
42 
g, h,j,k,r 
To Different Privilege Level (within task) 
86 
g, h,j, k, r 
From 286 Task to 288 TSS 
285 
h,j, k, r 
From 286 Task to Intel388 SX CPU TSS 
318 
h,j, k,r 
From 286 Task to Virtual 8088 Task 
267 
h,j, k,r 
From 286 Task to Virtual 8088 Mode (within task) 
113 
From Intel386 SX CPU Task to 288 TSS 
324 
h,j, k, r 
From Intel386 SX CPU Task to Intel386 SX CPU TSS 
328 
h,j, k, r 
From Intel386 SX CPU Task to Virtual 8086 Task 
377 
h, j, k, r 
From Intel386 SX CPU Task to Virtual 8086 Mode (within task) 
113 


PROCESSOR CONTROL 


HLT 
= HALT 
I 11110100 
I 
5 
5 
1 


MOV 
~ Move to _ 
From e:e...-/DebugITHt 
R••••••.• 


CRO/CR2/CR3from 
register 
I 00001111 
I 00100010 
I 
11 eeereg 
I 
10/4/5 
10/4/5 
1 


Register From CRO-3 
I 00001111 
I 00100000 
I 
11 eeereg 
I 
6 
6 
1 


DRO-3 From Register 
I 00001111 
I 00100011 
11 eeereg 
22 
22 
1 


DR8-7 
From RegIa1er 
I 00001111 
I 00100011 
11 eeereg 
16 
16 
1 


Register from DR6-7 
I 00001111 
I 00100001 
11 eeereg 
14 
14 
1 


Register from DRO-3 
00001111 
I 00100001 
11 eeereg 
22 
22 
I 


TR6-7 
from Register 
00001111 
I 00100110 
11 eeereg 
12 
12 
I 


Register from TR6-7 
00001111 
I 00100100 
I 
11 eeereg 
12 
12 
1 


NOP 
= No 0pendI0n 
10010000 
I 
3 
3 


WAIT = Walt until BUSY <# pin la",,- 
1 0011 
011 I 
6 
6 


• 
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CLOCK COUNT 
NOTES 


Real 
Real 
INSTRUCTION 
FORMAT 
Addre •• 
Protected 
Add •••• 
Protected 
Mode or 
Virtual 
Mode or 
Virtual 
Virtual 
Addrell 
Virtual 
Addre •• 
8086 
Mode 
8086 
Mode 
Mode 
Mode 


PROCESSOR EXTENSION 
INSTRUCTIONS 


Processor 
Extension 
Escape 
I 11011TTT 
ImodLLL 
rIm I 
See 
h 


TIT and LLL bits are opcode 
Intel387SX 


information 
for coprocessor. 
data sheet for 


clock counts 


PREFIX BYTES 


Addre •• Size Prefix 
I 
01100111 
I 
0 
0 


LOCK ~ BUI Lock Prefix 
I 
11110000 
I 
0 
0 
m 


Operand Size Prefix 
I 
01100110 
I 
0 
0 


segment 
Override Preflx 


CS: 
I 00101110 
0 
0 


OS: 
I 00111110 
0 
0 


ES: 
I 00100110 
0 
0 


FS: 
I 01100100 
0 
0 


GS: 
I 01100101 
0 
0 


ss: 
I 00110110 
0 
0 


PROTECTION 
CONTROL 


ARPL 
= AdJult Requeated 
Privilege Leve! 


From Register/Memory 
I 01100011 
I mod reg 
r/ml 
N/A 
20/21" 
a 
h 


LAR 
= Load Ace ••• 
Righta 


From Register/Memory 
I 00001111 
I 
00000010 
I mod reg 
rIm I 
N/A 
15/16' 
a 
g, h,j, P 


LGOT 
- 
Load Global Deacrlptor 


Table Register 
I 00001111 
I 
00000001 
Imod010 
r/ml 
11' 
11' 
b,c 
h, I 


LIOT 
~ Load Interrupt Descriptor 


Table Register 
I 
00001111 
I 
00000001 
I mod011 
rIm I 
11' 
11' 
b,c 
h,t 


LLDT 
~ Load Local Descriptor 


Table Register to 


I 
I 
Imod010 
rIm I 
RegisterlMemory 
00001111 
00000000 
N/A 
20/24' 
a 
g, h,j, I 


LMSW 
= Load Machine StatuI 
Word 


From Register/Memory 
I 
00001111 
I 
00000001 
I mod11 0 
rIm I 
10/13 
10/13' 
b, c 
h, I 


LSL 
~ Load segment 
Umlt 


From Register/Memory 
I 
00001111 
I 00000011 
I mod reg 
rIm I 


Byte-Granular 
Umrt 
N/A 
20/21' 
a 
g, h,i,p 


Page-Granular 
Limit 
N/A 
25/26' 
a 
g, h,j, P 


LTR 
~ Load Tall< Reglater 


From Register/Memory I 00001111 
I 
00000000 
Imod001 
rtlnl 
N/A 
23/27' 
a 
g, h,j, I 


SGOT 
~ Store Global Descriptor 


Table Regllter 
I 00001111 
I 
00000001 
I modOOO 
r/ml 
g' 
g' 
b,c 
h 


SlOT 
= Store Interrupt Descriptor 


Table Regllter 
I 
00001111 
I OOOOOOOt 
Imod001 
rIm I 
g' 
g' 
b,c 
h 


SLOT 
= Store Local Descriptor Table Regllter 


To RegisterlMemory 
I 
00001111 
I 00000000 
I modOOO 
rIm I 
N/A 
2/2' 
a 
h 


CLOCK COUNT 
NOTES 


Real 
Reel 
INSTRUCTION 
FORMAT 
Addre •• 
Protected 
Addre •• 
Protecled 
Mode or 
Virtual 
Mode or 
Virtual 
Virtual 
Add •••• 
Virtual 
Addre •• 
8086 
Mode 
8086 
Mode 
Mode 
Mode 


PROTECTION CONTROL (Continued) 


SMSW 
= Store Machine 
I 
I 
!mod100 
rim I 
Statu. 
Word 
00001111 
00000001 
2/2' 
2/2' 
b,c 
h,l 


STR 
= Store Tesk Reglater 


To Register IMemory 
I 
00001111 
I 00000000 
Imod001 
r/ml 
N/A 
2/2' 
a 
h 


VERR 
- Verily Read Acce •• 


Register/Memory 
I 
00001111 
I 
00000000 
Imod100 
r/ml 
N/A 
10/11' 
a 
9, h,i, P 


VERW 
~ Verily Write Acce •• 
I 00001111 
I 
00000000 
I mod 1 01 
r/ml 
N/A 
15/16' 
a 
9,h,i,p 


INSTRUCTION NOTES FOR TABLE 9·1 


Notes a through c apply to Real Address Mode only: 
a, This is a Protected Mode instruction. Attempted execution in Real Mode will result in exception 6 (invalid opcode). 
b. Exception 13 fault (general protection) will occur in Real Mode if an operand reference is made that partially or fully 
extends beyond the maximum CS, OS, ES, FS or GS limit, FFFFH. Exception 12 fault (stack segment limit violation or not 
present) will occur in Real Mode if an operand reference is made that partially or fully extends beyond the maximum SS limit. 
c. This instruction may be executed in Real Mode. In Real Mode, its purpose is primarily to initialize the CPU for Protected 
Mode. 


Notes d through g apply to Real Address Mode and Protected Virtual Address Mode: 
d. The Intel386 SX CPU uses an early-out multiply algorithm. The actual number of clocks depends on the position of the 
most significant bit in the operand (multiplier). 


Clock counts given are minimum to maximum. To calculate actual clocks use the following formula: 
Actual Clock = if m < > 0 then max ([I092 Imll. 3) + b clocks: 


if m = 0 then 3+b 
clocks 
In this formula, m is the multiplier, and 
b = 9 for register to register, 
b = 12 for memory to register, 
b = 10 for register with immediate to register, 
b = 11 for memory with immediate to register. 


e. An exception may occur, depending on the value of the operand. 
I. LOCK# is automatically asserted, regardless of the presence or absence of the LOCK# prefix. 
g. LOCK# is asserted during descriptor table accesses. 


Notes h through sIt apply to Protected Virtual Address Mode only: 
h. Exception 13 fault (general protection violation) will occur if the memory operand in CS, OS, ES, FS or GS cannot be used 
due to either a segment limit violation or access rights violation. If a stack limit is violated, an exception 12 (stack segment 
limit violation or not present) occurs. 
i. For segment load operations, the CPL, RPL, and OPL must agree with the privilege rules to avoid an exception 13 fault 
(general protection violation). The segment's descriptor must indicate "present" or exception 11 (CS, OS, ES, FS, GS not 
present). If the SS register is loaded and a stack segment not present is detected, an exception 12 (stack segment limit 
violation or not present) occurs. 
j. All segment descriptor accesses in the GOT or LOT made by this instruction will automatically assert LOCK# to maintain 
descriptor integrity in multiprocessor systems. 
k. JMP, CALL, INT, RET and IRET instructions referring to another code segment will cause an exception 13 (general 
protection violation) if an applicable privilege rule is violated. 
I. An exception 13 fault occurs if CPL is greater than 0 (0 is the most privileged level). 
m. An exception 13 fault occurs if CPL is greater than IOPL. 
n. The IF bit of the flag register is not updated if CPL is greater than IOPL. The IOPL and VM fields of the flag register are 
updated only if CPL = O. 
o. The PE bit of the MSW (CRO)cannot be reset by this instruction. Use MOV into CROif desiring to reset the PE bit. 
p. Any violation of privilege rules as applied to the selector operand does not cause a protection exception; rather, the zero 
flag is cleared. 
q. If the coprocessor's memory operand violates a segment limit or segment access rights, an exception 13 fault (general 
protection exception) will occur before the ESC instruction is executed. An exception 12 fault (stack segment limit violation 
or not present) will occur if the stack limit is violated by the operand's starting address 
r. The destination of a JMP, CALL, INT, RET or IRET must be In the defined limit of a code segment or an exception 13 fault 
(general protection violation) will occur. 
sit. The Instruction will execute in s clocks if CPL ,;; IOPL. If CPL > IOPL, the instruction will take t clocks. 


• 


All instruction 
encodings 
are subsets 
of the general 
instruction 
format 
shown 
in Figure 8-1. Instructions 
consist of one or two primary opcode 
bytes, possibly 
an address 
specifier 
consisting 
of the 
"mod 
rim" 
byte and "scaled 
index" 
byte, a displacement 
if re- 
quired, and an immediate 
data field if required. 


Within 
the primary 
opcode 
or opcodes, 
smaller 
en- 
coding 
fields 
may be defined. 
These 
fields vary ac- 
cording 
to the class 
of operation. 
The fields 
define 
such information 
as direction 
of the operation, 
size 
of the displacements, 
register 
encoding, 
or sign ex- 
tension. 


Almost 
all 
instructions 
referring 
to an 
operand 
in 
memory 
have 
an addressing 
mode 
byte 
following 
the primary 
opcode 
byte(s). ThiS'byte, 
the mod rim 
byte, specifies 
the address 
mode to be used. Certain 


encodings 
of the 
mod rim byte 
indicate 
a second 
addressing 
byte, the scale-index-base 
byte, follows 
the 
mod rim 
byte 
to fully 
specify 
the 
addressing 
mode. 


Addressing 
modes 
can include 
a displacement 
im- 
mediately 
following 
the mod rim byte, or scaled 
in- 
dex byte. If a displacement 
is present, 
the possible 
sizes are 8, 16 or 32 bits. 


If the 
instruction 
specifies 
an immediate 
operand, 
the 
immediate 
operand 
follows 
any 
displacement 
bytes. The immediate 
operand, 
if specified, 
is always 
the last field of the instruction. 


Figure 
9-1 illustrates 
several 
of the fields 
that 
can 
appear 
in an instruction, 
such as the mod field and 
the rim field, but the Figure does not show all fields. 
Several 
smaller fields also appear in certain 
instruc- 
tions, 
sometimes 
within 
the 
opcode 
bytes 
them- 
selves. 
Table 
9-2 is a complete 
list of all fields 
ap- 
pearing 
in the instruction 
set. Further 
ahead, follow- 
ing Table 9-2, are detailed 
tables for each field. 


IT T T T T T T TIT 
T T T T T T T I mod T T T rim I ss index base 
Id32 116 18 1none data32 
116 18 1none 


( 
07 
0)\765320)\765320)\ 
)\ 
) 


T 
• 
------ 
------- 


register and address 
mode specifier 


opcode 
(one or two bytes) 
(T represents 
an 
opcode 
bit.) 


"mod rim" 
byte 
"s-i-b" 
byte 
address 
displacement 
(4, 2, 1 bytes 
or none) 


immediate 
data 
(4,2, 
1 bytes 
or none) 


Field Name 
Description 
Number 
of Bits 


w 
Specifies 
if Data is Byte or Full Size (Full Size is either 16 or 32 Bits 
1 
d 
Specifies 
Direction 
of Data Operation 
1 
s 
Specifies 
if an Immediate 
Data Field Must be Sign-Extended 
1 
reg 
General 
Register 
Specifier 
3 
mod rim 
Address 
Mode Specifier 
(Effective 
Address 
can be a General 
Register) 
2 for mod; 
3 for rim 
ss 
Scale Factor for Scaled Index Address 
Mode 
2 
index 
General 
Register to be used as Index Register 
3 
base 
General 
Register to be used as Base Register 
3 
sreg2 
Segment 
Register Specifier 
for CS, SS, DS, ES 
2 
sreg3 
Segment 
Register Specifier 
for CS, SS, DS, ES, FS, GS 
3 
tttn 
For Conditional 
Instructions, 
Specifies 
a Condition 
Asserted 
or a Condition 
Negated 
4 


9.2.2 32-Bit Extensions of the 
Instruction Set 


With the Intel386 SX CPU, the 8086/80186/80286 
instruction set is extended in two orthogonal direc- 
tions: 32-bit forms of all 16-bit instructions are added 
to support the 32-bit data types, and 32-bit address- 
ing modes are made available for all instructions ref- 
erencing memory. This orthogonal instruction set ex- 
tension is accomplished having a Default (D) bit in 
the code segment descriptor, and by having 2 prefix- 
es to the instruction set. 


Whether the instruction defaults to operations of 
16 bits or 32 bits depends on the setting of the 0 bit 
in the code segment descriptor, which gives the de- 
fault length (either 32 bits or 16 bits) for both oper- 
ands and effective addresses when executing that 
code segment. In the Real Address Mode or Virtual 
8086 Mode, no code segment descriptors are used, 
but a 0 value of 0 is assumed internally by the 
Intel386 SX CPU when operating in those modes 
(for 16-bit default sizes compatible with the 80861 
80186/80286). 


Two prefixes, the Operand Size Prefix and the Effec- 
tive Address Size Prefix, allow overriding individually 
the Default selection of operand size and effective 
address size. These prefixes may precede any op- 
code bytes and affect only the instruction they pre- 
cede. If necessary, one or both of the prefixes may 
be placed before the opcode bytes. The presence of 
the Operand Size Prefix and the Effective Address 
Prefix will toggle the operand size or the effective 
address size, respectively, to the value' "opposite" 
from the Default setting. For example, if the default 
operand size is for 32-bit data operations, then pres- 
ence of the Operand Size Prefix toggles the instruc- 
tion to 16-bit data operation. As another example, if 
the default effective address size is 16 bits, pres- 
ence of the Effective Address Size prefix toggles the 
instruction to use 32-bit effective address computa- 
tions. 


These 32-bit extensions are available in all modes, 
including the Real Address Mode or the Virtual 8086 
Mode. In these modes the default is always 16 bits, 
so prefixes are needed to specify 32-bit operands or 
addresses. For instructions with more than one pre- 
fix, the order of prefixes is unimportant. 


Unless specified otherwise, instructions with 8-bit 
and 16-bit operands do not affect the contents of 
the high-order bits of the extended registers. 


9.2.3 Encoding of Instruction Fields 


Within the instruction are several fields indicating 
register selection, addressing mode and so on. The 
exact encodings of these fields are defined immedi- 
ately ahead. 


9.2.3.1 ENCODING OF OPERAND LENGTH (w) 
FIELD 


For any given instruction performing a data opera- 
tion, the instruction is executing as a 32-bit operation 
or a 16-bit operation. Within the constraints of the 
operation size, the w field encodes the operand size 
as either one byte or the full operation size, as 
shown in the table below. 


Operand Size 
Operand Size 
wField 
During 16·Bit 
During 32·Bit 
Data Operations 
Data Operations 


0 
8 Bits 
8 Bits 
1 
16 Bits 
32 Bits 


9.2.3.2 ENCODING OF THE GENERAL 
REGISTER (reg) FIELD 


The general register is specified by the reg field, 
which may appear in the primary opcode bytes, or as 
the reg field of the "mod rim" 
byte, or as the rim 
field of the "mod rim" byte. 


Encoding of reg Field When w Field 
is not Present In Instruction 


Register Selected 
Register Selected 
reg Field 
During 16·Blt 
During 32-Blt 
Data Operations 
Data Operations 


000 
AX 
EAX 
001 
CX 
ECX 
010 
OX 
EoX 
011 
BX 
EBX 
100 
SP 
ESP 
101 
BP 
EBP 
101 
51 
ESI 
101 
01 
Eol 


Encoding of reg Field When w Field 
Is Present In Instruction 


Register Specified by reg Field 
During 16·Blt Data Operations: 


Function of w Field 
reg 
(when w = 0) 
(whenw = 1) 


000 
AL 
AX 
001 
CL 
CX 
010 
oL 
OX 
011 
BL 
BX 
100 
AH 
SP 
101 
CH 
BP 
110 
oH 
51 
111 
BH 
01 


• 


Register Specified by reg Field 
During 32·Blt Data Operations 


Function of w Field 
reg 
(whenw 
= 0) 
(whenw 
= 1) 


000 
AL 
EAX 
001 
CL 
ECX 
010 


0 
oL 
EoX 
011 
BL 
EBX 
100 
AH 
ESP 
101 
CH 
EBP 
110 
oH 
ESI 
111 
BH 
Eol 


9.2.3.3 ENCODING OF THE SEGMENT 
REGISTER (sreg) FIELD 


The sreg field in certain instructions is a 2-bit field 
allowing one of the four 80286 segment registers to 
be specified. The sreg field in other instructions is a 
3-bit field, allowing the Intel386 SX CPU FS and GS 
segment registers to be specified. 


2·Blt 
Segment 


sreg2 Field 
Register 
Selected 


00 
ES 
01 
CS 
10 
SS 
11 
OS 


3·Blt 
Segment 


sreg3 Field 
Register 
Selected 


000 
ES 
001 
CS 
010 
SS 
011 
OS 
100 
FS 
101 
GS 
110 
do not use 
111 
do not use 


intel~ 


Except for special instructions, such as PUSH or 
POP,where the addressing mode is pre-determined, 
the addressing mode for the current instruction is 
specified by addressing bytes following the primary 
opcode. The primary addressing byte is the "mod 
rim" byte, and a second byte of addressing informa- 
tion, the "s-j-b" 
(scale-index-base) byte, can be 
specified. 


The s-i-b byte (scale-index-base byte) is specified 
when using 32-bit addressing mode and the "mod 
rim" byte has rim = 100 and mod = 00,01 or 10. 
When the sib byte is present, the 32-bit addressing 
mode is a function of the mod, ss, index, and base 
fields. 


The primary addressing byte, the "mod rim" 
byte, 
also contains three bits (shown asmin Figure 8-1) 
sometimes used as an extension of the primary op- 
code. The three bits, however, may also be used as 
a register field (reg). 


When calculating an effective address, either 16-bit 
addressing or 32-bit addressing is used. 16-bit ad- 
dressing uses 16-bit address components to calcu- 
late the effective address while 32-bit addressing 
uses 32-bit address components to calculate the ef- 
fective address. When 16-bit addressing is used, the 
"mod rim" byte is interpreted as a 16-bit addressing 
mode specifier. When 32-bit addressing is used, the 
"mod rim" byte is interpreted as a 32-bit addressing 
mode specifier. 


Tables on the following three pages define all en- 
codings of all 16-bit addressing modes and 32-bit 
addressing modes. 


mod rIm 
Effective 
Address 


00000 
oS:[BX+SI] 
00001 
oS:[BX+ol] 
00010 
SS:[BP+SI] 
00011 
SS:[BP+ol] 
00100 
oS:[SI] 


00101 
oS:[ol] 
00110 
oS:d16 
00 111 
OS: [BX] 


01000 
OS: [BX + SI + d8] 
01 001 
OS: [BX + 01+ d8] 
01 010 
SS: [BP + SI + d8] 
01 011 
SS: [BP + 01+ d8] 
01 100 
oS:[SI+d8] 
01 101 
oS:[01+d8] 
01 110 
SS:[BP+d8] 
01 111 
oS:[BX+d8] 


mod rIm 
Effective 
Address 


10000 
oS:[BX+SI+d16] 
10001 
oS:[BX+01+d16] 
10010 
SS:[BP+ 
SI + d16] 
10011 
SS:[BP+01+d16] 
10100 
oS:[SI+d16] 
10 101 
oS:[01+d16] 
10110 
SS:[BP+d16] 
10111 
oS:[BX+d16] 


11 000 
register-see 
below 
11 001 
register-see 
below 
11 010 
register-see 
below 
11 011 
register-see 
below 
11 100 
register-see 
below 
11 101 
register-see 
below 
11 110 
register-see 
below 
11111 
register-see 
below 


Register 
Specified 
by rIm 
During 
16·Bit Data Operations 


mod rIm 
Function. 
of w Field 


(whenw=O) 
(when 
w = 1) 


11 000 
AL 
AX 
11 001 
CL 
CX 
11 010 
oL 
OX 
11 011 
BL 
BX 
11 100 
AH 
SP 
11 101 
CH 
BP 
11 110 
oH 
SI 
11111 
BH 
01 


Register 
Specified 
by rIm 
During 
32-Bit 
Data Operations 


mod rIm 
Function 
of w Field 


(whenw=O) 
(when 
w = 1) 


11 000 
AL 
EAX 
11 001 
CL 
ECX 
11 010 
oL 
EoX 
11 011 
BL 
EBX 
11 100 
AH 
ESP 
11 101 
CH 
EBP 
11 110 
oH 
ESI 
11111 
BH 
Eol 


• 
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mod rIm 
Effective 
Address 


00000 
OS:[EAX] 
00001 
OS:[ECX] 
00010 
OS:[EoX] 
00011 
OS:[EBX] 
00100 
s-i-b is present 
00101 
OS:d32 
00110 
OS:[ESI] 
00 111 
OS:[Eol] 


01000 
oS:[EAX+dS] 
01001 
oS:[ECX+dS] 
01010 
oS:[EoX+dS] 
01 011 
oS:[EBX+dS] 
01100 
s-i-b is present 
01101 
SS:[EBP+dS] 
01 110 
oS:[ESI+dS] 
01 111 
oS:[Eol+dS] 


mod rIm 
Effective 
Address 


10000 
OS:[EAX+ d32] 
10001 
oS:[ECX+d32] 
10010 
OS:[EoX + d32] 


10011 
OS:[EBX+ d32] 
10100 
s-i-b is present 
10101 
SS:[EBP+ d32] 
10110 
OS:[ESI+ d32] 
10111 
OS:[Eol + d32] 


11 000 
register-see 
below 
11 001 
register-see 
below 
11 010 
register-see 
below 
11 011 
register-see 
below 
11 100 
register-see 
below 
11 101 
register-see 
below 
11110 
register-see 
below 
11111 
register-see 
below 


Register 
Specified 
by reg or rIm 
during 16-81t Data Operations: 


mod rIm 
function 
of w field 


I 
(when w=O) 
(whenw= 
1) 


11000 
AL 
AX 
11 001 
CL 
CX 
11 010 
oL 
OX 
11 011 
BL 
BX 
11 100 
AH 
SP 
11 101 
CH 
BP 
11110 
oH 
SI 
11111 
BH 
01 


Register 
Specified 
by reg or rIm 
during 32-81t Data Operations: 


mod rIm 
function 
of w field 


(when w=O) 
(whenw= 
1) 


11000 
AL 
EAX 
11 001 
CL 
ECX 
11 010 
oL 
EoX 
11 011 
BL 
EBX 
11 100 
AH 
ESP 
11 101 
CH 
EBP 
11110 
oH 
ESI 
11111 
BH 
Eol 
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modbaae 
Effective Address 


00000 
OS: [EAX + (scaled index)] 
00001 
OS: [ECX + (scaled index)] 
00010 
OS: [EoX + (scaled index)] 
00011 
OS: [EBX + (scaled index)] 
00100 
SS:[ESP+(scaled 
index)] 
00101 
OS: [d32 + (scaled index)] 
00110 
OS: [ESI + (scaled index)] 
00111 
OS: [Eol + (scaled index)] 


01000 
OS: [EAX + (scaled index) + d8] 
01 001 
OS: [ECX + (scaled index) + d8] 
01 010 
OS: [EoX + (scaled index) + d8] 
01 011 
OS: [EBX + (scaled index) + d8] 
01 100 
SS: [ESP + (scaled index) + d8] 
01 101 
SS: [ESP + (scaled index) + d8] 
01 110 
OS: [ESI + (scaled index) + d8] 
01 111 
OS: [Eol + (scaled index) + d8] 


10000 
OS: [EAX + (scaled index) + d32] 
10001 
OS: [ECX + (scaled index) + d32] 
10010 
oS:[EoX 
+ (scaled index) + d32] 
10011 
OS: [EBX + (scaled index) + d32] 
10100 
SS: [ESP + (scaled index) + d32] 
10 101 
SS: [EBP + (scaled index) + d32] 
10110 
OS: [ESI + (scaled index) + d32] 
10111 
OS: [Eol + (scaled index) + d32] 


NOTE: 
Mod 
field 
in 
"mod 
rim" 
byte; 
ss, 
index, 
base 
fields 
in 


"s-i-b" 
byte. 


as 
SCale Factor 


00 
x1 
01 
x2 


10 
x4 
11 
x8 


Index 
Index Register 


000 
EAX 
001 
ECX 
010 
EoX 
011 
EBX 
100 
no index reg" 
101 
EBP 
110 
ESI 
111 
Eol 


""IMPORTANT 
NOTE: 
When 
index field is 100, indicating 
"no index register," 
then 
ss field 
MUST 
equal 
00. 
If index 
is 100 and 
ss does 
not 
equal 00, the effective 
address 
is undefined. 


9.2.3.5 ENCODING OF OPERATION DIRECTION 
(d) FIELD 


In many two-operand instructions the d field is pres- 
ent to indicate which operand is considered the 
source and which is the destination. 


d 
Direction of Operation 


0 
Register/Memory <- - Register 
"reg" Field Indicates Source Operand; 
"mod r/m" or "mod ss index base" Indicates 
Destination Operand 


1 
Register <- - Register/Memory 
"reg" Field Indicates Destination Operand; 
"mod r/m" or "mod ss index base" Indicates 
Source Operand 


The s field occurs primarily to instructions with im- 
mediate data fields. The s field has an effect only if 
the size of the immediate data is 8 bits and is being 
placed in a 16-bit or 32-bit destination. 


Effect on 
Effect on 
s 
Immediate Data8 
Immediate Data 16132 


0 
None 
None 


1 
Sign-Ex1endData8 
None 
to Fill 16-Bit or 32-Bit 
Destination 


9.2.3.7 ENCODING OF CONDITIONAL TEST 
(tttn) FIELD 


For the conditional instructions (conditional jumps 
and set on condition), mn is encoded with n indicat- 
ing to use the condition (n=0) or its negation (n= 1), 
and m giving the condition to test. 


Mnemonic 
Condition 
tttn 
0 
Overtlow 
0000 
NO 
No Overtlow 
0001 
B/NAE 
Below/Not Above or Equal 
0010 
NB/AE 
Not Below/Above or Equal 
0011 
E/Z 
Equal/Zero 
0100 
NE/NZ 
Not Equal/Not Zero 
0101 
BE/NA 
Below or Equal/Not Above 
0110 
NBE/A 
Not Below or Equal/Above 
0111 
S 
Sign 
1000 
NS 
Not Sign 
1001 
PIPE 
Parity/Parity Even 
1010 
NP/PO 
Not Parity/Parity Odd 
1011 


L/NGE 
Less Than/Not Greater or Equal 
1100 
NL/GE 
Not Less Than/Greater or Equal 
1101 


LE/NG 
Less Than or Equal/Greater Than 1110 
NLE/G 
Not Less or Equal/Greater Than 
1111 


9.2.3.8 ENCODING OF CONTROL OR DEBUG 
OR TEST REGISTER (eee) FIELD 


For the loading and storing of the Control, Debug 
and Test registers. 


When Interpreted as Control Register Field 


eeeCode 
Reg Name 


000 
CRO 
010 
CR2 
011 
CR3 


Do not use any other encoding 


eeeCode 
Reg Name 


000 
ORO 
001 
DR1 
010 
DR2 
011 
DR3 
110 
DR6 
111 
DR7 


Do not use any other encoding 


eeeCode 
Reg Name 


110 
TR6 
111 
TR7 


Do not use any other encoding 


The following 
list represents 
key differences 
between 
this data sheet and the -007 version 
of the Intel386TM 
SX microprocessor 
data sheet. 
Please review the summary 
carefully. 


1. Table 
5.7, E-Step revision 
identifier 
is added. 


2. Table 7.3, lee supply current 
for CLK2 = 40 MHz with 20 MHz Intel386 
SX has a typical 
lee of 180 mA. 


3. Table 7.5, t4 CLK2 fall time and ts CLK2 rise time have no minimum 
time for all speeds 
but maximum 
time 
for all speeds 
is 8 ns. 


4. Figure 7.11, CHMOS 
III characteristics 
for typical 
lee has been taken out. 
• 
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Intel387™ 
SX 
MATH COPROCESSOR 


• 
New Automatic 
Power Management 
- 
Low Power Consumption 
- 
Typically 
100 mA in Dynamic 
Mode, 
and 4 mA in Idle Mode 


• 
Socket 
Compatible 
with Intel387 
Family 
of Math CoProcessors 
- 
Hardware 
and Software 
Compatible 
-Supported 
by Over 2100 Commercial 
Software 
Packages 
-10% 
to 15% Performance 
Increase 
on Whetstone 
and Livermore 
Benchmarks 


• 
Compatible 
with the Intel386TM SX 
Microprocessor 
- 
Extends 
CPU Instruction 
Set to 
Include Trigonometric, 
Logarithmic, 
and Exponential 


• 
High Performance 
80-Bit Internal 
Architecture 


• 
Implements 
ANSI/IEEE 
Standard 
754-1985 
for Binary Floating-Point 
Arithmetic 


• 
Available 
In a 68-Pln PLCC Package 


See Intel Packaging 
Specification, 
Order 
#231369 


The Intel387TM SX Math CoProcessor 
is an extension 
to the Intel386™ 
SX microprocessor 
architecture. 
The 
combination 
of the Intel387™ 
SX with the Intel386™ 
SX microprocessor 
dramatically 
increases 
the process- 
ing speed of computer 
application 
software 
that utilizes high performance 
floating-point 
operations. 
An internal 
Power Management 
Unit enables 
the Intel387™ 
SX to perform 
these floating-point 
operations 
while maintain- 
ing very low power consumption 
for portable 
and desktop 
applications. 
The internal 
Power Management 
Unit 
effectively 
reduces 
power consumption 
by 95% when the -device is idle. 


The Intel387™ 
SX Math CoProcessor 
is available 
in a 68-pin PLCC package, 
and is manufactured 
on Intel's 
advanced 
1.0 micron CHMOS 
IV technology. 
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include Vcc and Vss planes for power distribution 
and all Vcc and Vss pins must be connected to the 
appropriate plane. 
The 
Intel387 
SX Math 
CoProcessor pinout 
as 
viewed from the top side of the component is shown 
in Figure 1-1. Vcc and Vss (GNo) connections must 
be made to multiple pins. The circuit board should 
NOTE: 
Pins identified as N.C. should remain completely 
unconnected. 


Vcc 


N.C. 


015 
'1 


014 


Intel387™ 
SX Math 
CoProcessor 


(top view) 


R£S£TIN 


VCJ:. 


READye 


CllDoe 


ADse 


VCJ:. 


NPS2 


NPSle 


VCJ:. 


VSS 
WiRe 


STEN 


VCJ:. 


Vss 


VCJ:. 


Busye 


ERRORe 


Figure 1-1. Intel387TMSX Math CoProcessor Pinout 


Table 1-1. Pin Cross Reference-Functlonal 
Grouping 


BUSY# 
36 
000 
19 
Vcc 
4 
Vss 
5 
N.C. 
1 
PEREa 
56 
001 
20 
9 
14 
10 
ERROR# 
35 
002 
23 
13 
21 
17 


AoS# 
47 
003 
8 
22 
25 
18 


CMoO# 
48 
004 
7 
26 
27 
52 


NPS1# 
44 
.005 
6 
31 
32 
65 


NPS2 
45 
006 
3 
33 
34 
67 


STEN 
40 
007 
2 
37 
38 
68 


W/R# 
41 
008 
24 
39 
42 
009 
28 
43 
55 
REAoy# 
49 
010 
29 
46 
60 
REAoyO# 
57 
011 
30 
50 
61 
012 
16 
58 
63 
CKM 
59 
013 
15 
62 
66 
CPUCLK2 
54 
014 
12 
64 
NUMCLK2 
53 
015 
11 


RESETIN 
51 


1.1 
Pin Description Table 


The following 
table 
lists a brief description 
of each 
pin on the 
Intel387 
SX Math 
CoProcessor. 
For a 
more complete 
description 
refer to Section 
4.1 Sig- 
nal Description. 
The following 
definitions 
are used in 
these 
descriptions: 


# 
The signal is active 
LOW. 


I 
Input Signal 
o 
Output 
Signal 


I/O 
Input and Output 
Signal 


Symbol 
Type 
Name and Function 


ADS# 
I 
ADDRESS 
STROBE 
indicates 
that the address and bus cycle definition 
is valid. 


BUSY# 
0 
BUSY indicates 
that the Math CoProcessor 
is currently 
executing 
an instruction. 


CKM 
I 
CLOCKING 
MODE is used to select synchronous 
or asynchronous 
clock modes. 


CMDO 
I 
COMMAND 
determines 
whether 
an opcode 
or operand 
are being sent to the Math 


CoProcessor. 
During a read cycle it indicates 
which register group is being read. 


CPUCLK2 
I 
CPU CLOCK input provides the timing for the bus interface unit and the execution 
unit in synchronous 
mode. 


D15-DO 
I/O 
OAT A BUS is used to transfer 
instructions 
and data between 
the Math 
CoProcessor 
and CPU. 


ERROR# 
0 
ERROR signals that an unmasked 
exception 
has occurred. 


NC 
- 
NO CONNECT 
should always remain unconnected. 
Connection 
of a N.C. pin may 


cause the Math CoProcessor 
to malfunction 
or be incompatible 
with future 


steppings. 


NPS1# 
I 
NPX SELECT 
1 is used to select the Math CoProcessor. 


NPS2 
I 
NPX SELECT 2 is used to select the Math CoProcessor. 
,-- 


NUMCLK2 
I 
NUMERICS 
CLOCK is used in asynchronous 
mode to drive the Floating 
Point 


Execution 
Unit. 


PEREQ 
0 
PROCESSOR 
EXTENSION 
REQUEST 
signals the CPU that the Math 
CoProcessor 
is ready for data transfer to/from 
its FIFO. 


READY # 
I 
READY indicates 
that the bus cycle is being terminated. 


READYO# 
0 
READY OUT signals the CPU that the Math CoProcessor 
is terminating 
the bus 


cycle. 


RESETIN 
I 
SYSTEM 
RESET terminates 
any operation 
in progress 
and forces the Math 


CoProcessor 
to enter a dormant 
state. 
-- 


STEN 
I 
STATUS 
ENABLE serves as a master chip select for the Math CoProcessor. 


When inactive, this pin forces all outputs and bi-directional 
pins into a floating 


state. 


W/R# 
I 
WRITE/READ 
indicates 
whether 
the CPU bus cycle in progress 
is a read or a write 


cycle. 


Vcc 
I 
SYSTEM 
POWER provides the + 5V nominal D.C. supply input. 


Vss 
I 
SYSTEM GROUND 
provides the OV connection 
from which all inputs and outputs 


are measured. 


• 


The Intel387 SX Math CoProcessor is designed to 
support the Intel386 SX Microprocessor and effec- 
tively extend the CPU architecture by providing fast 
execution of arithmetic instructions and transcen- 
dental functions. This component contains internal 
power management circuitry for reduced active pow- 
er dissipation and an automatic idle mode. 


• New power saving design provides low power 
dissipation in active and idle modes. 


• Higher Performance, 10%-25% 
higher bench- 
mark performance than the original Intel387 SX 
Math CoProcessor. 


• High Performance 84-bit Internal Architecture 
• Eight 80-bit Numeric Registers, usable as individ- 


ually addressable general registers or as a regis- 
ter stack. 


• Full-range transcendental operations for SINE, 


COSINE, TANGENT, ARCTANGENT, and LOG- 
ARITHM. 
• Programmable rounding modes and notification 
of rounding effects. 


• Exception reporting either by software polling or 
hardware interrupts. 
• Fully compatible with the SX Microprocessors. 


I 
DATA 
INTERrACE 
AND CONTROL 
UNIT 
I 
I 


• Expands Intel386 SX CPU data types to include 
32-bit, 64-bit, and 80-bit Floating Point; 32-bit and 
64-bit Integers; and 18 Digit BCD Operands. 
• Directly extends the Intel386 SX CPU Instruction 
Set to trigonometric, logarithmic, exponential, 
and arithmetic functions for all data types. 
• Operates independently of Real, Protected, and 
Virtual-86 Modes of the Intel386 SX Microproces- 
sors. 


• Fully compatible with the Intel387 SL Mobile and 
OX Math CoProcessors. Implements all Intel387 
Math CoProcessor architectural enhancements 
over 8087 and 80287. 


• Implements ANSI/lEEE Standard 754-1985 for 
binary floating point arithmetic. 


• Upward Object Code compatible from 8087 and 
80287. 


As shown in Figure 2-1, the Intel387 SX Math Co- 
Processor is internally divided into four sections; the 
Bus Control Logic, the Data Interface and Control 
Logic, the Floating Point Unit, and the Power Man- 
agement Unit. The Bus Control Logic is responsible 
for the CPU bus tracking and interface. The Data 
Interface and Control Unit latches data and decodes 
instructions. The Floating Point Unit executes the 
mathematical instructions. The Power Management 
Unit is new to the Intel387 family and is the nucleus 
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of the static architecture. It is responsible for shut- 
ting down idle sections of the device to save power. 


Microprocessor/Math 
CoProcessor Interface 
The Intel386 CPU interprets the pattern 11011B in 
most significant five bits of an instruction as an op- 
code intended for a math coprocessor. Instructions 
thus marked are called ESCAPE or ESC instruc- 
tions. Upon decoding the instruction as an ESC in- 
struction, the Intel386 CPU transfers the opcode to 
the math coprocessor through an I/O write cycle at 
a dedicated address (8000F8H) outside the normal 
programmed I/O address range. The math coproc- 
essor has dedicated output signals for controlling 
the data transfer and notifying the CPU if the Math 
CoProcessor is busy or that a floating point error has 
occurred. 


2.3 
Power Management 


The Intel387 SX Math CoProcessor offers two 
modes of power management; dynamic and idle. 


Dynamic Mode is when the device is executing an 
instruction. Using Intel's CHMOS IV technology, the 
Intel387 SX Math CoProcessor draws considerably 
less power than its predecessor. The active power 
supply current is reduced to approximately 100 mA 
at 20 MHz and provides low case temperatures. 


When an instruction is not being executed, the 
Intel387 SX Math CoProcessor will automatically 
change to Idle Mode. Three clocks after completion 
of the previous instruction, the internal power man- 
ager shuts down the floating point execution unit 
and all non-essential circuitry. Only portions of the 
Bus Interface Unit remain active to monitor the CPU 
bus activity and to accept the nex1instruction when 
it is transferred. When the CPU transfers the nex1 
instruction to the Math CoProcessor, the Intel387 SX 


Math 
CoProcessor accepts 
the 
instruction 
and 
ramps the internal core within one clock so there is 
no impact to performance or throughput. In idle 
mode, the Intel387 SX Math CoProcessor draws typ- 
ically 4 mA of current and reduces case temperature 
to near ambient. 


NOTE: 
In asynchronous clock mode (CKM = 0), the inter- 
nal idle mode is disabled. 


2.4 
Compatibility 


The Intel387 SX Math CoProcessor is compatible 
with the Intel387 SL Mobile Math CoProcessor. Due 
to the increased performance and internal pipelining 
effects, diagnostic programs should never use in- 
struction execution time for test purposes. 


The increased performance of floating point calcula- 
tions can be attributed to the 84-bit architecture and 
floating point processor. For the CPU to execute 
floating point calculations requires very long soft- 
ware emulation methods with reduced resolution 
and accuracy. The performance of the Intel387 SX 
Math 
CoProcessor 
has been further 
enhanced 
through improvements in the internal microcode and 
through internal architectural changes. These refine- 
ments will increase Whetstone benchmarks by ap- 
proximately 10% to 25% over the original Intel387 
SX Math CoProcessor. 


Real performance, however, should be measured 
with application software. Depending upon software 
coding, system overhead, and percentage of floating 
point instructions, performance can vary significant- 
ly. 


The Intel387 SX Math CoProcessor effectively ex- 
tends to an Intel386 Microprocessor system addi- 
tional instructions, registers, data types, and inter- 
rupts specifically designed to facilitate high-speed 
floating point processing. All communication be- 
tween the CPU and the Math CoProcessor is trans- 
parent to applications software. The CPU automati- 
cally controls the Math CoProcessor whenever a 
numerics instruction is executed. All physical memo- 
ry and virtual memory of .the CPU are available for 
storage of the instructions and operands of pro- 
grams that use the Math CoProcessor. All memory 
addressing modes, including use of displacement, 
base register, index register, and scaling are avail- 
able Toraddressing numerical operands. 


The Intel387 SX Math CoProcessor is software com- 
patible with the Intel387 OX Math CoProcessors and 
supports all applications written for the Intel386 CPU 
and Intel387 Math CoProcessors. 


The Intel386 CPU interprets the pattern 11011B in 
most significant five bits ot an instruction as an op· 
code intended for a math coprocessor. Instructions 
thus marked are called ESCAPE or ESC instruction. 


The typical Math CoProcessor instruction accepts 
one or two operands and produces one or some- 
times two results. In two-operand instructions, one 
operand is the cOl"'tel"'tsof the Math CoProcessor 
register, while the other may be a memory location. 
The operands of some instructions are predefined; 
for example, FSQRT always takes the square root of 
the number in the top stack element. 


The Intel387 SX Math CoProcessor instruction set 
can be divided into SIX groups. The following sec- 
tions gives a brief description of each instruction. 
Section 8.0 defines the instruction format and byte 
fields. Further details can be obtained from the 
Intel387 User's Manual, Programmer's Reference, 
Order #231917. 


The class includes the operations that load, store, 
and convert operands of any support data types. 


Real Transfers 


FLD 
Load Real (single, double, extended) 
FST 
Store Real (single, double) 
FSTP 
Store Real and pop (single, double, ex- 
tended) 
FXCH Exchange registers 


Integer Transfers 
FILD 
Load (convert from) Integer (word, short, 
long) 
FIST 
Store (convert to) Integer (word, short) 
FISTP Store (convert to) Integer and pop (word, 
short, long) 


Packed Decimal Transfers 
FBLD 
Load (convert from) packed decimal 


FBSTP Store packed decimal and pop 


This class of instructions provide variations on the 
basic add, subtract, multiply, and divide operations 
and a number of other basic arithmetic operations. 
Operands may reside in registers or one operand 
may reside in memory. 


Addition 
FADD 
FADDP 
FIADD 


Subtraction 
FSUB 
FSUBP 
FISUB 
FSUBR 
FSUBRP 
FISUBR 


Add Real 
Add Real and pop 
Add Integer 


Subtract Real 
Subtract Real and pop 
Subtract Integer 
Subtract Real reversed 
Subtract Real reversed and pop 
Subtract Integer reversed 


Multiplication 
FMUL 
Multiply Real 
FMULP 
Multiply Real and pop 
FIMUL 
Multiply Integer 


Division 
FDIV 
FDIVP 
FIDIV 
FDIVR 
FDIVRP 
FIDIVR 


Divide Real 
Divide Real and pop 
Divide Integer 
Divide Real reversed 
Divide Real reversed and pop 
Divide Integer reversed 


Other Operations 
FSQRT 
Square Root 
FSCALE 
Scale 
FPREM 
Partial Remainder 
FPREM1 
IEEE standard partial remainder 
FRNOINT Round to Integer 
FXTRACT Extract Exponent and Significand 
FABS 
Absolute Yalue 
FCHS 
Change sign 


Instructions of this class allow comparison of num- 
bers of all supported real and integer data types. 
Each of these instructions analyzes the top stack 
element often in relationship to another operand and 
reports the result as a condition code in the status 
word. 
FCOM 
Compare Real 
FCOMP 
Compare Real and pop 
FCOMPP 
Compare Real and pop twice 
FUCOM 
Unordered compare Real 
FUCOMP 
Unordered compare Real and pop 
FUCOMPP Unordered compare 
Real and pop 
twice 
Compare Integer 
Compare Integer and pop 
Test 
Examine 


FICOM 
FICOMP 
FTST 
FXAM 


This group of the Intel387 operations includes trigo- 
nometric, inverse trigonometric, logarithmic and ex- 
ponential functions. The transcendental operate on 
the top one or two stack elements, and they return 
their results to the stack. The trigonometric opera- 
tions assume their arguments are expressed in radi- 
ans. The logarithmic and exponential operations 
work in base 2. 
FSIN 
Sine 
FCOS 
Cosine 
FSINCOS Sine and cosine 
FPTAN 
Tangent 
FPATAN 
Arctangent of ST(1)/ST 
F2XM1 
2x-1 


FYL2X 
Y • log2X 
FYL2XP1 Y' 
log2(X + 1) 


Each of these instructions loads (pushes) a com- 
monly used constant onto the stack. The constants 
have extended real values nearest to the infinitely 
precise numbers. The only error that can be gener- 
ated is an Invalid Exception if a stack overflow oc- 
curs. 
FLOZ 
FL01 
FLOPI 
FLOL2T 
FLOL2E 
FLOLG2 
FLOLN2 


Load +0.0 
Load + 1.0 
Load 71' 


Load log2 10 
Load log2e 
Load log102 
Load loge2 


3.1.6 
PROCESSOR 
INSTRUCTIONS 
(ADMINISTRATIVE) 


FINIT 
Initialize Math CoProcessor 
FLDCW 
Load Control Word 
FSTCW 
Store Control Word 
FLDCW 
Load Status Word 
FSTSW 
Store Status Word 
FSTSW AX Store Status Word to AX register 
FCLEX 
Clear Exceptions 
FSTENV 
Store Environment 
FLDENV 
Load Environment 


FSAVE 
Save State 


GENERAL 
REGISTERS 
31 
1615 
0 


EAX 
AX 


AH 
AL 


EBX 
BX 


BH 
BL 


ECX 
CX 


CH 
CL 


EDX 
DX 


DH 
DL 


ESI 
SI 


EDI 
DI 


EBP 
BP 


ESP 
SP 


SEGMENT 
REGISTERS 
15 
0 


CS 


SS 


DS 


ES 


FS 


GS 


o 


: 
I 


31 


I 
' 
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FRSTOR 
FINCSTP 
FDECSTP 
FFREE 
FNOP 
FWAIT 


Restore State 
Increment Stack pointer 
Decrement Stack pointer 
Free Register 
No Operation 
Report Math CoProcessor Error 


Figure 3-1 shows the Intel387 SX Math CoProcessor 
register set. When a Math CoProcessor is present in 
a system, programmers may use these registers in 
addition to the registers normally available on the 
CPU. 


Tag 
Field 
79 
78 
64 
63 
0 
1 
0 


RO 
Sign 
Exponent 
Significand 


R1 


R2 


R3 


R4 


R5 


R6 


R7 


15 
0 


Control 
Register 


Status 
Register 


Tag Word 


47 
0 


Instruction 
Pointer (in CPU) 


Data Pointer (in CPU) 


3.2.1 
STATUS 
WORD 
(SW) REGISTER 


The 16-bit status word (in the status register) 
shown 
in Figure 
3-2 reflects 
the overall 
state 
of the Math 
CoProcessor. 
It can be read and inspected 
by pro- 
grams 
using the FSTSW 
memory 
or FSTSW 
AX in- 
structions. 


Bit 15, the Busy bit (B) is included 
for 8087 compati- 
bility only. It always has the same value as the Error 
Summary 
bit (ES, bit 7 of status 
word); 
it does 
not 
indicate 
the status of the BUSY # output of the Math 
CoProcessor. 


Bits 13-11 
(TOP) serves as the pointer 
to the Math 
CoProcessor 
data register that is the current Top-Of- 
Stack. The significance 
of the stack top is described 
in Section 
3.2.5 Data Registers. 


The four numeric condition 
code bits (C3-CO, Bit 14, 
10-8) 
are similar to the flags in a CPU; instructions 
that perform 
arithmetic 
operations 
update these bits 
to reflect 
the outcome. 
The 
effects 
of the 
instruc- 
tions 
on the condition 
code 
are summarized 
in Ta- 
bles 3-1 through 
3-4. These 
condition 
code bits are 
used 
principally 
for 
conditional 
branching. 
The 
FSTSW 
AX instructions 
stores 
the Math CoProces- 
sor. status 
word directly 
to the CPU AX register, 
al- 
lowing the condition 
codes to be inspected 
efficient- 
ly by Intel386 
CPU code. 
The 
Intel386 
CPU SAHF 
instruction 
can copy C3-CO directly to the flag bits to 
simplify 
conditional 
branching. 
Table 3-5 shows 
the 
mapping 
of these 
bits to the Intel386 
CPU flag bits. 


Bit 7 is the error summary 
(ES) status bit. This bit IS 
set if any unmasked 
exception 
bit is set; it is clear 
otherwise. 
If this bit is set, the ERROR # signal 
is 
asserted. 


Bit 6 is the stack flag (SF). This bit is used to distin- 
guish invalid operations 
due to stack overflow 
or un- 
derflow 
from other kinds of invalid operations. 
When 
SF is set, 
bit 9 (C1) distinguishes 
between 
stack 
overflow 
(C1 = 1) or underflow 
(C1 = 0). 


Bit 5-0 
are the six exception 
flags of the status word 
and are set to indicate that during an instruction 
exe- 
cution 
the 
Math CoProcessor 
has detected 
one of 
six possible 
exception 
conditions 
since these 
status 
bits were 
last cleared 
or reset. Section 
3.5 entitled 
Exception 
Handling 
explains 
how they are set and 
used. 


The exception 
flags 
are "sticky" 
bits and can only 
be 
cleared 
by 
the 
instructions 
FINIT, 
FCLEX, 
FLDENV, 
FSAVE, 
and FRSTOR. 
Note that when 
a 
new 
value 
is loaded 
into 
the 
status 
word 
by the 
FLDENV or FRSTOR 
instruction, 
the value of ES (bit 
7) and 
B (bit 15) are not derived 
from 
the values 
loaded from memory. but rather are dependent 
upon 
the values 
of the exception 
flags 
(bits 5-0) 
in the 
status 
word 
and their 
corresponding 
masks 
in the 
control 
word. 
If 
ES 
is 
set 
in 
such 
a 
case, 
the 
ERROR # output 
of the 
Math CoProcessor 
is acti- 
vated 
immediately. 


TOP OF' STACK 
POINTER 


CONDITION 
CODE 


EXCEPTIONflAGS: 


PRECISION 


UNDERFLOW 


OVERFLOW 


ZERO 
DIVIDE 


DENORWAL/ZED 
OPERAND 


INVALID 
OPERATION 
ES . 
'f 
' 
" 
240225-3 
IS set I any unmasked exception bit IS set; cleared otherwise. See Table 2-2 for interpretation of condition code 
TOP values: 
' 


000 = Register a is Top of Stack 
001 = Register 1 is Top of Stack 


111 = Register 7 is Top of Stack 
For definitions of exceptions, refer to the section entitled "Exception Handling" 
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Instruction 
CO (5) 
I 
C3 (Z) 
C1 (A) 
C2 (C) 


FPREM, FPREM1 
Three least significant 
bits 
Reduction 
(see Table 3-2) 
of quotient 
0= 
complete 
02 
00 
01 
orO/U# 
1 = incomplete 


FCOM, FCOMP, 
FCOMPP, FTST, 
Result of comparison 
Zero 
Operand 
is not 
FUCOM, FUCOMP, 
(see Table 3-3) 
orO/U# 
comparable 
FUCOMPP, 
FICOM, 
(Table 3-3) 
FICOMP 


FXAM 
Operand 
class 
Sign 
Operand 
class 
(see Table 3-4) 
orO/U# 
(Table 3-4) 


FCHS, FABS, FXCH, 
FINCSTP, 
FDECSTP, 
Zero 
Constant 
loads, 
UNDEFINED 
orO/U# 
UNDEFINED 
FXTRACT, 
FLD, 


FILD, FBLD, 
FSTP (ext real) 


FIST, FBSTP, 
FRNDINT, 
FST, 


FSTP, FADD, FMUL, 
Roundup 
FDIV, FDIVR, 
UNDEFINED 
UNDEFINED 
FSUB, FSUBR, 
orO/U# 


FSCALE, 
FSORT, 


FPATAN, 
F2XM1, 


FYL2X, FYL2XP1 


FPTAN, FSIN 
Roundup 
Reduction 
FCOS, FSINCOS 
UNDEFINED 
orO/U#, 
0= 
complete 
undefined 
1 = incomplete 
ifC2 
= 
1 


FLDENV, 
FRSTOR 
Each bit loaded from memory 


FLDCW, FSTENV, 
FSTCW, FSTSW, 
UNDEFINED 
FCLEX, FINIT, 
FSAVE 


O/U# 
When 
both 
IE and SF bits of status 
word 
are set, indicating 
a stack 
exception, 
this bit 
distinguishes 
between 
stack overflow 
(C1 = 1) and underflow 
(C1 = 0). 


Reduction 
If FPREM 
or FPREM1 
produces 
a remainder 
that is less than the modulus, 
reduction 
is 
complete. 
When 
reduction 
is incomplete 
the value 
at the 
top 
of the 
stack 
is a partial 
remainder, 
which can be used as input to further 
reduction. 
For FPT AN, FSIN, FCOS, and 
FSINCOS, 
the reduction 
bit is set if the operand 
at the top of the stack is too large. In this 
case the original 
operand 
remains 
at the top of the stack. 


Roundup 
When the PE bit of the status word is set, this bit indicates 
whether 
the last rounding 
in the 
instruction 
was upward. 


UNDEFINED 
Do not rely on finding 
any specific 
value in these 
bits. 


Condition 
Code 
Interpretation 
after FPREM and FPREM1 
C2 
C3 
C1 
CO 


Incomplete 
Reduction: 
1 
X 
X 
X 
further interation 
required 
for complete 
reduction 


01 
oa 
02 
o MOD8 
a 
0 
a 
0 
a 
1 
a 
1 
Complete 
Reduction: 
1 
a 
a 
2 
a 
1 
1 
a 
3 
ca, C3. C1 contain three least 


a 
a 
1 
4 
significant 
bits of quotient 


a 
1 
1 
5 
1 
a 
1 
6 
1 
1 
1 
7 


Order 
C3 
C2 
CO 


TOP > Operand 
a 
a 
a 
TOP < Operand 
a 
a 
1 
TOP = Operand 
1 
a 
a 
Unordered 
1 
1 
1 


C3 
C2 
C1 
CO 
Value at TOP 
a 
a 
a 
a 
+ Unsupported 
a 
a 
a 
1 
+ NaN 
a 
a 
1 
a 
- 
Unsupported 
a 
a 
1 
1 
- 
NaN 
a· 
1 
a 
a 
+ Normal 
a 
1 
a 
1 
+ Infinity 
a 
1 
1 
a 
- 
Normal 
a 
1 
1 
1 
- 
Infinity 
1 
a 
a 
a 
+a 
1 
a 
a 
1 
+ Empty 
1 
a 
1 
a 
-a 
1 
a 
1 
1 
- 
Empty 
1 
1 
a 
a 
+ Denormal 


1 
1 
1 
a 
- 
Denormal 


Table 3-5 Mapping 
Condition 
Codes to Intel386™ 
CPU Flag Bits 
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The Math CoProcessor provides the programmer 
with several processing options that are selected by 
loading a control word from memory into the control 
register. Figure 3-3 show the format and encoding of 
fields in the control word. 


The low-order byte of the control word register is 
used to configure the exception masking. Bits 5-0 
of the control word contain individual masks for each 
of the six exceptions that the Math CoProcessor rec- 
ognizes. See Section 3.5, Exception Handling, for 
further explanation on the exception control and def- 
inition. 


The high-order byte of the control word is used to 
configure the Math CoProcessor operating mode, in- 
cluding precision, rounding and infinity control. 
• The rounding control (RC) field (bits 11-10) pro- 
vide for directed rounding and true chop, as well 
as the unbiased round to nearest even mode 
specified in the IEEE standard. Rounding control 
affects 
only 
those 
instructions 
that 
perform 
rounding at the end of the operation (and thus 
can generate a precision exception); namely, 
FST, FSTP, FIST, all arithmetic instructions (ex- 
cept FPREM, FPREM1, FXTRACT, FABS, and 
FCHS) and all transcendental instructions. 


• The precision control (PC) field (bits 9-8) can be 
used to set the Math CoProcessor internal oper- 
ating precision of the significand at less than the 
default of 64 bits (extended precision). This can 
be useful in providing compatibility with early gen- 
eration arithmetic processors of smaller preci- 
sion. PC affects only the instructions FADD, 
FSUB(R), FMUL, FDIV(R), and FSQRT. For all 
other instructions, either the precision is deter- 
mined by the opcode or extended precision is 
used. 
• The "infinity control bit" (bit 12) is not meaningful 
to the Intel387 SX Math CoProcessor and pro- 
grams must ignore its value. To maintain compat- 
ibility with the 8087 and 80287 (non-387 core), 
this bit can be programmed, however, regardless 
of its value the Intel387 SX Math CoProcessor 
always treats infinity in the affine sense (- 
00 < 


+ 00). This bit is initialized to zero both after a 
hardware reset and after FINIT instruction. 


All other bits are reserved and should not be pro- 
grammed, to assure compatibility with future proces- 
sors. 


RESERVED 


RESERVED· 


ROUNDING 
CONTROL 


PRECISION 
CONTROL 


EXCEPTION 
IolASKS: 


PRECISION 


UNDERFLOW 


OVERFLOW 


ZERO 
DIVIDE 


DENORIolALIZED 
OPERAN D 


INVALID 
OPERATION 


Precision Control 
00-24 
bits (single precision) 
01-(reserved) 
10-53 
bits (double precision) 
11~4 
bits (extended 
precision) 


• "0" 
AFTER 
RESET 
OR FINIT; 


CHANGEABLE 
UPON 
LOADING 
THE 
CONTROL 
WORD (CW). 
PROGRAMS 
MUST 
IGNORE 
THIS 
BIT. 


Rounding Control 
Oo-Round 
to nearest or even 
01-Round 
down (toward 
- 00) 
10-Round 
up (toward + 00) 
11-Chop 
(truncate toward zero) 
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Intel387 SX Math CoProcessor data register set 
consists of eight registers (RO-R?) which are treat- 
ed as both a stack and a general register file. Each 
of these data registers in the Math CoProcessor is 
80 bits wide and is divided into fields corresponding 
to the Math CoProcessor's extended-precision real 
data type, which is used for internal calculations. 


The Math CoProcessor register set can be accessed 
either as a stack, with instructions operating on the 
top one or two stack elements, or as individually ad- 
dressable registers. The TOP field in the status word 
identifies the current top-of-stack register. A "push" 
operation decrements TOP by one and loads a value 
into the new top register. A "store and pop" opera- 
tion stores the value from the current top register 
into memory and then increments TOP by one. The 
Math CoProcessor register stack grows "down" 
toward lower-addressed registers. 


Most of the Intel387 SX Math CoProcessor opera- 
tions use the register stack as the operand(s) and/or 
as a place to store the result. Instructions may ad- 
dress the data register either implicitly or explicitly. 
Many instructions operate on the register at the top 
of the stack. These instructions implicitly address 
the register at which TOP points. Other instructions 
allow the programmer to explicitly specify which reg- 
ister to use. Explicit register addressing is also rela- 
tive to TOP (where ST denotes the current stack top 
and ST(i) refers to the i'th register from the ST in the 
stack so the real register address in computed as 
ST+i). 


The tag word marks the content of each numeric 
data register, as Figure 3-4 shows. Each two-bit tag 
represents one of the eight data register. The princi- 


pal function of the tag word is to optimize the Math 
CoProcessor's performance and stack handling by 
making it possible to distinguish between empty and 
non-empty register locations. It also enables excep- 
tion handlers to identify special values (e.g. NaNs or 
denormals) in the contents of a stack location with- 
out the need to perform complex decoding of the 
actual data. 


Because the Math CoProcessor operates in parallel 
with the CPU, any exceptions detected by the Math 
CoProcessor may be reported after the CPU has ex- 
ecuted the ESC instruction which caused it. To allow 
identification 
of 
the 
numeric 
instruction 
which 
caused the exception, the Intel386 Microprocessor 
contains registers that aid in diagnosis. These regis- 
ters supply the address of the failing instruction and 
the address of its numeric memory operand (if ap- 
propriate). 


The instruction and data pointers are provided for 
user-written exception handlers. These registers are 
located in the CPU, but appear to be located in the 
Math CoProcessor because they are accessed by 
the ESC instructions FLDENV, FSTENV, FSAVE, 
and FRSTOR; which transfer the values between 
the registers and memory. Whenever the CPU exe- 
cutes a new ESC instruction (except administrative 
instructions), it saves the address of the instruction 
(including any prefixes that may be present), the ad- 
dress of the operand (if present) and the opcode. 


The instruction and data pointers appear in one of 
four formats depending on the operating mode of 
the CPU (protected mode or real-address mode) 
and depending on the operand size attribute in ef- 
fect (32-bit operand or 16-bit operand). (See Figures 
3-5, 3-6, 3-7, and 3-8.) Note that the value of the 
data pointer is undefined 
if the prior ESC instruction 
did not have a memory operand. 


15 
0 


TAG (7) I 
TAG (6) 
I 
TAG (5) 
I 
TAG (4) 
I 
TAG (3) 
I 
TAG (2) 
I 
TAG (1) I 
TAG (0) 


NOTE: 
The index i of tag(i) is not top-relative. 
A program 
typically 
uses the "top" 
field of Status 
Word to determine 
which 
tag(i) 
field 
refers 
to logical 
top of stack. 
TAG VALUES: 


00 = Valid 
01 = Zero 
10 = QNaN, 
SNaN, 
Infinity, 
Denormal 
and Unsupported 
Formats 
11 = Empty 


• 


32·81T PROTECTED 
MODE 
FORMAT 
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RESERVED 
CONTROL 
WORD 


RESERVED 
STATUS 
WORD 


RESERVED 
TAG WORD 


IPOFFSET 


00000 
I 
OPCODE 
10..0 
CSSELECTOR 


DATA OPER~ND 
OFFSET 


RESERVED 
OPERAND 
SELECTOR 


CONTROL 
WORD 


STATUS 
WORD 


TAG WORD 


. 
IPOFFSET 


CSSELECTOR 


OPERAND 
OFFSET 


OPERAND 
SELECTOR 


RESERVED 
CONTROL 
WORD 


RESERVED 
STATUS 
WORD 


RESERVED 
TAG WORD 


RESERVED 
INSTRUCTION 
POINTER 
15 ..0 


0000 
I 
INSTRUCTION 
POINTER 
31 ..16 
I 
0 
I 
OPCODE 
10 ..0 


RESERVED 
OPERAND 
POINTER 
15 ..0 


0000 
I 
OPERAND 
POINTER 
31 ..16 
I 
0000 
00000000 


3.3 Data Types 


Table 3-6 lists the seven data types that the Math 
CoProcessor supports and presents the format for 
each type. Operands are stored in memory with the 
least significant digit at the lowest memory address. 
Programs retrieve these values by generating the 
lowest address. For maximum system performance, 
all operands should start at physical-memory ad- 
dresses that correspond to the word size of the 
CPU; operands may begin at any other addresses, 
but will require extra memory cycles to access the 
entire operand. 


The data type formats can be divided into three 
classes: binary integer, decimal integer, and binary 
real. These formats, however, exist in memory only. 
Internally, the Math CoProcessor holds all numbers 
in the extended-precision real format. Instructions 
that load operands from memory automatically con- 
vert operands represented in memory as 16, 32, or 
64-bit integers, 32 or 64-bit floating point numbers, 
or 18 digit packed BCD numbers into extended-pre- 
cision real format. Instructions that store operands in 
memory perform the inverse type (fonversion. 


In addition to the typical real and integer data values, 
the Intel387 SX Math CoProcessor data formats en- 
compass encodings for a variety of special values. 
These special values have significance and can ex- 
press relevant information about the computations 
or operations that produced them. The various types 
of special values are denormal real numbers, zeros, 
positive and negative infinity, NaNs (Not-a-Number), 
Indefinite, and unsupported formats. For further in- 
formation on data types and formats, see the In- 
tel387 Programmer's Reference Manual. 


3.4 
Interrupt Description 


CPU interrupts are used to report errors or excep- 
tional conditions while executing numeric programs 
in either real or protected mode. Table 3-7 shows 
these interrupts and their functions. 


3.5 
Exception Handling 


The Math CoProcessor detects six different excep- 
tion conditions that occur during instruction execu- 
tion. Table 3-8 lists the exception conditions in order 
of precedence, showing for each the cause and the 
default action taken by the Math CoProcessor if the 
exception is masked by its corresponding mask bit in 
the control word. 


Any exception that is not masked by the control 
word sets the corresponding exception flag of the 
status word, sets the ES bit of the status word, and 
asserts the ERRORII 
signal. When the CPU at- 


tempts to execute another ESC instruction or WAIT 
exception 16 occurs. The exception condition must 
be resolved via an interrupt service routine. The re- 
turn address pushed onto the CPU stack upon entry 
to the service routine does not necessarily point to 
the failing instruction nor to the following instruction. 
The CPU saves the address of the floating-point in- 
struction that caused the exception and the address 
of any memory operand required by that instruction. 
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Data 
Most Significant Byte = HIGHEST ADDRESSED BYTE 
Range 
Precillon 
017 
017 
017 
017 
017 
017 
017 
017 
017 
01 
Formatl 
7 


Word Integer 
±104 
16 Bits 
IITWO 
S 
COMPlEMENTI 


15 
0 


Short Integer 
±109 
32 Bits 
ItTWO 
S 
COMPLEMENTt 


31 
0 


Long Integer 
±10'8 
64 Bits 
IITWOS 
COMPLEMENT) 


63 
0 


±10'8 
sl 
x Id". d'Oldl~ 


MAGNITUDE 


d" I 
Packed BCD 
18 Digits 
d'J 
dll 
dll 
dll 
dIU 
tic) 
d, 
d, 
I do 
d, 
dj 
d. 
d, 
d, 


79 
72 
0 


Single Precision 
± 10±38 
24 Bits 
_I 
BIASEO 
I 
SIGNIFICANO 
I 
S 
EXPONENT 


3' 
23'-11 
0 


Double Precision ± 10±308 
53 Bits 
sl 
BIASED 
I 
SIGNIFICANO 
I 
EXPONENT 


63 
52'- 
0 
Ii 


Extended 
±10±4932 
64 Bits 
sl 
BIASEO 
hl 
$IGNIFICAND 
I 
Precision 
EXPONENT 


79 
54 63' 
0 


NOTES: 
1. S = Sign bit (0 = positive, 1 = negative) 
2. dn = Decimal digit (two per byte) 
3. X = Bits have no significance; Math CoProcessor ignores when loading, zeros when storing 
4. ~ = Position of implicit binary point 
5. I = Integer bit of significand; stored in temporary real, implicit in single and double precision 
6. Exponent Bias (normalized values): 


Single: 127 (7FH) 
Double: 1023 (3FFH) 
Extended REal: 16383 (3FFFH) 
7. Packed BCD: (-1)5 
(017 ..00) 
8. Real: (-1)5 
(2E-BIA5) (Fo F, ...) 


Interrupt 
Cause of Interrupt 
Number 


7 
An ESC instruction 
was encountered 
when EM or TS of CPU control 
register zero (CRO) was 
set. EM = 1 indicates 
that software 
emulation 
of the instruction 
is required. When TS is set, 
either an ESC or WAIT instruction 
causes interrupt 
7. This indicates 
that the current Math 
CoProcessor 
context 
may not belong to the current task. 


9 
In a protected-mode 
system, an operand 
of a coprocessor 
instruction 
wrapped 
around an 
addressing 
limit (OFFFFH for expand-up 
segments, 
zero for expand-down 
segments) 
and 
spanned 
inaccessible 
addresses(1). 
The failing numerics 
instruction 
is not restartable. 
The 
address of the failing numerics 
instruction 
and data operand 
may be lost; an FSTENV does not 
return reliable addresses. 
The segment 
overrun exception 
should be handled by executing 
an 
FNINIT instruction 
(i.e., an FINIT without a preceding 
WAIT). The exception 
can be avoided 
by 
never allowing 
numerics 
operands 
to cross the end of a segment. 


13 
In a protected-mode 
system, the first word of a numeric operand 
is not entirely within the limit of 
its segment. 
The return address pushed onto the stack of the exception 
handler points at the 
ESC instruction 
that caused the exception, 
including any prefixes. The Math CoProcessor 
has 
not executed 
this instruction; 
the instruction 
pointer and data pointer register refer to a previous, 
correctly 
executed 
instruction. 


16 
The previous 
numerics 
instruction 
caused an unmasked 
exception. 
The address of the faulty 
instruction 
and the address of its operand 
are stored in the instruction 
pointer and data pointer 
registers. 
Only ESC and WAIT instructions 
can cause this interrupt. 
The CPU return address 
pushed onto the stack of the exception 
handler points to a WAIT or ESC instruction 
(including 
prefixes). 
This instruction 
can be restarted 
after clearing the exception 
condition 
in the Math 
CoProcessor. 
FNINIT, FNCLEX, FNSTSW, 
FNSTENV, 
and FNSAVE cannot cause this interrupt. 


NOTE: 
1. An operand 
may wrap around 
an addressing 
limit when 
the segment 
limit is near an addressing 
limit and the operand 
is 
near the largest 
valid address 
in the segment. 
Because 
of the wrap-around, 
the beginning 
and ending 
addresses 
of such an 
operand 
will be at opposite 
ends 
of the segment. 
There 
are two ways 
that 
such 
an operand 
may also 
span 
inaccessible 
addresses: 
1) if the segment 
limit is not equal 
to the addressing 
limit (e.g. addressing 
limit is FFFFH 
and segment 
limit is 
FFFDH) 
the operand 
will span addresses 
that are not within 
the segment 
(e.g. an 8-by1e operand 
that starts 
at valid offset 


FFFCH 
will span addresses 
FFFC-FFFFH 
and 0000-0003H; 
however 
addresses 
FFFEH 
and FFFFH 
are not valid, 
because 
they exceed 
the limit); 2) if the operand 
begins 
and ends in present 
and accessible 
segments 
but Intermediate 
by1es of the 


operand 
fall in a not-present 
page or in a segment 
or page to which 
the procedure 
does not have access 
rights. 


Exception 
Cause 
Default 
Action 
(if exception 
is masked) 


Invalid 
Operation 
on a signalling 
NaN, unsupported 
format, 
Result is a quiet NaN, 


Operation 
indeterminate 
for (0-00, 
0/0, (+ 00) + (- 
00), etc.), or stack 
integer indefinite, 
or 
overflow/underflow 
(SF is also set). 
BCD indefinte 


Denormalized 
At least one of the operands 
is denormalized, 
i.e., it has the 
Normal processing 
Operand 
smallest 
exponent 
but a nonzero significand. 
continues 


Zero Divisor 
The divisor is zero while the dividend 
is a noninfinite, 
nonzero 
Result is 00 


number. 


Overflow 
The result is too large in magnitude 
to fit in the specified 
format. 
Result is largest finite 
value or 00 


Underflow 
The true result is nonzero 
but too small to be represented 
in the 
Result is denormalized 
specified 
format, and, if underflow 
exception 
is masked, 
or zero 
denormalization 
causes the loss of accuracy. 
- 


Inexact Result 
The true result is not exactly representable 
in the specified 
Normal processing 
(Precision) 
format 
(e.g. 1/3); the result is rounded according 
to the rounding 
continues 


mode. 


• 


After FNINIT or RESET, the control word contains 
the value 037FH (all exceptions masked, precision 
control 64 bits, rounding to nearest) the same values 
as in an Intel287 after RESET. For compatibility with 
the 8087 and Intel287, the bit that used to indicate 
infinity control (bit 12) is set to zero; however, re- 
gardless of its setting, infinity is treated in the affine 
sense After FNINIT or RESET, the status word is 
initialized as follows: 


• All exceptions are set to zero. 
• Stack TOP is zero, so that after the first push the 


stack top will be register seven (111B). 


• The condition code C3-CO is undefined. 
• The B-bit is zero. 


The tag word contains FFFFH (all stack locations 
are empty). 


The Intel386 Microprocessor and Intel387 Math Co- 
Processor initialization software must execute a 
FNINIT instruction (Le., FINIT without a preceding 
WAIT) after RESET. The FNINIT is not strictly re- 
quired for the Intel386 software, but Intel recom- 
mends its use to help ensure upware compatibility 
with other processors. After a hardware RESET, the 
ERROR41 output is asserted to indicate that an In- 
tel387 Math CoProcessor is present. To accomplish 
this, the IE (Invalid Exception) and ES (Error Sum- 
mary) bits of the status word are set, and the 1Mbit 
(Invalid Exception Mask) in the control word is 
cleared. After FNINIT, the status word and the con- 
trol word have the same values as in an Intel287 
Math CoProcessor after RESET. 


3.7 
Processing Modes 


The Intel387 SX Math CoProcessor works the same 
whether the CPU is executing in real-addressing 
mode, protected mode, or virtual-8086 mode. All ref- 
erences to memory for numerics data or status infor- 
mation are performed by the CPU, and therefore 
obey the memory-management and protection rules 
of the CPU mode currently in effect. The Intel387 SX 
Math CoProcessor merely operates on 
instruc- 
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tions and values passed to it by the CPU and there- 
fore is not sensitive to the processing mode of the 
CPU. 


The real-address mode and virtual-80S6 mode, the 
Intel387 SX Math CoProcessor is completely upward 
compatible with software for the 8086/8087 
and 


80286/80287 real-address mode systems. 


In protected mode, the Intel387 SX Math CoProces- 
sor is completely upward compatible with software 
for the 80286/80287 protected mode system. 


The only differences of operation that may appear 
when 808618087 programs are ported to the pro- 
tected mode (not using virtual-8086 mode) is in the 
format of operands for the administrative instruc- 
tions FLDENV, FSTENV, FRSTOR, and FSAVE. 


3.8 
Programming Support 


Using the Intel387 SX Math CoProcessor requires 
no special programming tools, because all new in- 
structions and data types are directly supported by 
the assembler and compilers for high-level lan- 
guages. All Intel386 Microprocessor development 
tools that support Intel387 Math CoProcessor pro- 
grams can also be used to develop software for the 
Intel386 SX Microprocessors and Intel387 SX Math 
CoProcessors. All 8086/8088 
development tools 


that support the 8087 can also be used to develop 
software for the CPU and Math CoProcessor in real- 
address mode or virtual-8086 mode. All 80286 de- 
velopment tools that support the Intel287 Math Co- 
Processor can also be used to develop software for 
the Intel386 CPU and Intel387 Math CoProcessor. 


4.0 
HARDWARE SYSTEM 
INTERFACE 


In the following description of hardware interface, 
the II symbol at the end of a signal name indicates 
that the active or asserted state occurs when the 
signal is at a low voltage. When no II is present after 
the signal name, the signal is asserted when at the 
high voltage level. 
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4.1 Signal Description 


In the following 
signal descriptions, 
the Intel387 
SX 


Math CoProcessor 
pins are grouped 
by function 
as 


shown 
by Table 4-1. Table 4-1 lists every pin by its 


identifier, 
gives a brief description 
and lists some of 


its characteristics 
(Refer to Figure 1-1 and Table 1-1 


for pin configuration). 


All output 
signals 
can be tri-stated 
by driving 
STEN 


inactive. 
The output buffers of the bi-directional 
data 


pins 015-00 
are also tri-state; 
they only leave the 


floating 
state during read cycles when the Math Co- 


Processor 
is selected. 


4.1.1 
Intel386 
CPU CLOCK 
2 (CPUCLK2) 


This input uses the CLK2 signal of the CPU to time 
the bus control 
logic. Several 
other Math CoProces- 


sor signals 
are referenced 
to the rising edge of this 


signal. When CKM = 1 (synchronous 
mode) this pin 


also clocks 
the data interface 
and control 
unit and 
the floating 
point unit of the Math CoProcessor. 
This 


pin requires CMOS-level 
input. The signal on this pin 


is divided by two to produce 
the internal 
clock signal 


CLK. 


4.1.2 
Intel387 
MATH 
COPROCESSOR 
CLOCK 
2 


(NUMCLK2) 


When CKM = 0 (asynchronous 
mode), this pin pro- 


vides the clock for the data interface 
and control 
unit 


and the floating 
point unit of the Math CoProcessor 
. 
In this case, the ratio of the frequency 
of NUMCLK2 
to the 
frequency 
of CPUCLK2 
must 
lie within 
the 
range 
10: 16 to 14: 10 and the maximum 
frequency 


must 
not 
exceed 
the 
device 
specifications. 
When 


CKM = 
1 (synchronous 
mode), 
signals 
on this pin 


are ignored: 
CPUCLK2 
is used instead 
for the data 
interface 
and control 
unit and the floating 
point unit. 


This pin requires 
CMOS 
level input 
and should 
be 


tied low if not used. 


Pin Name 
Function 
Active 
State 
Input! 
Referenced 


Output 
To ... 


Execution 
Control 


CPUCLK2 
Microprocessor 
Clock2 
I 
NUMCLK2 
Math CoProcessor 
Clock2 
I 
CKM 
Math CoProcessor 
Clock Mode 
I 


RESETIN 
System Reset 
High 
I 
CPUCLK2 


Math CoProcessor 
Handshake 


PEREa 
Processor 
Request 
High 
0 
CPUCLK2 


BUSY# 
Busy Status 
Low 
0 
CPUCLK2 


ERRORI' 
Error Status 
Low 
0 
NUMCLK2 


Bus Interface 


015-00 
Data Pins 
I/O 
CPUCLK2 
W/R# 
Write/Read 
Bus Cycle 
High/Low 
I 
CPUCLK2 
ADS# 
Address 
StrObe 
Low 
I 
CPUCLK2 
READY # 
Bus Ready Input 
Low 
I 
CPUCLK2 


READYO# 
Ready Output 
Low 
0 
CPUCLK2 


Chip/Port 
Select 


STEN 
Status Enable 
High 
I 
CPUCLK2 
NPS1# 
Numerics 
Select 
# 1 
Low 
I 
CPUCLK2 
NPS2 
Numerics 
Select 
# 2 
High 
I 
CPUCLK2 
CMDO# 
Command 
Low 
I 
CPUCLK2 


Power 
and Ground 


Vcc 
System Power 


Vss 
System Ground 


•• 


This pin is strapping 
option. 
When 
it is strapped 
to 
VCC (HIGH), the Math CoProcessor 
operates 
in syn- 
chronous 
mode; 
when strapped 
to VSS (LOW), the 
Math CoProcessor 
operates 
in asynchronous 
mode. 


These 
modes 
relate to clocking 
of the internal 
data 
interface 
and control 
unit and the floating 
point unit 
only; the bus control 
logic always operates 
synchro- 
nously with respect 
to the CPU. 


Synchronous 
mode 
requires 
the 
use 
of only 
one 
clock, 
the CPU's 
CLK2. 
Use of synchronous 
mode 
eliminates 
one 
clock 
generator 
from 
the 
board 
design 
and 
is recommended 
for all designs. 
Syn- 
chronous 
mode also allows the internal 
Power Man- 
agement 
Unit to enable 
the idle and standby 
power 
saving modes. 


Asynchronous 
mode 
can 
provide 
higher 
perform- 
ance 
of the floating 
point 
unit by running 
a faster 
clock 
on NUMCLK2. 
(The CPU's CLK2 must still be 
connected 
to CPUCLK2 
input.) This allows the float- 
ing point 
unit to run up to 40% 
faster 
than in syn- 
chronous 
mode. 
Internal 
power 
management 
is dis- 
abled in asynchronous 
mode. 


4.1.4 
SYSTEM 
RESET 
(RESETIN) 


A LOW 
to HIGH 
transition 
on this 
pin causes 
the 
Math 
CoProcessor 
to terminate 
its present 
activity 
and to enter a dormant 
state. RESETIN 
must remain 
active (HIGH) for at least 40 CPUCLK2 
(NUMCLK2 
if 
CKM = 0) periods. 


The HIGH to LOW transitions 
of RESETIN 
must be 
synchronous 
with 
CPUCLK2, 
so that 
the phase 
of 
the internal 
clock 
of the bus control 
logic (which 
is 
the 
CPUCLK2 
divided 
by 
two) 
is 
the 
same 
as 
the 
phase 
of the 
internal 
clock 
of the 
CPU. After 
RESETIN 
goes 
LOW, 
at 
least 
50 
CPUCLK2 
(NUMCLK2 
if CKM = 0) periods 
must pass before 
the first Math CoProcessor 
instruction 
is written 
into 


the Math CoProcessor. 
This pin should 
be connect- 
ed to the 
CPU 
RESET 
pin. Table 
4-2 shows 
the 
status of the output 
pins during the reset sequence. 
After 
a reset, 
all output 
pins return to their inactive 
state except for ERROR# 
which remains 
active (for 
CPU recognition) 
until cleared. 


Pin Value 
Pin Name 


HIGH 
READYO#, 
BUSY# 
LOW 
PEREa, 
ERROR# 
Tri-State 
OFF 
D15-DO 


When 
active, 
this 
pin signals 
to the CPU that 
the 
Math CoProcessor 
is ready for data transfer 
to/from 
its data 
FIFO. When 
all data 
is written 
to or read 
from the data FIFO, PEREa 
is deactivated. 
This sig- 
nal always goes inactive 
before 
BUSY # goes inac- 


tive. This signal is reference 
to CPUCLK2. 
It should 
be connected 
to the CPU PEREa 
input pin. 


When 
active, 
this 
pin signals 
to the CPU that 
the 
Math CoProcessor 
is currently 
executing 
an instruc- 


tion. This signal is referenced 
to CPUCLK2. 
It should 


be connected 
to the CPU BUSY # input pin. 


This 
pin reflects 
the 
ES bit of the 
status 
register. 


When 
active, 
it indicates 
that an unmasked 
excep- 
tion has occurred. 
This signal can be changed 
to the 
inactive state only by the following 
instructions 
(with- 
out 
a 
preceding 
WAIT); 
FNINIT, 
FNCLEX, 


FNSTENV, 
FNSAVE, 
FLDCW, 
FLDENV, 
and 
FRSTOR. 
ERROR # is driven 
active 
during 
RESET 
to indicate 
to the CPU that the Math CoProcessor 
is 
present. 
This 
pin 
is referenced 
to 
NUMCLK2 
(or 
CPUCLK2 
if CKM = 1). It should 
be connected 
to 
the ERROR # pin of the CPU. 


These 
bi-directional 
pins are used to transfer 
data 
and opcodes 
between 
the CPU and Math CoProces- 
sor. They are normally 
connected 
directly to the cor- 
responding 
CPU data pins. 
HIGH state 
indicates 
a 
value of one. DO is the least significant 
data bit. Tim- 
ings are referenced 
to rising edge of CPUCLK2. 


This 
signal 
indicates 
to 
the 
Math 
CoProcessor 
whether 
the CPU bus cycle in progress 
is a read or a 
write cycle. This pin should be connected 
directly 
to 
the CPU's W/R# 
pin. HIGH indicates 
a write cycle 
to the 
Math CoProcessor; 
LOW a read cycle 
from 
the Math CoProcessor. 
This input is ignored if any of 
the 
signals 
STEN, 
NPS1 #, 
or NPS2 
are inactive. 
Setup and hold times are referenced 
to CPUCLK2. 


4.1.10 
ADDRESS 
STROBE 
(ADS#) 


This 
input, 
in conjunction 
with the 
READY # 
input, 


indicates 
when 
the 
Math 
CoProcessor 
bus control 
logic may sample W/R# 
and the chip select signals. 


Setup and hold times 
are referenced 
to CPUCLK2. 


This pin should 
be connected 
to the ADS# 
pin of 
the CPU. 


This input indicates to the Math CoProcessor when 
a CPU bus cycle is to be terminated. It is used by the 
bus control logic to trace bus activities. Bus cycles 
can be extended indefinitely until terminated by 
READY#. This input should be connected to the 
same signal that drives the CPU's READY# input. 
Setup and hold times are referenced to CPUClK2. 


This pin is activated at such a time that write cycles 
are terminated after two clocks (except FlDENV 
and FRSTOR) and read cycles after three clocks. In 
configurations where no extra wait states are re- 
quired, this pin must directly or indirectly drive the 
READY# input of the CPU. Refer to the section enti- 
tled "BUS OPERATION" for details. This pin is acti- 
vated only during bus cycles that select the Math 
CoProcessor. This signal is referenced to CPUClK2. 


(FlDENV and FRSTOR require data transfers larger 
than the FIFO. Therefore, PEREa is activated for 
the duration of transferring 2 words of 32 bits and 
then deactivated until the FIFO is ready to accept 
two additional words. The length of the write cycles 
of the last operand word in each transfer as well as 
the first operand word transfer of the entire instruc- 
tion is 3 clocks instead of 2 clocks. This is done to 
give the 
Intel386 CPU enough time to sample 
PEREa and to notice that the Intel387 is not ready 
for additional transfers.) 


This pin serves as a chip select for the Math Co- 
Processor. When inactive, this pin forces BUSY#, 
PEREa, ERROR# and READYO# outputs into a 
floating state. 015- DOare normally floating and will 
leave the floating state only if STEN is active and 
additional conditions are met (read cycle). STEN 
also causes the chip to recognize its other chip se- 
lect inputs. STEN makes it easier to do on-board 
testing (using the overdrive method) of other chips in 
systems containing the Math CoProcessor. STEN 
should be pulled up with a resistor so that it can be 
pulled down when testing. In boards that do not use 
on-board testing STEN should be connected to Vcc. 
Setup and hold times are relative to CPUClK2. Note 
that STEN must maintain the same setup and hold 
times as NPS1#, NPS2, and CMDO# (Le., if STEN 
changes state during a Math CoProcessor bus cycle, 
it must change state during the same ClK period as 
the NPS1#, NPS2. and CMDO# signals). 


4.1.14 MATH COPROCESSOR SELECT 1 
(NPS1#) 


When active (along with STEN and NPS2) in the first 
period of a CPU bus cycle, this signal indicates that 
the purpose of the bus cycle is to communicate with 
the Math CoProcessor. This pin should be connect- 
ed directly to the M/IO# 
pin of the CPU, so that the 
Math CoProcessor is selected only when the CPU 
performs I/O cycles. Setup and hold times are refer- 
enced to the rising edge of CPUClK2. 


4.1.15 MATH COPROCESSOR SELECT 2 
• 
(NPS2) 


When active (along with STEN and NPS1#) in the 
first period of a CPU bus cycle, this signal indicates 
that the purpose of the bus cycle is to communicate 
with the Math CoProcessor. This pin should be con- 
nected directly to the A23 pin of the CPU, so that the 
Math CoProcessor is selected only when the CPU 
issues one of the I/O addresses reserved for the 
Math CoProcessor (8000F8h. 8000FCh, or 8000FEh 
which is treated as 8000FCh by the Math CoProces- 
sor). Setup and hold times are referenced to the ris- 
ing edge of CPUClK2. 


During a write cycle, this signal indicates whether an 
opcode (CMDO# active low) or data (CMDO# inac- 
tive high) is being sent to the Math CoProcessor. 
During a read cycle, it indicates whether the control 
or status register (CMDO# active) or a data register 
(CMDO#) is being read. CMDO# should be connect· 
ed directly to the A2 output of the CPU. Setup and 
hold times are referenced to the rising edge of 
CPUClK2 at the end of PH2. 


4.1.17 SYSTEM POWER (Vcc) 


System power provides the + 5V DC supply input. 
All Vcc pins should be tied together on the circuit 
board and local decoupling capacitors should be 
used between Vcc and Vss. 


System ground provides the OV connection from 
which all inputs and outputs are measured. All Vss 
pins should be tied together on the circuit board and 
local decoupling capacitors should be used between 
Vcc and Vss· 


4.2 
System Configuration 


The Intel3B7 SX Math CoProcessor is designed to 
interface with the Intel3B6 SX Microprocessor as 
shown by Figure 4-1. A dedicated communication 
protocol makes possible high-speed transfer of op- 
codes and operands between the CPU and Math 
CoProcessor. The Intel3B7 SX Math CoProcessor is 
designed so that no additional components are re- 
quired for interface with the CPU. Most control pins 
of the Math CoProcessor are connected directly to 
pins of the CPU. 


The interface between the Math CoProcessor and 
the CPU has these characteristics: 
• 
The Math CoProcessor shares the local bus of 
the Intel3B6 SX Microprocessor. 


CLOCK 
GENERATOR 
CLK2 


CLK 


RESET 


HLOA 


Intel386™ 
SX CPU 


RESET 
O/C# 


REAOY# 
LOCK# 


CLK2 
BHE#, 
BLE# 


toI/IO# 


NA# 
A23 


HOLD 
.A22-A3, 
A 1 


INT# 
A2 


NtoIl 
W/R# 


AOS# 


015-00 


BUSY# 


ERROR# 


PEREQ 


• 
The CPU and Math CoProcessor share the same 
reset signals. They may also share the same 
clock input; however, for greatest performance, 
an external oscillator may be needed. 


• 
The 
corresponding 
Busy*", 
ERROR*", 
and 
PEREa pins are connected together. 


• 
The Math CoProcessor NPS1*" and NPS2 inputs 
are connected to the latched CPU MilO*" 
and 
A23 outputs respectively. For Math CoProcessor 
cycles, MilO*" 
is always LOW and A23 always 


HIGH. 


• 
The Math CoProcessor input CMDOis connected 
to the latched A2 output. The Intel3B6 SX Micro- 
processor generates address BOOOFBHwhen 
writing a command and address BOOOFCHor 
BOOOFEH(treated as BOOOFCHby the Intel3B7 
SX Math CoProcessor) when writing or reading 
data. It does not generate any other addresses 
during Math CoProcessor bus cycles. 


FROtol OTHER PERIPHERALS 
"T,, 


CPUCLK2 


RESETIN 


REAOY# 


NPS1# 


NPS2 


CtoIOO# 


W/R# 
STEN 
AOS# 
16 
015-00 


BUSY# 


ERROR# 


PEREQ 
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As shown in Figure 2-1 Block Diagram, the Intel387 
SX Math CoProcessor is internally divided into four 
sections; the Bus Control Logic (BCL), the Data In- 
terface and Control Logic, the Floating Point Unit 
(FPU), and the Power Management Unit (PMU).The 
Bus Control Logic is responsible for the CPU bus 
tracking and interface. ,he 
BCL is the only unit in 
the Math CoProcessor that must run synchronously 
with the CPU; the rest of the Math CoProcessor can 
run asynchronously with respect to the CPU. The 
Data Interface and Control Unit is responsible for the 
data flow to and from the FPU and the control regis- 
ters, for receiving the instructions, decoding them, 
sequencing the microinstructions, and for handling 
some of the administrative instructions. The Floating 
Point Unit (with the support of the control unit which 
contains the sequencer and other support units) ex- 
ecutes the mathematical instructions. The Power 
Manager is new to the Intel387 family. It is responsi- 
ble for shutting down idle sections of the device to 
save power. 


The BCL communicates solely with the CPU using 
I/O bus cycles. The BCL appears to the CPU as a 
special peripheral device. It is special in two re- 
spects: the CPU initiates I/O automatically when it 
encounters ESC instructions, and the CPU uses re- 
served I/O addresses to communicate with the BCL. 
The BCL does not communicate directly with memo- 
ry. The CPU performs all memory access, transfer- 
ring input operands from the memory to the Math 
CoProcessor and transferring outputs from the Math 
CoProcessor to memory. 


The data interface and control unit latches the data 
and, subject to BCL control,·directs the data to the 


coder decodes the ESC instructions sent to it by the 
CPU and generates controls that direct the data flow 
in the FIFO. It also triggers the microinstruction se- 
quencer that controls execution of each instruction. 
If the ESC instruction is FINIT, FCLEX, FSTSW, 
FSTSW AX, FSTCW, FSETPM, or FRSTPM, the 
control unit executes it independently of the FPU 
and the sequencer. The data interface and control 
unit is the unit that generates the BUSY#, PEREa, 
and ERROR# signals that synchronize the Math 
CoProcessor activities with the CPU. 


The FPU executes all instructions that involve the 
register stack, including arithmetic, logical, transcen- 
dental, constant, and data transfer instructions. The 
data path in the FPU is 84 bits wide (68 significant 
bits, 15 exponent bits, and a sign bit) which allows 
internal operand transfers to be performed at very 
high speeds. 


The Power Management Unit (PMU) controls all in- 
ternal power savings circuits. When the Math Co- 
Processor is not executing an instruction, the PMU 
disables the internal clock to the FPU, Control Unit, 
and Data Interface within three clocks. The Bus 
Control Logic remains enabled to accept the next 
instruction. Upon decode of a valid Math CoProces- 
sor bus cycle, the PMU enables the internal clock to 
all circuits. No loss in performance occurs. 


4.4 
Bus Cycles 


All bus cycles are initiated by the CPU. The pins 
STEN, NPSH, 
NPS2, CMDO, and W/R# 
identify 
bus cycles for the.Math CoProcessor. Table 4-3 de- 
fines the types of Math CoProcessor bus cycles. 


STEN 
NPS1# 
NPS2 
CMDO# 
W/R# 
Bus Cycle Type 


0 
X 
X 
X 
X 
Math CoProcessor not selected and all outputs in floating state 
1 
1 
X 
X 
X 
Math CoProcessor not selected 
1 
X 
0 
X 
X 
Math CoProcessor not selected 
1 
0 
1 
0 
0 
CW or SW read from Math CoProcessor 
1 
0 
1 
0 
1 
Opcode write to Math CoProcessor 
1 
0 
1 
1 
0 
Data read from Math CoProcessor 
1 
0 
1 
1 
1 
Data'write to Math CoProcessor 
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4.4.1 
INTEL387 
SX MATH 
COPROCESSOR 
ADDRESSING 


The NPS1/I, NPS2, and CMDO signals allow the 
Math CoProcessor to identify which bus cycles are 
intended for the Math CoProcessor. The Math Co- 
Processor responds to 1/0 cycles when the I/O ad- 
dress is 8000F8h, 8000FCh, and 8000FEh (treated 
as 8000FCh). The Math CoProcessor responds to 
1/0 cycles when bit 23 of the 1/0 address is set. In 
other words, the Math CoProcessor acts as an 1/0 
device in a reserved 1/0 address space. 


Because A23 is used to select the Intel387 SX Math 
CoProcessor for data transfers, it is not possible for 
a program running on the CPU to address the Math 
CoProcessor with an 1/0 instruction. Only ESC in- 
structions cause the CPU to communicate with the 
Math CoProcessor. 


4.4.2 
CPU/MATH 
COPROCESSOR 
SYNCHRONIZATION 


The pins BUSY/I, PEREa, and ERROR/I are used 
for various aspects of synchronization between the 
CPU and the Math CoProcessor. 


BUSY/I is used to synchronize instruction transfer 
from the CPU to the Math CoProcessor. When the 
Math CoProcessor recognizes an ESC instruction it 
asserts BUSY/I. 
For most ESC instructions, the 
CPU waits for the Math CoProcessor to deassert 
BUSY/I before sending the new opcode. 


The Math CoProcessor uses the PEREa pin of the 
CPU to signal that the Math CoProcessor is ready 
for data transfer to or from its data FIFO. The Math 
CoProcessor does not directly access memory; rath- 
er, the CPU provides memory access services for 
the Math CoProcessor. (For this reason, memory ac- 
cess on behalf of the Math CoProcessor always 
obeys the protection rules applicable to the current 
CPU mode.) Once the CPU initiates an Math Co- 
Processor instruction that has operands, the CPU 
waits for PEREa signals that indicate when the Math 
CoProcessor is ready for operand transfer. Once all 
operands have been transferred (or if the instruction 
has no operands) the CPU continues program exe- 
cution while the Math CoProcessor executes the 
ESC instruction. 


In 8087/8087 systems, WAIT instructions may be 
required to achieve synchronization of both com- 
mands and operands. In the Intel386 Micropro- 
cessor and Intel387 Math CoProcessor systems, 
however, WAIT instructions are required only for op- 
erand synchronization; namely, after Math CoProc- 
essor 
stores 
to 
memory 
(except 
FSTSW and 
FSTCW) or load from memory. (In 80286/80287 
systems, WAIT is required before FlDENV 
and 
FRSTOR.) Used this way, WAIT ensures that the 
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value has already been written or read by the Math 
CoProcessor before the CPU reads or changes the 
value. 


Once it has started to execute a numerics instruction 
and has transferred and operands from the CPU, the 
Math CoProcessor can process the instruction in 
parallel with and independent of the host CPU. 
When the Math CoProcessor detects an exception, 
it asserts the ERROR/I signal, which causes a CPU 
interrupt. 


4.4.3 
SYNCHRONOUSI 
ASYNCHRONOUS 
MODES 


The internal logic of the Math CoProcessor can op- 
erate either directly from the CPU clock (synchro- 
nous mode) or from a separate clock (asynchronous 
mode). The two configurations are distinguished by 
the CKM pin. In either case, the bus control logic 
(BCl) of the Math CoProcessor is synchronized with 
the CPU clock. Use of asynchronous mode allows 
the BCl and the FPU section of the Math CoProces- 
sor to run at different speeds. In this case, the ratio 
of the frequency of NUMClK2 to the frequency of 
CPUClK2 must lie within the range 10:16 to 14:10. 
Use of synchronous mode eliminates one clock gen- 
erator from the board design. The internal Power 
Management Unit of the Intel387 SX Math CoProc- 
essor is disabled in asynchronous mode. 


In configurations where no ex1rawait states are re- 
quired, READYO/l can drive the CPU's READY/I 
input and the Math CoProcessors READY/I input. If 
wait states are required, this pin should be connect- 
ed to the logic that ORs all READY outputs from 
peripheral devices on the CPU bus. READYO/l is 
asserted by the Math CoProcessor only during 1/0 
cycles that select the Math CoProcessor. Refer to 
Section 5.0 Bus Operation for details. 


With respect to bus interface, the Intel387 SX Math 
CoProcessor is fully synchronous with the CPU. 
Both operate at the same rate because each gener- 
ates its internal ClK signal by dividing CPUClK2 by 
two. Furthermore, both internal ClK signals are in 
phase, because they are synchronized by the same 
RESETIN signal. 


A bus cycle for the Math CoProcessor starts when 
the CPU activates ADS/I and drives new values on 
the 
address and cycle 
definition lines 
(W/R/I, 
M/IO/l, 
etc.). The Math CoProcessor examines the 
address and cycle definition lines in the same ClK 
period during which ADS/I 
is activated. This ClK 
period is considered the first ClK of the bus cycle. 


During this first ClK period, the Math CoProcessor 
also examines the W/ R# input signal to determine 
whether the cycle is a read or a write cycle and ex- 
amines the CMDO# input to determine whether an 
opcode, operand, or control/status register transfer 
is to occur. 


The Intel387 SX Math CoProcessor supports both 
pipelined (Le., overlapped) and non-pipelined bus 
cycles. A non-pipelined cycle is one for which the 
CPU asserts ADS# when no other bus cycle is in 
progress. A pipelined bus cycle is one for which the 
CPU asserts ADS# and provides valid next address 
and control signals before the prior Math CoProces- 
sor cycle terminates. The CPU may do this as early 
as the second ClK period after asserting ADS# for 
the prior cycle. Pipelining increases the availability of 
the bus by at least one ClK period. The Intel387 SX 
Math CoProcessor supports pipelined bus cycles in 
order to optimize address pipelining by the CPU for 
memory cycles. 


Bus operation is described in terms of an abstract 
state machine. Figure 5-1 illustrates the states and 
state transitions for Math CoProcessor bus cycles: 
• TI is the idle state. This is the state of the bus 
logic after RESET, the state to which bus logic 
returns after every non-pipelined bus cycle, and 
the state to which bus logic returns after a series 
of pipelined cycles. 
• TRS is the READY# 
sensitive state. Different 
types of bus cycles may require a minimum of 
one or two successive TRSstates. The bus logic 
remains in TRSstate until READY# is sensed, at 
which point the bus cycle terminates. Any number 
of wait states may be implemented by delaying 
READY#, thereby causing additional successive 
TRSstates. 


• Tp is the first state for every pipelined bus cycle. 


This state is not used by non-pipelined cycles. 


Note that the bus logic tracks bus state regardless 
of the values on the chip/port 
select pins. The 


READYO# output of the Math CoProcessor indi- 
cates when a Math CoProcessor bus cycle may be 
terminated if no extra wait states are required. For all 
write 
cycles 
(except those 
for 
the 
instructions 
FLDENV and FRSTOR), READYO# is always as- 
serted during the first TRS state, regardless of the 
number of wait states. For all read cycles (and write 
cycles for FlDENV and FRSTOR), READY# is al- 
ways asserted in the second TRSstate, regardless 
of the number of wait states. These rules apply to 
both pipelined and non-pipelined cycles. Systems 
designers may use READYO# in one of the follow- 
ing ways: 
1. Connect it (directly or through logic that ORs 
READY# 
signals from other devices) to the 
READY# inputs of the CPU and Math CoProces- 
sor. 


2. Use it as one input to a wait-state generator. 


The following sections illustrate different types of 
Intel387 SX Math CoProcessor bus cycles. Because 
different instructions have different amounts of over- 
head before, between, and after operand transfer 
cycles, it is not possible to represent in a few dia- 
grams all of the combinations of successive operand 
transfer cycles. The following bus cycle diagrams 
show memory cycles between Math CoProcessor 
operand transfer cycles. Note however that, during 
FRSTOR, some consecutive accesses to the Math 
CoProcessor do not have intervening memory ac- 
cesses. For the timing relationship between operand 
transfer cycles and opcode write or other overhead 
activities, see Figure 7-7 "Other Parameters". 


5.1 
Non-Pipelined 
Bus Cycles 


Figure 5-2 illustrates bus activity for consecutive 
non-pipelined bus cycles. 


At the second clock of the bus cycle, the Math Co- 
Processor enters the TRSstate. During this state, it 
samples the READY# input and stays in this state 
as long as READY# is inactive. 


5.1.1 
WRITE CYCLE 


In write cycles, the Math CoProcessor drives the 
READYO# signal for one ClK 
period during the 
second ClK period of the cycle (Le., the first TRS 
state); therefore, the fastest write cycle takes two 
ClK periods (see cycle 2 of Figure 5-2). For the in- 
structions FlDENV 
and FRSTOR, however, the 
Math CoProcessor forces wait state by delaying the 
activation of READYO# to the second TRS state 
(not shown in Figure 5-2). 


The Math CoProcessor samples the 015-00 inputs 
into data latches at the falling edge of ClK as long 
as it stays in TRSstate. 
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CYCLE 
1 
CYCLE 
2 
CYCLE 
3 
CYCLE 
4 


NON-PIPELINED 
NON-PIPELINED 
NON-PIPELINED 
NON-PIPELINED 


MEMORY 
READ 
t.4oth CoProcessor 
Math 
CoProcessor 
READ 
MEMORY 
WRITE 


WRITE 


T1 
TRS 
T, 
TRS 
T' 
T1 
TRS 
TRS 
T, 
TRS 
T1 
, 


NPS2, 


NPS1"', 
CMD0" 
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Cycles 
1 & 2 represent 
part of the operand 
transfer 
cycle for instructions 
involving 
either 4-byte 
or B-byte operand 
loads. 


Cycles 
3 & 4 represent 
part of the operand 
transfer 
cycle for a store operation. 
'Cycles 
1 & 2 could 
repeat 
here or TI states 
for various 
non-operand 
transfer 
cycles 
and overhead. 


When READYII is asserted, the Math CoProcessor 
returns to the idle state. Simultaneously with the 
Math CoProcessor entering the idle state, the CPU 
may assert ADSII again, signaling the beginning of 
yet another cycle. 


At the rising edge of CLK in the second CLK period 
of the cycle (I.e., the first TRS state), the Math Co- 
Processor starts to drive the 015-00 outputs and 
continues to drive them as long as it stays in TRS 
state. 


At least one wait state must be inserted to ensure 
that the CPU latches the correct data. Because the 
Math CoProcessor starts driving the data bus only at 
the rising edge of CLK in the second clock period of 
the bus cycle, not enough time is left for the data 
signals to propagate and be latched by the CPU be- 
fore the next falling edge of CLK. Therefore, the 
Math CoProcessor does not drive the REAOYOI1 


signal until the third CLK period of the cycle. Thus, if 
the REAOYOI1 output drives the CPU's READYII 
input, one wait state is automatically inserted. 


Because one wait state is required for Math CoProc- 
essor reads, the minimum length of a Math CoProc- 
essor read cycle is three CLK periods, as cycle 3 of 
Figure 5-2 shows. 


When READYII is asserted, the Math CoProcessor 
returns to the idle state. Simultaneously with the 
Math CoProcessor's entering the idle state, the CPU 
may assert AOSI1 again, signaling the beginning of 
yet another cycle. The transition from TRSstate to 
idle state causes the Math CoProcessor to put the 
015-00 outputs into the floating state, allowing an- 
other device to drive the data bus. 


Because all the activities of the Math CoProcessor 
bus interface occur either during the TRS state or 


during the transitions 
to or from that state, the only 
difference 
between 
a pipelined 
and a non-pipe lined 
cycle 
is the manner 
of changing 
from 
one state to 
another. 
The exact 
activities 
during 
each 
state 
are 
detailed 
in the previous 
section 
"Non-pipelined 
Bus 
Cycles". 


When 
the CPU asserts 
ADS# 
before 
the end of a 
bus cycle, both ADS# 
and READY# 
are active dur- 
ing a TRS state. This condition 
causes the Math Co- 
Processor 
to change 
to a different 
state named Tp. 
One clock period after a T p state, the Math CoProc- 
essor 
always 
returns 
to the TRS state. 
In consecu- 
tive pipelined 
cycles, the Math CoProcessor 
bus log- 
ic uses only the TRS and Tp states. 


Figure 5-3 shows the fastest 
transitions 
into and out 
of the pipelined 
bus cycles. Cycle 1 in the figure rep- 
resents 
a non-pipelined 
cycle. 
(Non-pipelined 
write 
are always followed 
by another 
non-pipe lined cycle, 


because 
READY # 
is asserted 
before 
the 
earliest 
possible 
assertion 
of ADS# 
for the next cycle.) 


Figure 
5-4 shows 
pipelined 
write 
and 
read 
cycles 
with one additional 
TRS state 
beyond 
the minimum 
required. 
To 
delay 
the 
assertion 
of 
READY # 
re- 
quires external 
logic. 


When the Math CoProcessor 
bus logic is in the TRS 
state, 
it distinguishes 
between 
non-pipelined 
and 
• 
pipelined 
cycles according 
to the behavior 
of ADS # 
and 
READY # . 
In 
a 
non-pipelined 
cycle, 
only 
READY # is activated, 
and the transition 
is from the 
TRS state to the idle state. In a pipelined 
cycle, both 
READY # and ADS # are active, and the transition 
is 
first from TRS state to Tp state, then, after one clock 
period, 
back to TRS state. 


CYCLE 1 
CYCLE 2 
CYCLE 3 
CYCLE 4 
NON-PIPELINED 
PIPELINED 
PIPELINED 
NON-PIPELINED 
lolEloIORY READ 
lolath 
CoProcessor 
lolElolORY READ 
Math 
CoProcessor 
WRITE 
WRITE 


T, 
TRS 
TRS 
Tp 
TRS 
Tp 
TRS 
T1 
TRS 
T1 


NPS2, 
NPS1*, 
CIAD0* 
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Cycle 1-Cycle 4 represent the operand transfer cycle for an instruction involving a transfer of two 32-bit loads in total. 
The opcode write cycles and other overhead are not shown. 
Note that the next cycle will be a pipelined cycle if both READY'" 
and ADS'" 
are sampled active at the end of a TRS 
state of the current cycle. 


NPS2. 
NPS1#. 
CMDll# 


NOTE: 
1. Cycles 
between 
operand 
write to the Math CoProcessor 
and storing 
result. 
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5.4 
BUSY # and PEREQ Timing 
Relationship 


tion 
upon 
completion 
of the 
instruction. 
PEREa 
is 
activated 
within this interval. 
If ERROR # is ever as- 


serted, 
it would 
be asserted 
at least 
six CPUCLK2 
periods 
after the deactivation 
of PEREa 
and would 
be deasserted 
at least six CPUCLK2 
periods 
before 
the deactivation 
of BUSY #. 


Figure 
5-5 shows 
the 
activation 
of BUSY # at the 
beginning 
of instruction 
execution 
and its deactiva- 


NOTES: 
240225-11 
1. instruction 
dependent. 


2. PEREQ 
is an asynchronous 
input to the Intel386TM 
Microprocessor; 
it may not be asserted 
(instruction 
dependent). 


3. More operand 
transfers. 
4. Memory 
read (operand) 
cycle 
is not shown. 
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6.1 
Mechanical Specifications 


The Intel387 
SX Math CoProcessor 
is packaged 
in a 
68-pin 
PLCC package. 
Detailed 
mechanical 
specifi- 
cations 
can be found 
in the Intel Packaging 
Specifi- 
cation, 
Order 
Number 
231369. 


The Intel387 
SX Math CoProcessor 
is specified 
for 
operation 
when 
the case temperature 
is within 
the 
range 
of O·C to 100·C. The case temperature 
(Tc) 
may be measured 
in any environment 
to determine 
whether 
the Intel387 
SX Math CoProcessor 
is within 
the specified 
operating 
range. The case temperature 
should be measured 
at the center of the top surface. 


The ambient temperature 
(TA) is guaranteed 
as long 
as TC is not violated. 
The ambient 
temperature 
can 
be calculated 
from the °JC (thermal 
resistance 
con- 
stant 
from 
the transistor 
junction 
to the case) 
and 
°JA (thermal 
resistance 
from 
junction 
to ambient) 
from the following 
calculations: 


Junction 
Temperature 
TJ = Tc + P'OJC 


Ambient 
Temperature 
TA = TJ - 
P'OJA 


Case Temperature 
Tc = TA + P' (OJA - 
0Jc) 


Values for 0JA and 0JC are given in Table 6-1 for the 
68 pin PLCC package. 
0JC is given 
at various 
air- 
flows. 
Table 
6-2 shows 
the maximum 
TA allowable 
without 
exceeding 
TC at various 
airflows. 
Note that 
TA can be improved 
further 
by attaching 
a heat sink 
to the package. 
P is calculated 
by using the maxi- 
mum hot Icc and maximum 
VCC. 


0JA versus 
Airflow· 
ft/min 
(m/sec) 


Package 
°JC 
0 
200 
400 
600 
800 
1000 
(0) 
(1.01) 
(2.03) 
(3.04) 
(4.06) 
(5.07) 


68-Pin PLCC 
8 
30 
25 
20 
15.5 
13 
12 


TA ee) versus 
Airflow· 
ftlmln 
(m/sec) 


Package 
0 
200 
400 
600 
800 
1000 
(0) 
(1.01) 
(2.03) 
(3.04) 
(4.06) 
(5.07) 


68-Pin PLCC 
84.9 
88.3 
91.8 
94.8 
96.6 
97.2 


The following 
specifications 
represent 
the targets 
of the design 
effort. 
They are subject 
to change 
without 
notice. 
Contact 
your Intel representative 
to get the most up-to-date 
values. 


7.1 
Absolute Maximum Ratings· 


Case Temperature 
TC Under Bias ... O·C to + 100·C 


Storage Temperature 
- 65·C to + 150·C 


Voltage 
on Any Pin 
with Respect 
to Ground 
- 0.5 to Vcc + 0.5 


Power Dissipation 
0.8W 


NOTICE: This is a production data sheet. The specifi- 
cations are subject to change without notice. 


• WARNING: Stressing the device beyond the "Absolute 
Maximum 
Ratings" 
may 
cause 
permanent 
damage. 


These are stress ratings 
only. Operation 
beyond 
the 
"Operating 
Conditions" 
is not recommended 
and ex- 
tended 
exposure 
beyond 
the 
"Operating 
Conditions" 


may affect device reliability. 
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Symbol 
Parameter 
Min 
Max 
Units 
Test Conditions 


Vil 
Input LO Voltage 
-0.3 
+0.8 
V 
(Note 1) 


VIH 
Input HI Voltage 
2.0 
Vcc+0.3 
V 
(Note 1) 
VCl 
CPUCLK2 
and NUMCLK2 
Input LO Voltage 
-0.3 
+0.8 
V 


VCH 
CPUCLK2 
and NUMCLK2 
Input HI Voltage 
Vcc-0.8 
Vcc+0.8 
V 


VOL 
Output LO Voltage 
0.45 
V 
(Note 2) 


VOH 
Output HI Voltage 
2.4 
V 
(Note 3) 


VOH 
Output HI Voltage 
Vcc-0.8 
V 
(Note 4) 


Icc 
Power Supply Current 
Dynamic 
Mode 
Freq. = 33 MHz(5) 
150 
mA 
Icc typo = 135 mA 
Freq. = 25 MHz(5) 
150 
mA 
Icc typo = 130 mA 
Freq. = 20 MHz(5) 
125 
mA 
Icc typo = 110 mA 
Freq. = 16 MHz(5) 
100 
mA 
Icc typo = 90 mA 
Freq. = 
1 MHz(5) 
20 
mA 
Icc typo = 5 mA 
Idle Mode(6) 
7 
mA 
Icc typo = 4 mA 


III 
Input Leakage Current 
±15 
""A 
OV:;; VIN:;; 
Vcc 
ILO 
I/O Leakage Current 
±15 
""A 
0,45V 
:;; Vo :;; Vcc 


CIN 
Input Capacitance 
7 
10 
pF 
fc = 1 MHz 
Co 
I/O Capacitance 
7 
12 
pF 
fc = 1 MHz 
CClK 
Clock Capacitance 
7 
20 
pF 
fc = 1 MHz 


NOTES: 
1. This parameter is for all inputs, excluding the clock inputs. 
2. This parameter is measured at IOLas follows: 


Data = 4.0 mA 
READYOil', ERRORii', BUSYiI', PEREa = 25 mA 
3. This parameter is measured at IOHas follows: 


Data = 1.0 mA 
READYOil', ERRORii', BUSYiI', PEREa = 0.6 mA 
4. This parameter is measured at IOHas follows: 


Data = 0.2 mA 
READYOil', ERRORii', BUSY# PEREa = 0.12 mA 
5. Synchronous Clock Mode (CKM = 1). Ice is measured at steady state, maximum capacitive loading on the outputs. and 
worst-case D.C. level at the inputs. 
6. Intel387 SX Math CoProcessor Internal Idle Mode. Synchronous clock mode, clock and control inputs are active but the 
Math CoProcessor is not executing an instruction. Outputs driving CMOS inputs. 
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Table 7·2a. Timing Requirements 
of the Bus Interface 
Unit 


Tc = O"C to + 100°C, Vcc 
= 5V ± 10% (All measurements 
made at 1.5V unless otherwise 
specified) 


16 MHz- 
33 MHz 
25 MHz 
Test 
Refer to 
Pin 
Symbol 
Parameter 
Conditions 
Figure 
Mln 
Max 
Mln 
Max 
(ns) 
(ns) 
(ns) 
(ns) 


CPUCLK2 
t1 
Penod 
20 
DC 
15 
DC 
2.0V 
7.2 
CPUCLK2 
t2a 
High Time 
6 
6.25 
2.0V 
CPUCLK2 
t2b 
High Time 
3 
4.5 
VCC-0.8V 
CPUCLK2 
t3a 
Low Time 
6 
6.25 
2.0V 
CPUCLK2 
t3b 
Low Time 
4 
4.5 
0.8V 
CPUCLK2 
t4 
Fall Time 
7 
4 
From Vcc - 0.8V to 0.8V 
CPUCLK2 
t5 
/ 
Rise Time 
7 
4 
From 0.8V to Vcc-0.8V 


REAOYO# 
t7a 
Out Delay 
4 
25 
4 
17 
CL = 50 pF 
7.3 
PEREQ 
t7b 
Out Delay 
4 
23 
4 
21 
CL = 50 pF 
BUSY# 
t7c 
Out Delay 
4 
23 
4 
21 
CL = 50 pF 
ERROR# 
t7d 
Out Delay 
4 
23 
4 
23 
CL = 50 pF 


015-00 
t8 
Out Delay 
1 
45 
0 
37 
CL = 50 pF 
7.4 


015-00 
t10 
Setup Time 
11 
8 
015-00 
t11 
Hold Time 
11 
8 
015-00 
t12* 
Float Time 
6 
24 
6 
19 


REAOYO# 
t13a* 
Float Time 
1 
40 
1 
30 
7.6 
PEREQ 
t13b* 
Float Time 
1 
40 
1 
30 
BUSY# 
t13c* 
Float Time 
1 
40 
1 
30 
ERROR# 
t13d* 
Float Time 
1 
40 
1 
30 


AOS# 
t14a 
Setup Time 
15 
13 
7.4 


AOS# 
t15a 
tioldTime 
4 
4 
W/R# 
t14b 
Setup Time 
15 
13 
W/R# 
t15b 
Hold Time 
4 
4 


REAOY# 
t16a 
Setup Time 
9 
7 
7.4 


REAOY# 
t17a 
Hold Time 
4 
4 
CMOO# 
t16b 
Setup Time 
16 
13 
CMOO# 
t17b 
Hold Time 
2 
2 
NPS1#,NPS2 
t16c 
Setup Time 
16 
13 
NPS1#,NPS2 
t17e 
Hold Time 
2 
2 
STEN 
t16d 
Setup Time 
15 
13 
STEN 
t17d 
Hold Time 
2 
2 


RESETIN 
t18 
Setup Time 
8 
5 
7.5 
RESETIN 
t19 
Hold Time 
3 
2 


NOTE: 
'Float 
condition 
occurs 
when 
maximum 
output 
current 
becomes 
less than 
ILO in magnitude. 
Float delay 
is not tested 


16 MHz- 
33 MHz 
25 MHz 
Test 
Refer 
to 
Pin 
Symbol 
Parameter 
Conditions 
Figure 
Mln 
Max 
Min 
Max 
(ns) 
(ns) 
(ns) 
(ns) 


NUMCLK2 
t1 
Period 
20 
500 
15 
500 
2.0V 
7.2 
NUMCLK2 
t2a 
High Time 
6 
6.25 
2.0V 
NUMCLK2 
t2b 
High Time 
3 
4.5 
Vcc-0.8V 
NUMCLK2 
t3a 
Low Time 
6 
6.25 
2.0V 
NUMCLK2 
t3b 
Low Time 
4 
4.5 
0.8V 
NUMCLK2 
t4 
Fall Time 
7 
6 
From Vcc-0.8V 
to 0.8V 
NUMCLK2 
t5 
Rise Time 
7 
6 
From 0.8V to VCC-0.8V 


NUMCLK2/ 
Ratio 
10/16 
14/10 
10/16 
14/10 
CPUCLK2 


NOTE: 
If not used (CKM = 1) tie NUMCLK2Iow. 


Pin 
Symbol 
Parameter 
Mln 
Max 
Units 


RESETIN 
t30 
Duration 
40 
NUMCLK2 


RESETIN 
t31 
RESETIN 
Inactive to 1st 
50 
NUMCLK2 
Opcode Write 


BUSY# 
t32 
Duration 
6 
CPUCLK2 


BUSY #. ERROR # 
t33 
ERROR # (In)Active 
to 
6 
CPUCLK2 
BUSY # Inactive 


PEREQ. ERROR # 
t34 
PEREQ Inactive to 
6 
CPUCLK2 
ERROR # Active 


READY#,BUSY# 
t35 
READY # Active to BUSY # 
0 
4 
CPUCLK2 
Active 


READY# 
t36 
Minimum Time from 
4 
CPUCLK2 
Opcode 
Write to 
Opcode/Operand 
Write 


READY # 
t37 
Minimum Time from 
4 
CPUCLK2 
Operand 
Write to Operand 
Write 


> 
III 


@) 
NOW+8 


Vi' 
NOW+6 
..5- 


>- 
NOW+4 
.. 
.jw0 
NOW+2 
•... 
::> 
0- 
NOW 
•... 
::>0 
NOW-2 
. 
.j.. 
NO"-4 
0ii: 
>- 
NOW-6 
•... 


25 
50 
75 
100 
125 
150 


LOAD CAPACITANCE, G. (pF) 


NOTE: 
·Typical 
part under worst-case 
conditions. 


30 
Vi' 
..5- 


25 
w 
::I 
>=~ 
20 
w> 
<nO 
~.. 
•... I 
15 
::>0->....• 
::> 
• 
10 
o,e. 
.j.. 
5 
0 
ii: 
>-•... 


o 
o 
50 
100 
150 


LOAD CAPACITANCE. G. (pF) 


240225-14 


50 
100 
150 


LOAD CAPACITANCE. G. (pF) 


240225-13 
NOTE: 
·Typical 
part under worst-case 
conditions. 


150 


<- 
-5- 
100 


u 
..Y 


::I 
::> 
::Ix 
50 
.. 
::I 


10 
15 


FREQUENCY ("Hz) 


r'~7 r:::-~ 


1.~ 
5= 3.0V 


INPUTS 
----- 
••••.• 
OV 


(eLK) 
(PH2) 
\ 
••__ 
(_P_H_l) 
/ 
,'"" 


NPS 1#, NPS2, 


STEN, 
Ct.lDO# 


(CLK)\ 
(PH1) 
/ 
(PH2) 
\ 
(PH1) 
/ 
(PH2) 
~ 


,m, 
/ 
,,,' ~ "" 
\ 
,,,' ~ ,"', F 


r --j 
~8 
"'SS,, 


NOTE: 
The second 
internal 
processor 
phase following 
RESET 
high to low transition 
is PH2. 
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,ST 
OPCOOE 


WRITE 


1ST O~ERAND 
2ND 
OPERAND 
WRITE 
WRITE 
(NOTE') 


RESETf 


'In NUMCLK2's 


"or 
last operand 


NOTE: 
1. Memory 
read (operand) 
cycle 
is not shown. 


8.0 
INTEL387 
SX MATH 
COPROCESSOR 
INSTRUCTION 
SET 


Instructions for the Intel387 SX Math CoProcessor 
assume one of the five forms shown in Table 8-1. In 
all cases, instructions are at least two bytes long and 
begin with the bit pattern 11011B, which identifies 
the ESCAPE class of instruction. Instructions that 
refer to memory operands specify addresses using 
the CPU's addressing modes. 


MOD (Mode field) and RIM (Register/Memory spec- 
ifier) have the same interpretation as the corre- 
sponding fields of CPU instructions (refer to Pro- 
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grammer's Reference Manual for the CPU). SIB 
(Scale Index Base) byte and DISP (displacement) 
are optionally present in instructions that have MOD 
and RIM fields. Their presence depends on the val- 
ues of MOD and RIM, as for instructions of the CPU. 


The instruction summaries that follow in Table 8-2 
assume that the instruction has been prefetched, 
decoded, and is ready for eXt;cution;that bus cycles 
do not require wait states; that there are no local bus 
HOLD requests delaying processor access to the 
bus; and that no exceptions are detected during in- 
struction execution. If the instruction has MOD and 
RIM fields that call for both base and index regis- 
ters, add one clock. 


Instruction 
Optional 


First Byte 
Second 
Byte 
Fields 


11011 
OPA 
1 
MOD 
1 
I 
OPB 
RIM 
SIB 
I 
DISP 


11011 
MF 
OPA 
MOD 
OPB" 
RIM 
SIB 
I 
DISP 


11011 
d 
P 
OPA 
1 
1 
OPB" 
ST(i) 


11011 
0 
0 
1 
1 
1 
1 I 
OP 


11011 
0 
1 
1 
1 
1 
1 
I 
OP 


OP 
~ 
Instruction 
opcode. 
possibly 
split 
into two fields 
OPA and OPB 
MF = Memory 
Format 
00 • 32·bit 
real 
01 - 32-bit 
integer 
10 - 64-bit 
real 
11 - 16·bi! 
integer 
d ~ 
Destination 
o - Destination 
is ST(O) 
1 - Destination 
is STeil 
R XOR 
d = 0 - Destination 
(op) Source 
R XOR 
d = 1 • Source 
(op) Destination 


·In 
FSUB 
and FDIV. 
the low·order 
bit of OPB 
is the R (reversed) 
bit 
P = POP 
o - Do not pop stack 
1 - Pop stack 
after 
operation 
ESe = 11011 
ST(i) = Register 
stack 
element 
i 
000 = Stack 
top 
001 
~ 
Second 
stack 
element 


I 
Encoding 
r 
Clock Count Range 
InstrucUon 
I 
Byte 0 
I 
Byte 1 
I 
Optional 
I 
32·Blt I 
32·Blt I 
64-BIt I 
16-Blt 
Bytes 2-6 
Real 
Integer 
Real 
Integer 
DATA TRANSFER 


FLD ~ Load" 
Integer/real memory to ST(O) 
I 
ESCMFl 
I MOD 000 R/M I 
SIB/DISP 
I 
11-20 
28-44 
20-27 
42-53 


Long integer memory to ST(O) 
I 
ESC111 
I MOD 101 R/M I 
SIB/DISP 
I 
30-58 


Extended real memory to ST(O) 
I 
ESC011 
I MOD 101 R/M I 
SIB/DISP 
I 
16-47 


BCD memory to ST(O) 
I 
ESC111 
I MOD100R/M 
I 
SIB/DISP 
I 
49-101 


ST(i) to ST(O) 
I 
ESC001 
I 
11000 ST(i) 
I 
7-12 


FsT ~ Store 


ST(O)to integer/real memory 
I 
ESCMF1 
I MOD010R/M 
I 
SIB/DISP 
I 
27-45 
59-78 
59 
58-76 


ST(O)to ST(i) 
I 
ESC 101 
I 
11010ST(i) 
I 
7-11 


FsTP = Store and Pop 


ST(O)to integer/real memory 
I 
ESCMF1 
I MOD011 R/M I 
SIB/DISP 
I 
27-45 
59-78 
59 
58-76 


ST(O)to long integer memory 
I 
ESC111 
I MOD111 R/M I 
SIB/DISP 
I 
64-86 


ST(O)io extended real memory 
I 
ESC011 
I MOD 111 R/M I 
SIB/DISP 
I 
50-56 


ST(O)to BCD memory 
I 
ESC111 
I MOD 110R/M 
I 
SIB/DISP 
I 
116-194 


ST(O)to ST(i) 
I 
ESC101 
I 
11011 ST(i) 
I 
7-11 


FXCH = Exchange 


ST(i) and ST(O) 
I 
ESC001 
I 
11001 ST(i) 
I 
10-17 


COMPARISON 


FCOM = Compare 


Integer/real memory to ST(O) 
I 
ESC MFO 
I MOD010R/M 
I 
SIB/DISP 
I 
15-27 
36-54 
18-31 
39-62 


ST(i) to ST(O) 
I 
ESCOOO 
I 
11010ST(i) 
I 
13-21 


FCOMP = Compare and pop 


Integer/real memory to ST(O) 
I 
ESCMFO 
I MOD011 R/M I 
SIB/DISP 
I 
15-27 
36-54 
18-31 
39-62 


ST(i) to ST(O) 
I 
ESCOOO 
I 
11011 ST(i) 
I 
13-21 


FCOMPP = Compare and pop twice 


ST(1) to ST(O) 
I 
ESC110 
I 
11011001 
I 
13-21 


FTST = Test ST(O) 
I 
ESC001 
I 
11100100 
I 
17-25 


FUCOM - 
Unordered compare 
I 
ESC10l 
I 
lll00sT(I) 
I 
13-21 


FUCOMP - 
Unordered compare 


and pop 
I 
ESC10l 
I 
11101 STm 
I 
13-21 


FUCOMPP = Unordered compare 
and pop twice 
I 
ESC010 
I 
11101001 
I 
13-21 


FXAM = Examine ST(O) 
I 
ESC001 
I 
11100101 
I 
24-37 


NOTE: 
a. When 
loading 
single 
or double 
precision 
zero from 
memory, 
add 5 clocks. 
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ARITHMETIC 


FADD 
~ Add 


ST(i) and ST(O) 


FSUB = Subtract 


ST(i) to ST(O) 


FMUL = Multiply 


Integer/real memory with ST(O) 


STeiland ST(O) 


FDIV = Divide 


Integer/real memory with ST(O) 


STeiland ST(O) 


FSQRT I ~ Square root 


FRNDINT 
= Round ST(O)to integer 


FXTRACT 
~ Extract components 
ofST(O) 


FABS = Absolute value of ST(O) 


FCHS 
~ Change sign of ST(O) 


TRANSCENDENTAL 


FCOSk - 
Cosine of ST(O) 


FPTANk = Partial tangent of ST(O) 


FPATAN 
= Partial arctangent of ST(O) 


FSlNk = Sine of ST(O) 


FSJNCOSk= Sine and cosine of ST(O) 


F2XM1' 
= 
2ST(O) 
- 
1 


ESCMFO 
MOD 000 R/M 
SIB/DISP 
14-31 
36-58 
19-38 
38-64 


ESCdPO 
11000 ST(i) 
SIB/DISP 
12-26b 


ESCMFO 
MOD10RR/M 
I 
SIB/DISP 
14-31 
36-58 
19-38 
38-64C 


ESCd P 0 
1110 R R/M 
12-26d 


ESCMFO 
MOD 001 R/M 
SIB/DISP 
21-33 
45-73 
27-57 
46-74 


ESCdPO 
11001R/M 
17-50· 


ESCMFO 
MODll 
RR/M I 
SIB/DISP 
79-87 
103-1161 
85-95 
105-124Q 


ESCdPO 
1111 RR/M 
77-80h 


ESCool 
11111010 
97-111 


ESCool 
11111101 
44-82 


ESC001 
11111000 
56-140 


ESCOOl 
11110101 
81-168 


ESCool 
11111100 
41-62 


ESC001 
11110100 
42-63 


ESCool 
11100001 
14-21 


ESCool 
11100000 
17-24 


ESCool 


ESC001 


ESC001 


ESCool 


ESCool 


ESC001 


11111111 


11110010 


122-880 


162-430i 


11110011 


11111110 


11111011 


250-420 


121-880 


150-650 


167-410 


FYL2xm 
~ ST(1) • 1092ST(0) 
ESC001 
1111 0001 


FYL2XP1" 
= ST(1l • 1092[ST(0)+ 1.0] 
ESC001 
1111 1001 


Shaded 
areas 
indicate 
instructions 
not available 
in 8087180287. 


99-436 


210-447 


NOTES: 
b. Add 3 clocks 
to the range when 
d = 1. 


c. Add 1 clock 
to each range when 
R = 1. 


d. Add 3 clocks 
to the range when 
d = O. 


e. typical 
= 52 (When 
d = 0, 46-54, 
typical = 49). 
f. Add 1 clock 
to the range when 
R = 1. 


g. 135-141 
when 
R = 1 
h 
Add 3 clocks 
to the range when 
d = 1 


i. 
0 ~ STeOl ~ + 00. 


j. These 
timings 
hold for operands 
in the range Ixl < 
1T. For operands 
not in this range, 
up to 76 additional 
clocks 
may be 
needed 
to reduce 
the operand. 


k. 0 ~ STeOl < 263. 
I -10 
~ snOl 
s 1 O. 


m 
0 "ST(Ol 
< 00. -00 
< ST(l) 
< 
+00. 
nO 
"IST(O)I 
< 
[2-SQRT(2)]/2, 
-00 
<ST(l) 
< 
+00. 


1-458 
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Instruction 


CONSTANTS 


FLDZ 
~ 
Load + 0.0 to ST(O) 
ESCool 
11101110 


FLD1 
~ 
Load + 1.0 to ST(O) 
ESCool 
11101000 


FLDPI = Load 
1r to ST(O) 
ESC 001 
11101011 


FLDL2T 
= Load 1092(10) to ST(O) 
ESC 001 
11101001 


FLDL2E 
~ 
Load 1092(e) to ST(O) 
ESC 001 
11101010 


FLDLG2 
~ 
Load 109'0(2) 
to ST(O) 
ESCool 
11101100 


FLDLN2 
~ 
Load 109.(2) to ST(O) 
ESC 001 
11101101 


PROCESSOR 
CONTROL 


FINIT 
~ 
Initialize 
Math CoProcessor 
ESCOll 
11100011 


FLDCW 
~ 
Load control word from memory 


FSTCW = Store control word to memory 


FSTSW = Store status word to memory 
ESC101 
MODlll 
RIM 


FSTSW 
AX 
~ Store 
status 
word to AX 
ESC111 
11100000 


FCLEX 
~ Clear exceptions 
ESC011 
11100010 


FSTENV 
= Store environment 
ESC 001 
MODll0R/M 


FLDENV 
~ 
Load environment 
ESCOOl 
MOD 100 RIM 


FSA VE ~ 
Save state 
ESC101 
MODll0R/M 


FRSTOR 
~ 
Restore 
state 
ESC 101 
MOD100R/M 


FINCSTP 
= Increment 
stack 
pointer 
ESCOOl 
11110111 


FDECSTP 
~ 
Decrement 
stack 
pointer 
ESCOOl 
11110110 


FFREE = Free ST(i) 
ESC10l 
11000 
ST(i) 


FNOP 
~ 
No operations 
ESCOOl 
11010000 


16-81t 
Integer 


10-17 


15-22 


26-36 


26-36 


26-36 


25-35 


26-38 


33 


19 


15 


15 


13 


11 


117-118 


85 


402-403 


415 


21 


22 


18 


12 


SIB/DISP 


SIB/DISP 


SIB/DISP 


SIB/DISP 
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APPENDIX A 
INTEl387 SX MATH COPROCESSOR 
COMPATIBiliTY 


This section 
summarizes 
the differences 
between 
the Intel387 
SX Math CoProcessor 
and the 080287 Math 
CoProcessor. 
Any migration 
from the 8087 directly 
to the Intel387 
SX Math CoProcessor 
must also take into 
account 
the differences 
between 
the 8087 and the 80287 
Math CoProcessor 
as listed in Appendix 
B. 


Many 
changes 
have 
been 
designed 
into the 
Intel387 
SX Math 
CoProcessor 
to directly 
support 
the 
IEEE 
standard 
in hardware. 
These 
changes 
result in increased 
performance 
by eliminating 
the need for software 
that supports 
the standard. 


Operands 
for FSCALE 
and FPATAN 
are no longer restricted 
in range (except 
for ± (0); F2XM1 
and FPTAN 
accept 
a wider range of operands. 


Software 
cannot 
change 
entries 
of the tag word to values 
(other than empty) that differ from actual 
register 
contents. 


After 
reset, 
FIN IT, and incomplete 
FPREM, 
the Intel387 
SX Math CoProcessor 
resets 
to zero the condition 
code bits C3-CO of the status word. 


In conformance 
with the IEEE standard, 
the Intel387 
SX Math CoProcessor 
does not support 
the special data 
formats 
pseudo-zero, 
pseudo-NaN, 
pseudo-infinity, 
and unnormal. 


The denormal 
exception 
has a different 
purpose on the Intel387 SX Math CoProcessor. 
A system that uses the 
denormal 
exception 
handler 
solely 
to normalize 
the denormal 
operands, 
would 
better 
mask the denormal 
exception 
on the Intel387 SX Math CoProcessor. 
The Intel387 SX Math CoProcessor 
automatically 
normalizes 
denormal 
operands 
when the denormal 
exception 
is masked. 


A number of differences exist due to changes in the IEEE standard and to functional improvements to the 
architecture of the Intel387 SX Math CoProcessor: 


1. When the overflow or underflow exception is masked, the Intel387 SX Math CoProcessor differs from the 
80287 in rounding when overflow or underflow occurs. The Intel387 SX Math CoProcessor produces 
results that are consistent with the rounding mode. 


2. When the underflow exception is masked, the Intel387 SX Math CoProcessor sets its underflow flag only if 
there is also a loss of accuracy during denormalization. 
3. Fewer invalid-operations exceptions due to denormal operand, because the instructions FSQRT, FDIV, 
FPREM, and conversions to BCD or to integer normalize denormal operands before proceeding. 


4. The FSQRT, FBSTP, and FPREM instructions may cause underflow, because they support denormal 
operands. 
5. The denormal exception can occur during the transcendental instruction and the FXTRACT instruction. 
6. The denormal exception no longer takes precedence over all other exceptions. 
7. When the denormal exception is masked, the Intel387 SX Math CoProcessor automatically normalizes 
denormal operands. The 8087/80287 performs unnormal arithmetic, which might produce an unnormal 
result. 


8. When the operand is zero, the FXTRACT instruction reports a zero-divide exception and leaves - 
00 in 
ST(1). 


9. The status word has a new bit (SF) that signals when invalid-operation exceptions are due to stack 
underflow or overflow. 


10. FLD extended 
precision 
no longer reports denormal exceptions, because the instruction is not numeric. 


11. FLD single/double 
precision 
when the operand is denormal converts the number to extended precision 
and signals the denormal operand exception. When loading a signaling NaN, FLD single/double 
precision 
signals an invalid-operation exception. 


12. The Intel387 SX Math CoProcessor only generates quiet NaNs (as on the 80287); however, the Intel387 
SX Math CoProcessor distinguishes between quiet NaNs and signaling NaNs. Signaling NaNs trigger 
exceptions when they are used as operands; quiet NaNs do not (except for FCOM, FIST, and FBSTP 
which also raise IE for quiet NaNs). 


13. When stack overflow occurs during FPTAN and overflow is masked, both ST(O)and ST(1) contain quiet 
NaNs. The 80287/8087 leaves the original operand in ST(1) intact. 


14. When the scaling factor is ± 00, the FSCALE instruction behaves as follows: 


• FSCALE (0, (0) generates the invalid operation exception. 
• FSCALE (finite, - (0) generates zero with the same sign as the scaled operand. 
• FSCALE (finite, + (0) generates 00 with the same sign as the scaled operand. 
The 8087/80287 returns zero in the first case and raises the invalid-operation exception in the other 
cases. 
15. The Intel387 SX Math CoProcessor returns signed infinity/zero as the unmasked response to massive 
overflow/underflow. The 8087 and 80287 support a limited range for the scaling factor; within this range 
either massive overflow/underflow do not occur or undefined results are produced. 


APPENDIX 
B 
COMPATIBILITY 
BETWEEN THE 80287 
AND 8087 MATH COPROCESSOR 


The 80286/80287 operating 
in Real Address 
mode will execute 808618087 programs 
without 
major modifica- 
tion. However, 
because 
of differences 
in the handling 
of numeric exceptions 
by the 80287 Math CoProcessor 
and the 8087 Math CoProcessor, 
exception 
handling routines may need to be changed. 
This appendix 
summa- 


rizes the differences 
between 
the 80287 
Math CoProcessor 
and the 8087 Math CoProcessor, 
and provides 
details 
showing 
how 8087/8087 programs 
can be ported to the 80286/80287. 


1. The Math 
CoProcessor 
signals 
exceptions 
through 
a dedicated 
ERROR # line to the 80286. 
The Math 
CoProcessor 
error signal does not pass through 
an interrupt 
controller 
(the 8087 INT signal does). There- 
fore, any interrupt 
controller 
oriented 
instructions 
in numeric exception 
handlers 
for the 8086/8087 should 
be deleted. 


2. The 8087 instructions 
FENI and FDISI perform 
no useful function 
in the 80287. If the 80287 encounters 
one 
of these 
opcodes 
in its instruction 
stream, 
the instruction 
will effectively 
be ignored; 
none of the 80287 
internal 
states will be updated. 
While 8086/8087 programs 
containing 
the instruction 
may be executed 
on 
the 80286/80287, 
it is unlikely 
that the exception 
handling 
routines 
containing 
these 
instructions 
will be 
completely 
portable 
to the 80287. 


3. Interrupt 
vector 
16 must point to the numeric 
exception 
handling 
routine. 


4. The ESC instruction 
address 
saved in the 80287 includes any leading prefixes 
before the ESC opcode. 
The 
corresponding 
address 
saved in the 8087 does not include 
leading prefixes. 


5. In Protected 
Address 
mode, the format 
of the 80287's 
saved instruction 
and address 
pointers 
is different 
than for the 8087. The instruction 
opcode 
is not saved in Protected 
mode; exception 
handlers 
will have to 
retrieve 
the opcode 
from memory 
if needed. 


6. Interrupt 
7 will occur 
in the 80286 when executing 
ESC instructions 
with either TS (task switched) 
or EM 
(emulation) 
of the 80286 MSW set (TS = 1 or EM = 1). It TS is set, then a WAIT instruction 
will also cause 
interrupt 
7. An exception 
handler 
should 
be included 
in 80286/80287 code to handle 
these situations. 


7. Interrupt 
9 will occur if the second or subsequent 
words of a floating 
point operand 
fall outside a segment's 
size. Interrupt 
13 will occur if the starting 
address 
of a numeric operand 
falls outside 
a segment's 
size. An 
exception 
handler 
should 
be included 
in 80286/80287 code to report these programming 
errors. 


8. 
Except for the processor 
control 
instructions, 
all of the 80287 
numeric 
instructions 
are automatically 
syn- 


chronized 
by the 80286 CPU; the 80286 CPU automatically 
tests the BUSY # line from the 80287 to ensure 
that the 80287 has completed 
its previous 
instruction 
before executing 
the next ESC instruction. 
No explicit 


WAIT 
instructions 
are required 
to assure 
this synchronization. 
For the 8087 
used witth 
8086 
and 8088 
processors, 
explicit 
WAITs 
are required 
before 
each 
numeric 
instruction 
to ensure 
synchronization. 
Al- 


though 808618087 programs 
having explicit 
WAIT instructions 
will execute 
perfectly 
on the 80286/80287 
without 
reassembly, 
these WAIT instructions 
are unnecessary. 


9. Since the 80287 does not require WAIT instructions 
before each numeric 
instruction, 
the ASM286 
assem- 
bler does not automatically 
generate 
these WAIT instuctions. 
The ASM86 
assembler, 
however, 
automati- 


cally precedes 
every ESC instruction 
with a WAIT instruction. 
Although 
numeric 
routines 
generated 
using 
the ASM86 
assembler 
will generally 
execute 
correctly 
on the 80286/80287, 
reassembly 
using ASM286 
may result in a more compact 
code image. 


The 
processor 
control 
instructions 
for the 80287 
may be coded 
using either 
a WAIT 
or No-WAIT 
form 
of 
mnemonic. 
The WAIT forms of these instructions 
cause ASM286 
to precede 
the ESC instructions 
with a CPU 
WAIT instruction, 
in the identical 
manner 
as does ASM86. 


82380 
HIGH PERFORMANCE 32-BIT DMA CONTROLLER WITH 
INTEGRATED SYSTEM SUPPORT PERIPHERALS 


• 
High Performance 
32·Blt DMA 
Controller 
- 
50 MBytes/sec 
Maximum 
Data 
Transfer 
Rate at 25 MHz 
- 
8 Independently 
Programmable 
Channels 


• 
20·Source 
Interrupt 
Controller 
-Individually 
Programmable 
Interrupt 
Vectors 
- 
15 External,S 
Internal 
Interrupts 
- 
82C59A 
Superset 


• 
Four 16·Blt Programmable 
Interval 
Timers 
- 
82C54 Compatible 


• 
Programmable 
Walt State Generator 
- 
0 to 15 Walt States 
Plpelined 
-1 
to 16 Walt States 
Non·Pipelined 


• 
DRAM Refresh 
Controller 


• 
80386 Shutdown 
Detect 
and Reset 
Control 
- 
Software/Hardware 
Reset 


• 
High Speed CHMOS 
III Technology 


• 
132·Pin -PGA Package 
(See Packaging 
Handbook 
Order 
240800-001, 
Package 
Type 
A) 


• 
Optimized 
for use with the 80386 
Microprocessor 
- 
Resides 
on Local Bus for Maximum 
Bus Bandwidth 
- 
16, 20, and 25 MHz Clock 


The 82380 is a multi-function support peripheral that integrates system functions necessary in an 80386 
environment. It has eight channels of high performance 32-bit DMA with the most efficient transfer rates 
possible on the 80386 bus. System support peripherals integrated into the 82380 provide Interrupt Control, 
Timers, Wait State generation, DRAM Refresh Control, and System Reset logic. 


The 82380's DMA Controller can transfer data between devices of different data path widths using a single 
channel. Each DMA channel operates independently in any of several modes.-Each channel has a temporary 
data storage register for handling non-aligned data without the need for external alignment logic. 


32-BIT 
8-CH"'NNEL 
0••••• 
CONTROLLER 
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The 82380 contains several independent functional 
modules. The following is a brief discussion of the 
components and features of the 82380. Each mod- 
ule has a corresponding detailed section later in this 
data sheet. Those sections should be.referred to for 
design and programming information. 


The 82380 is comprised of several computer system 
functions that are normally found in separate LSI 
and VLSI components. These include: a high-per- 
formance, eight-channel, 32-bit Direct Memory Ac- 
cess Controller; a 20-level Programmable Interrupt 
Controller which is a superset of the 82C59A; four 
16-bit Programmable Interval Timers which are func- 
tionally equivalent to the 82C54 timers; a DRAM Re- 
fresh Controller; a Programmable Wait State Gener- 
ator; and system reset logic. The interface to the 
82380 is optimized for high-performance operation 
with the 80386 microprocessor. 


The 82380 operates directly on the 80386 bus. In 
the Slave mode, it monitors the state of the proces- 
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sor at all times and acts or idles according to the 
commands of the host. It monitors the address pipe- 
line status and generates the programmed number 
of wait states for the device being accessed. The 
82380 also has logic to reset the 80386 via hard- 
ware or software reset requests and processor shut- 
down status. 


After a system reset, the 82380 is in the Slave 
mode. It appears to the system as an I/O device. It 
becomes a bus master when it is performing DMA 
transfers. 


To maintain compatibility with existing software, the 
registers within the 82380 are accessed as bytes. If 
the internal logic of the 82380 requires a delay be- 
fore another access by the processor, wait states 
are automatically inserted into the access cycle. 
This allows the programmer to write initialization rou- 
tines, etc. without regard to hardware recovery 
times. 


Figure 1-1 shows the basic architectural compo- 
nents of the 82380. The following sections briefly 
discuss the architecture and function of each of the 
distinct sections of the 82380. 


HOLD 
DREQD 
HOLDA 
• 
CLK2 
• 


32- 
BIT 
• 


READYH 
8-CHANNEL 
DREQ7 


READYOH 
Dt.4A 
EDACKD 
WSCO 
CONTROLLER 
EDACKI 
WSCl 
EDACK2 


EOP" 
TOUT1/REF'H 


151RQH 


INT 


TOUT21 


TOUT31 


The 82380 contains a high-performance, 8-channel, 
32-bit DMA controller. It is capable of transferring 
any combination of bytes, words, and double words. 
The addresses of both source and distination can be 
independently incremented, decremented or held 
constant, and cover the entire 32-bit physical ad- 
dress space of the 80386. It can disassemble and 
assemble misaligned data via a 32-bit internal tem- 
porary data storage register. Data transferred be- 
tween devices of different data path widths can also 
be assembled and disassembled using the internal 
temporary data storage register. The DMA Controller 
can also transfer aligned data between I/O and 
memory on the fly, allowing data transfer rates up to 
32 megabytes per second for an 82380 operating at 
16 MHz. Figure 1-2 illustrates the functional compo- 
nents of the DMA Controller. 


There are twenty-four general status and command 
registers in the 82380 DMA Controller. Through 
these registers any of the channels may be pro- 
grammed into any of the possible modes. The oper- 
ating modes of anyone channel are independent of 
the operation of the other channels. 


Each channel has three programmable registers 
which determine the location and amount of data to 
be transferred: 


Byte Count Register-Number 
of bytes to trans- 


fer. (24-bits) 


Requester Register-Address 
of memory or pe- 


ripheral which is requesting DMA service. (32- 
bits) 


Target Register-Address 
of peripheral or mem- 


ory which will be accessed. (32-bits) 


There are also port addresses which, when ac- 
cessed, cause the 82380 to perform specific func- 
tions. The actual data written does not matter, the 1 
act of writing to the specific address causes the 
command to be executed. The commands which op- 
erate in this mode are: Master Clear, Clear Terminal 
Count Interrupt Request, Clear Mask Register, and 
Clear Byte Pointer Flip-Flop. 


DMA transfers can be done between all combina- 
tions of memory and I/O; memory-to-memory, mem- 
ory-to-I/O, 
I/O-to-memory, 
and I/O-to-I/O. 
DMA 


service can be requested through software and/or 
hardware. Hardware DMA acknowledge signals are 
available for all channels (except channel 4) through 
an 
encoded 
3-bit 
DMA 
acknowledge 
bus 


(EDACKO-2). 


HOLD 
CONTROL/STATUS 
REGISTERS 
CHANNEL 
REGISTERS 


HLDA 
COMMAND 
REGISTER I 
BASE 
CURRENT 
TEMPORARY 


COMMAND 
REGISTER II 
BYTE COUNT 
BYTE COUNT 
REGISTER 
DREQO 
DREQl 
MODE REGISTER I 
BASE 
CURRENT 


DREQ2 


REQUESTER 
REQUESTER 
CHANNEL 
0 
MODE REGISTER II 
ADDRESS 
ADDRESS 
DREQ3 
SOflWARE 
REQUEST 
BASE 
CURRENT 
DREQo4 
REGISTER 
TARGET 
TARGET 
DREQS 
MASK REGISTER 
ADDRESS 
ADDRESS 


DREQ6 
STATUS 
REGISTER 
CHANNEL 
1 (SAME 
AS CH 0) 


DREQ7 
BUS SIZE REGISTER 
CHANNEL 
2 (SAME 
AS CH 0) 


CHAINING 
REGISTER 
CHANNEL 
3 (SAME 
AS CH 0) 


CONTROL/STATUS 
(SAME 
AS 
LOWER GROUP) 


"UPPER" 
GROUP OF CHANNELS 


CHANNEL 
4 
SAME AS CH 0 


CHANNEL 
5 
SAME AS CH 0 


CHANNEL 
6 
SAME AS CH 0 


CHANNEL 
7 (SAME 
AS CH 0) 


The 82380 DMA controller transfers blocks of data 
(buffers) in three modes: Single Buffer, Buffer Auto- 
Initialize, and Buffer Chaining. In the Single Buffer 
Process, the 82380 DMA Controller is programn:ed 
to transfer one particular block of data. Successive 
transfers then require reprogramming of the DMA 
channel. Single Buffer transfers are useful in sys- 
tems where it is known at the time the transfer be- 
gins what quantity of data is to be transferr~d, and 
there is a contiguous block of data area available. 


The Buffer Auto-Initialize Process allows the same 
data area to be used for successive DMA transfers 
without having to reprogram the channel. 


The Buffer Chaining Process allows a program to 
specify a list of buffer transfers to be executed. The 
82380 DMA Controller, through interrupt routines, is 
reprogrammed from the list. The channel is repro- 
grammed for a new buffer before the current buffer 
transfer is complete. This pipelining of the channel 
programming process allows the system to allocate 
non-contiguous blocks of data storage space, and 
transfer all of the data with one DMA process. The 
buffers that make up the chain do not have to be in 
contiguous locations. 


Channel priority can be fixed or rotating. Fixed priori- 
ty allows the programmer to define the priority of 
DMA channels based on hardware or other fixed pa- 
rameters. Rotating priority is used to provide periph- 
erals access to the bus on a shared basis. 


With fixed priority, the programmer can set any 
channel to have the current lowest priority. This al- 
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lows the user to reset or manually rotate the priority 
schedule without reprogramming the command reg- 
isters. 


1.1.2 PROGRAMMABLE 
INTERVAL 
TIMERS 


Four 16-bit programmable interval timers reside 
within the 82380. These timers are identical in func- 
tion to the timers in the 82C54 Programmable Inter- 
val Timer. All four of the timers share a common 
clock input which can be independent of the system 
clock. The timers are capable of operating in six dif- 
ferent modes. In all of the modes, the current count 
can be latched and read by the 80386 at any time, 
making these very versatile event timers. Figure 1·3 
shows the functional components of the Program- 
mable Interval Timers. 


The outputs of the timers are directed to key system 
functions, making system design simpler. Timer 0 is 
routed directly to an interrupt input and is not avail- 
able externally. This timer would typically be used to 
generate time-keeping interrupts. 


Timers 1 and 2 have outputs which are available for 
general timer/counter purposes as well as special 
functions. Timer 1 is routed to the refresh control 
logic to provide refresh timing. Timer 2 is connected 
to an interrupt request input to provide other timer 
functions. Timer 3 is a general purpose timer/coun- 
ter whose output is available to external hardware. It 
is also connected internally to the interrupt request 
which defaults to the highest priority (IROO). 


TIt.lER 0 


TIt.lER 1 


The 82380 has the equivalent of three enhanced 
82C59A Programmable Interrupt Controllers. These 
controllers can all be operated in the Master mode, 
but the priority is always as if they were cascaded. 
There are 15 interrupt request inputs provided for 
the user, all of which can be inputs from external 
slave interrupt controllers. Cascading 82C59As to 
these request inputs allows a possible total of 120 
external interrupt requests. Figure 1-4 is a block dia- 
gram of the 82380 Interrupt Controller. 


Each of the interrupt request inputs can be individu- 
ally programmed with its own interrupt vector, allow- 
ing more flexibility in interrupt vector mapping than 
was available with the 82C59A. An interrupt is pro- 
vided to alert the system that an attempt is being 


IRQOH 
IRQ1H 
IRQ2# 
IRQ3H 


IRQ·H 
IRQ5H 
IRQ6H 
IRQ7H 


made to program the vectors in the method of the 
82C59A. This provides compatibility of existing soft- 
ware that used the 82C59A or 8259A with new de- 
signs using the 82380. 


In the event of an unrequested or otherwise errone- 
ous interrupt acknowledge cycle, the 82380 Interrupt 
Controller issues a default vector. This vector, pro- 
grammed by the system software, will alert the sys- 
tem of unsolicited interrupts of the 80386. 


The functions of the 82380 Interrupt Controller are 
identical to the 82C59A, except in regards to pro- 
gramming the interrupt vectors as mentioned above. 
Interrupt request inputs are programmable as either 
edge or level triggered and are software maskable. 
Priority can be either fixed or rotating and interrupt 
requests can be nested. 


IN- 
SERVICE 
REG. 


IRQO 


IRQl 


IRQ2 


IRQ3 


IRQ. 


IRQ5 


IRQ6 


IRQ7 


INDIVIDUAllY 
PROGRAt.4t.4ABlE 
VECTOR 
BANK 


Enhancements are added to the 82380 for cascad- 
ing external interrupt controllers. Master to Slave 
handshaking takes place on the data bus, instead of 
dedicated cascade lines. 


The 
Wait 
State 
Generator 
is 
a 
programmable 
READY generation circuit for the 80386 bus. A pe- 
ripheral requiring wait states can request the Wait 
State Generator to hold the processor's READY in- 
put inactive for a predetermined number of bus 
states. Six different wait state counts can be pro- 
grammed into the Wait State Generator by software; 
three for memory accesses and three for I/O ac- 
cesses. A block diagram of the 82380 Wait State 
Generator is shown in Figure 1-5. 


The peripheral being accessed selects the required 
wait state count by placing a code on a 2-bit wait 
state select bus. This code along with the M/IO# 
signal from the bus master is used to select one of 
six internal 4-bit wait state registers which has been 
programmed with the desired number of wait states. 
From zero to fifteen wait states can be programmed 
into the wait state registers. The Wait State Genera- 
tor tracks the state of the processor or current bus 
master at all times, regardless of which device is the 
current bus master and regardless of whether or not 
the Wait State Generator is currently active. 


The 82380 Wait State Generator is disabled by mak- 
ing the select inputs both high. This allows hardware 
which is intelligent enough to generate its own ready 
signal to be accessed without penalty. As previously 
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mentioned, deselecting the Wait State Generator 
does not disable its ability to determine the proper 
number of wait states due to pipeline status in sub- 
sequent bus cycles. 


The number of wait states inserted into a pipelined 
bus cycle is the value in the selected wait state reg- 
ister. If the bus master is operating in the non-pipe- 
lined mode, the Wait State Generator will increase 
the number of wait states inserted into the bus cycle 
by one. 


On reset, the Wait State Generator's registers are 
loaded with the value FFH, giving the maximum 
number of wait states for any access in which the 
wait state select inputs are active. 


The 82380 DRAM Refresh Controller consists of a 
24-bit refresh address counter and bus arbitration 
logic. The output of Timer 1 is used to periodically 
request a refresh cycle. When the controller re- 
ceives the request, it requests access to the system 
bus through the HOLD signal. When bus control is 
acknowledged by the processor or current bus mas- 
ter, the refresh controller executes a memory read 
operation at the address currently in the Refresh Ad- 
dress Register. At the same time, it activates a re- 
fresh signal (REF#) that the memory uses to force a 
refresh instead of a normal read. Control of the bus 
is transferred to the processor at the completion of 
this cycle. Typically a refresh cycle will take six clock 
cycles to execute on an 80386 bus. 


INTERNAL 
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t.4Et.40RY 1 


t.4Et.40RY 2 


(RESERVED) 


I/O 0 


I/O 1 


I/O 2 


REFRESH 


The 82380 DRAM Refresh Controller has the high- 
est priority when requesting bus access and will in- 
terrupt any active DMA process. This allows large 
blocks of data to be moved by the DMA controller 
without affecting the refresh function. Also the DMA 
controller is not required to completely relinquish the 
bus, the refresh controller simply steals a bus cycle 
between DMA accesses. 


The amount by which the refresh address is incre- 
mented is programmable to allow for different bus 
widths and memory bank arrangements. 


The 82380 contains a special reset function which 
can respond to hardware reset signals from the 
82384, as well as a software reset command. The 
circuit will hold the 80386's RESET line active while 
an external hardware reset signal is present at its 
RESET input. It can also reset the 80386 processor 
as the result of a software command. The software 
reset command causes the 82380 to hold the proc- 
essor's RESET line active for a minimum of 62 CLK2 
cycles; enough time to allow an 80386 to re-initialize. 


The 82380 can be programmed to sense the shut- 
down detect code on the status lines from the 
80386. If the Shutdown Detect function is enabled, 
the 82380 will automatically reset the processor. A 
diagnostic register is available which can be used to 
determine the cause of reset. 


After a hardware reset, the internal registers of the 
82380 are located in I/O space beginning at port 
address OOOOH.The map of the 82380's registers is 
relocatable via a software command. The default 
mapping places the 82380 between I/O addresses 
OOOOHand OODBH.The relocation register allows 
this map to be moved to any even 256-byte bounda- 
ry in the processor's 16-bit I/O address space or any 
even 16-Mbyte boundary in the 32-bit memory ad- 
dress space. 


The 82380 is designed to operate efficiently on the 
local bus of an 80386 microprocessor. The control 


signals of the 82380 are identical in function to 
those of the 80386. As a slave, the 82380 operates 
with all of the features available on the 80386 bus. 
When the 82380 is in the Master mode, it looks iden- 
tical to the 80386 to the connected devices. 


The 82380 monitors the bus at all times, and deter- 
mines whether the current bus cycle is a pipelined or 
non-pipelined access. All of the status signals of the 
processor are monitored. 


The control, status, and data registers within the 
82380 are located at fixed addresses relative to 
each other, but the group can be relocated to either 
memory or I/O space and to different locations with- 
in those spaces. 


As a Slave device, the 82380 monitors the control/ 
status lines of the CPU. The 82380 will generate all 
of the wait states it needs whenever it is accessed. 
This allows the programmer the freedom of access- 
ing 82380 registers without having to insert NOPs in 
the program to wait for slower 82380 internal regis- 
ters. 


The 82380 can determine if a current bus cycle is a 
pipelined or a non-pipelined cycle. It does this by 
monitoring the ADS# 
and READY# signals and 
thereby keeping track of the current state of the 
80386. 


As a bus master, the 82380 looks like an 80386 to 
the rest of the system. This enables the designer 
greater flexibility in systems which 
include the 
82380. The designer does not have to alter the inter- 
faces of any peripherals designed to operate with 
the 80386 to accommodate the 82380. The 82380 
will access any peripherals on the bus in the same 
manner as the 80386, including recognizing pipe- 
lined bus cycles. 


The 82380 is accessed as an 8-bit peripheral. This is 
done to maintain compatibility with existing system 
architectures and software. The 80386 places the 
data of all 8-bit accesses either on D (0-7) or D (8- 
15). The 82380 will only accept data on these lines 
when in the Slave mode. When in the Master mode, 
the 82380 is a full 32-bit machine, sending and re- 
ceiving data in the same manner as the 80386. 


1.3 IBM PC* System Compatibility 


The 82380 is an 80386 companion device designed 
to provide an enhancement of the system functions 
common to most small computer systems. It is mod- 
eled after and is a superset of the Intel peripheral 
products found in the IBM PC, PC-AT, and other 
popular small computers. 


The 82380 contains a set of interface signals to op- 
erate efficiently with the 80386 host processor. 
These signals were designed so that minimal hard- 
ware is needed to connect the 82380 to the 80386. 


Figure 2-1 depicts a typical system configuration 
with the 80386 processor. As shown in the diagram, 
the 82380 is designed to interface directly with the 
80386 bus. 


"IBM PC and IBM PC-AT are registered 
trademarks 
of Inter- 
national 
Business 
Machines 
Inc. 


Since the 82380 is residing on the opposite side of 
the data bus transceiver (with respect to the rest of 
the peripherals in the system), it is important to note 
that the transceiver should be controlled so that 
contention between the data bus transceiver and 
the 82380 will not occur. In order to do this, port 
address decoding logic should be included in the di- 
rection and enable control logic of the transceiver. 
When any of the 82380 internal registers is read, the 
data bus transceiver should be disabled so that only 
the 82380 will drive the local bus. 


This section describes the basic bus functions of the 
82380 to show how this device interacts with the 
80386 processor. Other signals which are not direct- 
ly related to the host interface will be discussed in 
their associated functional block description. 
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At any time, the 82380 acts as either a Slave device 
or a Master device in the system. Upon reset, the 
82380 will be in the Slave Mode. In this mode, the 
80386 processor can read/write into the 82380 in- 
ternal registers. Initialization information may be pro- 
grammed into the 82380 during Slave Mode. 


When DMA service (including DRAM Refresh Cycles 
generated by the 82380) is requested, the 82380 will 
request and subsequently get' control of the 80386 
local bus. This is done through the HOLD and HLDA 
(Hold Acknowledge) signals. When the 80386 proc- 
essor responds by asserting the HLDA signal, the 
82380 will switch into Master Mode and perform 
DMA transfers. In this mode, the 82380 is the bus 
master of the system. It can read/write data from/to 
memory and peripheral devices. The 82380 will re- 
turn to the Slave Mode upon completion of DMA 
transfers, or when HLDA is negated. 


As mentioned in the Architecture section, the Bus 
Interface module of the 82380 (see Figure 1-1) con- 
tains signals that are directly connected to the 
80386 host processor. This module has separate 
32-bit Data and Address busses. Also, it has addi- 
tional control signals to support different bus opera- 
tions on the system. By residing on the 80386 local 
bus, the 82380 shares the same address, data and 
control lines with the processor. The following sub- 
sections discuss the signals which interface to the 
80386 host processor. 


The CLK2 input provides fundamental timing for the 
82380. It is divided by two internally to generate the 
82380 internal clock. Therefore, CLK2 should be 
driven with twice the 80386's frequency. In order to 
maintain synchronization with the 80386 host proc- 
essor, the 82380 and the 80386 should share a 
common clock source. 


The internal clock consists of two phases: PHI1 and 
PHI2. Each CLK2 period is a phase of the internal 
clock. PHI2 is usually used to sample input and set 1 
up internal signals and PHI1 is for latching internal 
data. Figure 2-2 illustrates the relationship of CLK2 
and the 82380 internal clock signals. The CPURST 
signal generated by the 82380 guarantees that the 
80386 will wake up in phase with PHI1. 


This 32-bit three-state bidirectional bus provides a 
general purpose data path between the 82380 and 
the system. These pins are tied directly to the corre- 
sponding Data Bus pins of the 80386 local bus. The 
Data Bus is also used for interrupt vectors generated 
by the 82380 in the Interrupt Acknowledge cycle. 


During Slave I/O operations, the 82380 expects a 
single byte to be written or read. When the 80386 
host processor writes into the 82380, either DO-D7 
or D8- D15 will be latched into the 82380, depend- 
ing upon how the Byte Enable (BEO#-BE#3) 
sig- 
nals are driven. The 82380 does not need to look at 
D16-D31 since the 80386 duplicates the single byte 
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data 
on both 
halves 
of the 
bus. When 
the 
80386 
host 
processor 
reads 
from 
the 
82380, 
the 
single 
byte data will be duplicated 
four times on the Data 
Bus; Le., on 00-07, 
08-015, 
016-023 
and 024- 
031. 


During Master Mode, the 82380 can transfer 32-, 16-, 
and 8-bit data between 
memory 
(or I/O devices) 
and 
I/O devices 
(or memory) 
via the Data Bus. 


These 
three-state 
bidirectional 
signals 
are connect- 
ed directly 
to the 80386 
Address 
Bus. In the Slave 
Mode, 
they 
are used 
as input 
signals 
so that 
the 
processor 
can address the 82380 internal 
ports/reg- 


isters. In the Master 
Mode, they are used as output 
signals by the 82380 to address 
memory and periph- 
eral 
devices. 
The 
Address 
Bus 
is capable 
of ad- 
dressing 
4 
G-bytes 
of 
physical 
memory 
space 
(OOOOOOOOHto FFFFFFFFH), 
and 64 K-bytes of I/O 
addresses 
(OOOOOOOOHto OOOOFFFFH). 


These bidirectional 
pins select specific 
byte(s) in the 
double 
word 
addressed 
by A31-A2. 
Similar 
to the 


Address 
Bus function, 
these signals 
are used as in- 


puts 
to 
address 
internal 
82380 
registers 
during 
Slave 
Mode operation. 
During 
Master 
Mode 
opera- 


tion, they are used as outputs 
by the 82380 
to ad- 
dress memory 
and I/O locations. 


In addition to the above functIon, BE3II Is used 
to enable a production test mode and must be 
LOW during reset. The 80386 processor will au- 
tomatically hold BE311LOW during RESET. 


The definitions 
of the 
Byte Enable 
signals 
depend 
upon whether 
the 82380 
is in the Master 
or Slave 
Mode. These 
definitions 
are depicted 
in Table 2-1. 


BE311-BEOII 
Implied A1, AO 
Data Bits Written 
to 82380· 


XXXO 
00 
00-07 
XX01 
01 
08-015 
X011 
10 
00-07 
X111 
11 
08-015- 


X-DON'T CARE 
'During READ. data will be duplicated on 00-07, 
08-015, 
016-023. 
and 024-031. 


During WRITE, the 60386 host processor duplicates data on 00-015. 
and 016-031, 
so that the 62360 
Is concerned only with the lower half of the Data Bus. 


Byte to be Accessed 
LogIcal Byte Presented On 
BE3#-BEO# 
RelatIve to A31-A2 
Data Bus DurIng WRITE Only· 
024-31 
016-23 
08-15 
00-7 


1110 
0 
U 
U 
U 
A 
1101 
1 
U 
U 
A 
A 
1011 
2 
U 
A 
U 
A 
0111 
3 
A 
U 
A 
A 
1001 
1,2 
U 
B 
A 
A 
1100 
0, 1 
U 
U 
B 
A 
0011 
2,3 
B 
A 
B 
A 
1000 
0,1,2 
U 
C 
B 
A 
0001 
1,2,3 
C 
B 
A 
A 
0000 
0,1,2,3 
0 
C 
B 
A 
u = Undefined 
A - 
Logical 00-07 
B = Logical 06-015 
C = Logical 016-023 
o = Logical 024-031 
'Actual number of bytes accessed depends upon the programmed data peth width. 


2.2.5 BUS CYCLE DEFINITION SIGNALS (D/C#, 
W/R#, 
M/IO#) 


These three-state bidirectional signals define the 
type of bus cycle being performed. W/R# 
dist~n- 
guishes between write and read cycles. D/C# 
dIS- 
tinguishes between processor data and control cy- 
cles. M/IO# distinguishes between memory and I/O 
cycles. 


During Slave Mode, these signals are driven by the 
80386 host processor; during Master Mode, they are 
driven by the 82380. In either mode, these signals 
will be valid when the Address Status (ADS#) is 
driven LOW. Exact bus cycle definitions are given in 
Table 2-2. Note that some combinations are recog- 
nized as inputs, but not generated as outputs. In the 
Master Mode, D/C# 
is always HIGH. 


2.2.6 ADDRESS STATUS (ADS#) 


This bidirectional signal indicates that a valid ad- 
dress (A2-A31, BEO#-BE3#) 
and bus cycle defini- 
tion (W/R#, 
D/C#, 
M/IO#) 
is being driven on the 
bus. In the Master Mode, it is driven by the 82380 as 
an output. In the Slave Mode, this signal is moni- 
tored as an input by the 82380. By the current and 
past status of ADS# and the. READY# input~the 
82380 is able to determine, dunng Slave Mode, If the 
next bus cycle is a pipelined address cycle. ADS# is 
asserted during T1 and T2P bus states (see Bus 
State Definition). 


Note that during the idle states at the beginning and 
the end of a DMA process, neither the 80386 nor the 
82380 is driving the ADS# signal; Le., the signal is 
left floated. Therefore, it is important to use a pull-up 
resistor (approximately 10 K!l) on the ADS# signal. 


nal indicates the end of a DMA bus cycle. In the 
Slave Mode 
the 82380 monitors this input and 
ADS# to det~ct a pipelined address cycles. This sig- 
nal should be tied directly to the READY# input of 
the 80386 host processor. 


2.2.8 NEXT ADDRESS REQUEST (NA #) 


This input is used to indicate to the 82380 in the 
Master Mode that the system is requesting address 
pipelining. When driven LOW by either ~~m?ry or 
peripheral devices during Master Mode, It Indicates • 
that the system is prepared to accept a new address 
and bus cycle definition signals from the 82380 be- 
fore the end of the current bus cycle. If this input is 
active when sampled by the 82380, the next address 
is driven onto the bus, provided a bus request is 
already pending internally. 


This input pin is monitored only in the Master Mode. 
In the Slave Mode, the 82380 uses the ADS# and 
READY# signals to determine address pipelining 
cycles, and NA# will be ignored. 


2.2.9 RESET (RESET, CPURST) 


RESET 


This synchronous input suspends any operation in 
progress and places the 82380 in a known initial 
state. Upon reset, the 82380 will be in the Slave 
Mode waiting to be initialized by the 80386 host 
processor. The 82380 is reset by asserting RESET 
for 15 or more CLK2 periods. When RESET is as- 
serted, all other input pins are ignored, and all oth~r 
bus pins are driven to an idle bus state as shown In 
Table 2-3. The 82380 will determine the phase of its 
internal clock following RESET going inactive. 


2.2.7 TRANSFER ACKNOWLEDGE (READY#) 


This input indicates that the current bus cycle is 
complete. In the Master Mode, assertion of this sig- 


Table 2-2. Bus Cycle Definition 


M/IO# 
D/C# 
W/R# 
As INPUTS 
As OUTPUTS 


0 
0 
0 
Interrupt 
NOT GENERATED 
Acknowledge 
0 
0 
1 
UNDEFINED 
NOT GENERATED 
0 
1 
0 
I/O Read 
I/O Read 
0 
1 
1 
I/O Write 
I/O Write 
1 
0 
0 
UNDEFINED 
:-io 
NOT GENERATED 
1 
0 
1 
HALT if 
NOT GENERATED 
BE(3-0) # = X011 
SHUTDOWN if 
BE (3-0)# 
= XXXO 
1 
1 
0 
Memory Read 
Memory Read 
1 
1 
1 
Memory Write 
Memory Write 


Signal 
Level 


A2-A31, 00-031, 
BEO#-BE3# 
Float 
O/C#, 
W/R#, 
M/IO#, AOS# 
Float 
REAOYO# 
'1' 


EOP# 
'1' (Weak Pull-UP) 
EOACK2-EOACKO 
'100' 
HOLD 
'0' 


INT 
UNDEFINED· 
TOUT1/REF#, TOUT2#/IRQ3#, 
TOUT3# 
UNDEFINED· 
CPURST 
'0' 


RESET is level-sensitive and must be synchronous 
to the CLK2 signal. Therefore, this RESET input 
should be tied to the RESET output of the Clock 
Generator. The RESET setup and hold time require- 
ments are shown in Figure 2.3. 


This output signal is used to reset the 80386 host 
processor. It will go active (HIGH) whenever one of 
the following events occurs: a) 82380's RESET input 
is active; b) a software RESET command is issued 
to the 82380; or c) when the 82380 detects a proc- 
essor Shutdown cycle and when this detection fea- 
ture is enabled (see CPU Reset and Shutdown De- 
tect). When activated, CPURST will be held active 
for 62 CLK2 periods. The timing of CPURST is such 
that the 80386 processor will be in synchronization 
with the 82380. This timing is shown in Figure 2-4. 


This output pin is used to signal the 80386 host 
processor that one or more interrupt requests (either 
internal or external) are pending. The processor is 
expected to respond with an Interrupt Acknowledge 
cycle. This signal should be connected directly to 
the Maskable Interrupt Request (INTR) input of the 
80386 host processor. 


2.3 82380 Bus Timing 


The 82380 internally divides the CLK2 signal by two 
to generate its internal clock. Figure 2-2 shows the 
relationship of CLK2 and the internal clock. The in- 
ternal clock consists of two phases: PHI1 and PHI2. 
Each CLK2 period is a phase of the internal clock. In 
Figure 2-2, both PHI1 and PHI2 of the 82380 internal 
clock are shown. 
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In the 82380, whether it is in the Master or Slave 
Mode, the shortest time unit of bus activity is a bus 
state. A bus state, which is also referred as a 
'T-state', is defined as one 82380 PHI2 clock period 
(Le., two CLK2 periods). Recall in Table 2-2, there 
are six different types of bus cycles in the 82380 as 
defined by the M/IO#, 
D/C# 
and W/R# 
signals. 
Each of these bus cycles is composed of two or 
more bus states. The length of a bus cycle depends 
on when the READY# input is asserted (Le., driven 
LOW). 


The 82380 supports Address Pipelining as an option 
in both the Master and Slave Mode. This feature typ- 
ically allows a memory or peripheral device to oper- 
ate with one less wait state than would otherwise be 
required. This is possible because during a pipelined 
cycle, the address and bus cycle definition of the 
next cycle will be generat~d by the bus master while 
waiting for the end of the current cycle to be ac- 
knowledged. The pipelined bus is especially well 
suited for interleaved memory environment. For 16 
MHz interleaved memory designs with 100 ns ac- 
cess time DRAMs, zero wait state memory accesses 
can be achieved when pipelined addressing is se- 
lected. 


In the Master Mode, the 82380 is capable of initiat- 
ing, on a cycle-by-cycle basis, either a pipelined or 
non-pipelined access depending upon the state of 
the NA# input. If a pipelined cycle is requested (indi- 
cated by NA# 
being driven LOW), the 82380 will 


drive the address and bus cycle definition of the next 
cycle as soon as there is an internal bus request 
pending. 


In the Slave Mode, the 82380 is constantly monitor- 
ing the ADS# and READY# signals on the proces- 
sor local bus to determine if the current bus cycle is 
a pipelined cycle. If a pipelined cycle is detected, the 
82380 will request one less wait state from the proc- 
essor if the Wait State Generator feature is selected. 
On the other hand, during an 82380 internal register 
access in a pipelined cycle, it will make use of the 
advance address and bus cycle information. In all 1 
cases, Address Pipelining will result in a savings of 
one wait state. 


When the 82380 is in the Master Mode, it will be in 
one of six bus states. Figure 2-5 shows the complete 
bus state diagram of the Master Mode, including 
pipelined address states. As seen in the figure, the 
82380 state diagram is very similar to that of the 
80386. The major difference is that in the 82380, 
there is no Hold state. Also, in the 82380, the condi- 
tions for some state transitions depend upon wheth- 
er it is the end of a DMA process". 


NOTE: 
"The term 'end of a DMA process' is loosely de- 
fined here. It depends on the DMA modes of oper- 
ation as well as the state of the EOP# and DREQ 
inputs. This is explained in detail in section 3-DMA 
Controller. 


The 82380 will enter the idle state, Ti, upon RESET 
and whenever the internal address is not available at 
the end of a DMA cycle or at the end of a DMA 
process. When address pipelining is not used (NA# 
is not asserted), a new bus cycle always begins with 
state T1. During T1, address and bus cycle definition 
signals will be driven on the bus. T1 is always fol- 
lowed by T2. 


If a bus cycle is not acknowledged (with READY#) 
during T2 and NA# is negated, T2 will be repeated. 
When the end of the bus cycle is acknowledged dur- 
ing T2, the following state will be T1 of the next bus 
cycle (if the internal address latch is loaded and if 
this is not the end of the DMA process). Otherwise, 
the Ti state will be entered. Therefore, if the memory 
or peripheral accessed is fast enough to respond 
within the first T2, the fastest non-pipelined cycle will 
take one T1 and one T2 state. 


intel~ 


Use of the address pipelining feature allows the 
82380 to enter three additional bus states: T1P, 
T2P, and T2i. T1P is the first bus state of a pipelined 
bus cycle. T2P follows T1P (or T2) if NA# is assert· 
ed when sampled. The 82380 will drive the bus with 
the address and bus cycle definition signals of the 
next cycle during T2P. From the state diagram, it can 
be seen that after an idle state Ti, the first bus cycle 
must begin with T1, and is therefore a non-pipelined 
bus cycle. The next bus cycle can be pipelined if 
NA# is asserted and the previous bus cycle ended 
in a T2P state. Once the 82380 is in a pipelined 
cycle and provided that NA# is asserted in subse- 
quent cycles, the 82380 will be switching between 
T1P and T2P states. If the end of the current bus 
cycle is not acknowledged by the READY# input, 
the 82380 will extend the cycle by adding T2P 
states. The fastest pipelined cycle will consist of one 
T1P and one T2P state. 


NOTE: 
ADAV-Internal 
Address Available 


eo anO wnen 
one 
ot tne 
tOllowlng 
two 
conditions 
occurs. 
The first condition 
is when the 82380 
is in 
state 
T2. T2i will be entered 
if READY II is not as- 


serted 
and there 
is no next address 
available. 
This 
situation 
is similar to a wait state. The 82380 will stay 
in T2i for as long as this condition 
exists. 
The sec- 
ond condition 
which will cause the 82380 enter T2i is 
when 
the 
82380 
is in state 
T1 P. Before 
going 
to 


the next address 
is available. 
Also, in both cases, 
if 


the DMA process 
is complete, 
the 82380 
will enter 


the T2i state in order to finish the current 
DMA cycle. 


Figure 2-6 is a timing diagram 
showing 
non-pipelined 
bus accesses 
in the Master Mode. Figure 2-7 shows 


the timing of pipelined 
accesses 
in the Master Mode. 


ADDRESS ---<~-------X··----------X 
AND CONTROL·· 
••••------ 


DATA -------r----'\ 
..--------r----'\"'---"""C 
(READ) 
\-.-.J 
\-.-.J 


DATA 
oe 
(WRITE) 


NA# XXXXXXXXXXXXXXX 


READY# )()()()()QQ()() 
I 
0 WAIT STATE 
I;XXXXXXXXXY 
m 


1 WAIT STATE 


,@XXXXXX>. 
o WAIT STATE 


ADS# --1 
\ 
1 
\•. 
1 
'--- 


ADDRESS ------------ 
••----------x::::::: 
AND CONTROL 
X 
X 


NA# 
~ 
mooooooo<&\ 
.<XXX>O<XXXXXXX 
,()()()()()()() 


READY#!\ 
,<;)()()()()()( 
txXtttXXXtXY 
w<». 
.סoסooooooo. 


DATA 
r---\ 
r---\ 
C 
(READ) -------'---J--------J'---J---- 


DATA ----X..-------X 
(WRITE) 
• . 
. . 


dress and bus cycle signals one bus state earlier 
than in a non-pipelined cycle. 


Figure 2-8 shows the Slave Mode bus timing in both 
pipelined and non-pipelined cycles when the 82380 
is being accessed. Recall that during Slave Mode, 
the 82380 will constantly monitor the ADS# 
and 
READY# signals to determine if the next cycle is 
pipelined. In Figure 2-8, the first cycle is non-pipe- 
lined and the second cycle is pipelined. In the pipe- 
lined cycle, the 82380 will start decoding the ad- 


The READY# input signal is sampled by the 80386 
host processor to determine the completion of a bus 
cycle. This occurs during the end of every T2 and 
T2P state. Normally, the output of the 82380 Wait 
State Generator, READYO#, is directly connected 
to the READY# input of the 80386 host processor 
and the 82380. In such case, READYO# 
and 


READY# will be identical (see Wait State Genera- 
tor). 


.0.(2-31) 


8E(0-3)' 


W/IO, 


O/C,.W/R, 


NOTE: 
NA# 
is shown 
here only for timing 
reference. 
It is not sampled 
by the 82380 
during 
Slave 
Mode 
When 
the 82380 
registers 
are accessed. 
it will take one or more wait states 
in pipelined 
and two or more wait states 
In 
non-pipelined 
cycle 
to complete 
the internal 
access. 


ure 3-1 is a block diagram of the 82380 DMA Con- 
troller. 


The 82380 DMA Controller is capable of transferring 
data between any combination of memory andlor 
liD, with any combination (8-, 16-, or 32-bits) of data 
path widths. Bus bandwidth is optimized through the 
use of an internal temporary register which can dis- 
assemble or assemble data to or from either an 
aligned or a non-aligned destination or source. Fig- 


The 82380 has eight channels of DMA. Each chan- 
nel operates independently of the others. Within the 
operation of the individual channels, there are many 
different modes of data transfer available. Many of 
the operating modes can be intermixed to provide a 
very versatile DMA controller. 
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In describing the operation of the 82380's DMA Con- 
troller, close attention to terminology is required. Be- 
fore entering the discussion of the function of the 
82380 DMA Controller, the following explanations of 
some of the terminology used herein may be of ben- 
efit. First, a few terms for clarification: 


DMA PROCES5-A 
DMA process is the execution 


of a programmed DMA task from beginning to end. 
Each DMA process requires initial programming by 
the host 80386 microprocessor. 


BUFFER-A 
contiguous block of data. 


BUFFER TRANSFER-The 
action required by the 


DMA to transfer an entire buffer. 


DATA TRANSFER-The 
DMA action in which a 


group of bytes, words, or double words are moved 
between devices by the DMA Controller. A data 
transfer operation may involve movement of one or 
many bytes. 


BUS CYCLE-Access 
by the DMA to a single byte, 


word, or double word. 


Each DMA channel consists of three major compo- 
nents. These components are identified by the con- 
tents of programmable registers which define the 
memory or I/O devices being serviced by the DMA. 
They are the Target, the Requester, and the Byte 
Count. They will be defined generically here and in 
greater detail in the DMA register definition section. 


The Requester is the device which requires service 
by the 82380 DMA Controller, and makes the re- 
quest for service. All of the control signals which the 
DMA monitors or generates for specific channels 
are logically related to the Requester. Only the Re- 
quester is considered capable of initiating or termi- 
nating a DMA process. 


The Target is the device with which the Requester 
wishes to communicate. As far as the DMA process 
is concerned. the Target is a slave which is incapa- 
ble of control over the process. 


The direction of data transfer can be either from Re- 
quester to Target or from Target to Requester; I.e., 
each can be either a source or a destination. 


The Requester and Target may each be either I/O 
or memory Each has an a,ddressassociated with it 
that can be incremented, decremented, or held con- 
stant. The addresses are stored in the Requester 
Address Registers and Target Address Registers, 


which contains the current address being ~sedin th; 
DMA process (Current Address Register), and one 
which holds the programmed base address (Base 
Address Register). The contents of the Base Regis- 
ters are never changed by the 82380 DMA Control- 
ler. The Current Registers are incremented or decre- 
mented according to the progress of the DMA pro- 
cess. 


The Byte Count is the component of the DMA pro- 
cess which dictates the amount of data which must 
be transferred. Current and Base Byte Count Regis- 
ters are provided. The Current Byte Count Register 
is decremented once for each byte transferred by 
the DMA process. When the register is decremented 
past zero, the Byte Count is considered 'expired' 
and the process is terminated or restarted, depend- 
ing on the mode of operation of the channel. The 
point at which the Byte Count expires is called 'Ter- 
minal Count' and several status signals are depen- 
dent on this event. 


Each channel of the 82380 DMA Controller also 
contains a 32-bit Temporary Register for use in as- 
sembling and disassembling non-aligned data. The 
operation of this register is transparent to the user, 
although the contents of it may affect the timing of 
some DMA handshake sequences. Since there is 
data storage available for each channel, the DMA 
Controller can be interrupted without loss of data. 


The 82380 DMA Controller is a slave on the bus until 
a request for DMA service is received via either a 
software request command or a hardware request 
signal. The host processor may access any of the 
control/status or channel registers at any time the 
82380 is a bus slave. Figure 3-2 shows the flow of 
operations that the DMA Controller performs. 


At the time a DMA service request is received, the 
DMA Controller issues a bus hold request to the 
host processor. The 82380 becomes the bus master 
when the host relinquishes the bus by asserting a 
hold acknowledge signal. The channel to be serv- 
iced will be the one with the highest priority at the 
time the DMA Controller becomes the bus master. 
The DMA Controller will remain in control of the bus 
until the hold acknowledge signal is removed, or un- 
til the current DMA transfer is complete. 


While the 82380 DMA Controller has control of the 
bus, it will perform the required data transfer(s). The 
type of transfer, source and destination addresses, 
and amount of data to transfer are programmed in 
the control registers of the DMA channel which re- 
ceived the request for service. 
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At completion 
of the DMA process, 
the 82380 
will 


remove the bus hold request. 
At this time the 82380 


becomes 
a slave again, and the host returns 
to be- 


ing a master. 
If there 
are other 
DMA channels 
with 


requests 
pending, the controller 
will again assert the 


hold 
request 
signal 
and 
restart 
the 
bus arbitration 


and switching 
process. 


There 
are fourteen 
control 
signals 
dedicated 
to the 


DMA process. 
They include eight DMA Channel 
Re- 


quests (DREQn), 
three Encoded 
DMA Acknowledge 


signals 
(EDACKn), 
Processor 
Hold 
and 
Hold 
Ac- 


knowledge 
(HOLD, 
HLDA), 
and 
End-Of-Process 


(EOP#). 
The DREQn 
inputs and EDACK(0-2) 
out- 


puts are handshake 
signals to the devices 
requiring 


DMA service. 
The HOLD output and HLDA input are 


handshake 
signals to the host processor. 
Figure 3-3 


shows 
these signals 
and how they interconnect 
be- 


tween the 82380 DMA Controller, 
and the Requester 


and Target 
devices. 


TO HOST{HOLD 
82380 
PROCESSOR 
Dlo4ACONTROLLER 
HLDA 


Figure 3·3. Requester, 
Target, 
and DMA Controller 
Interconnection 
(2-Cycle 
Configuration) 


These 
signals 
are the 
handshake 
signals 
between 
the peripheral 
and the 82380. 
When 
the peripheral 
requires 
DMA service, 
it asserts 
the DREQn 
signal 
of the channel 
which 
is programmed 
to perform 
the 
service. 
The 
82380 
arbitrates 
the 
DREQn 
against 


other 
pending 
requests 
and 
begins 
the 
DMA 
pro- 


cess after finishing 
other higher priority 
processes. 


When the DMA service for the requested 
channel 
is 


in progress, 
the EDACK(0-2) 
signals 
represent 
the 
DMA 
channel 
which 
is accessing 
the 
Requester. 


The 3-bit code 
on the EDACK(0-2) 
lines indicates 
the number 
of the channel 
presently 
being serviced. 


Table 3-2 shows the encoding 
of these signals. Note 
that Channel 
4 does not have a corresponding 
hard- 
ware acknowledge. 


The 
DMA 
acknowledge 
(EDACK) 
signals 
indicate 
the active channel 
only during DMA accesses 
to the 
Requester. 
During 
accesses 
to 
the 
Target, 
EDACK(0-2) 
has the idle code (100). EDACK(0-2) 


can thus be used to select 
a Requester 
device 
dur- 


ing a transfer. 


Table 
3·2. EDACK 
Encoding 
During 
a DMA Transfer 


EDACK2 
EDACK1 
EDACKO 
Active 
Channel 


0 
0 
0 
0 
0 
0 
1 
1 
0 
1 
0 
2 
0 
1 
1 
3 
1 
0 
0 
Target Access 


1 
0 
1 
5 
1 
1 
0 
6 


1 
1 
1 
7 


DREQn 
can be programmed 
as either an Asynchro- 


nous or Synchronous 
input. See section 
3.4.1 for de- 
tails on synchronous 
versus asynchronous 
operation 
of this pin. 


The EDACKn 
signals 
are always active. They either 
indicate 
'no acknowledge' 
or they indicate 
a bus ac- 


cess to the requester. 
The acknowledge 
code is ei- 


ther 100, for an idle DMA or during a DMA access to 
the Target, 
or 'n' during a Requester 
access, 
where 
n is the 
binary 
value 
representing 
the 
channel. 
A 
simple 
3-line to 8-line decoder 
can be used to pro- 
vide discrete 
acknowledge 
signals 
for the peripher- 
als. 


3.2.2 HOLD 
and 
HLDA 


The Hold 
Request 
(HOLD) 
and Hold Acknowledge 


(HLDA) 
signals 
are the handshake 
signals 
between 


the DMA Controller 
and the host processor. 
HOLD is 
an output 
from 
the 
82380 
and 
HLDA 
is an input. 


HOLD is asserted 
by the DMA Controller 
when there 
is a pending 
DMA request, 
thus requesting 
the proc- 
essor to give up control 
of the bus so the DMA pro- 
cess can take place. The 80386 responds 
by assert- 
ing HLDA when it is ready to relinquish 
control 
of the 
bus. 


The 
82380 
will 
begin 
operations 
on the 
bu~ one 
clock 
cycle 
after the HLDA 
signal 
goes active. 
For 
this reason, 
other 
devices 
on the bus should 
be in 
the slave mode when HLDA is active. 


HOLD and HLDA should 
not be used to gate or se- 
lect peripherals 
requesting 
DMA service. 
This is be- 
cause 
of the 
use 
of 
DMA-like 
operations 
by the 
DRAM Refresh 
Controller. 
The Refresh 
Controller 
is 
arbitrated 
with the DMA Controller 
for control 
of the 
bus, and refresh 
cycles 
have the highest 
priority. 
A 
refresh 
cycle 
will take 
place 
between 
DMA 
cycles 
without 
relinquishing 
bus control. 
See section 
3.4.3 
for a more detailed 
discussion 
of the interaction 
be- 
tween 
the DMA Controller 
and the DRAM 
Refresh 
Controller. 


EOP# 
is a bi-directional 
signal used to indicate 
the 
end of a DMA process. 
The 82380 activates 
this as 
an output during the T2 states of the last Requester 
bus cycle for which a channel 
is programmed 
to exe- 
cute. The Requester 
should 
respond 
by either with- 
drawing 
its DMA 
request, 
or interrupting 
the 
host 
processor 
to indicate 
that the channel 
needs 
to be 
programmed 
with a new buffer. As an input, this sig- 
nal is used to tell the DMA Controller 
that the periph- 
eral being serviced 
does not require 
any more data 
to 
be transferred. 
This 
indicates 
that 
the 
current 
buffer is to be terminated. 


EOP# 
can be programmed 
as either 
an Asynchro- 
nous or a Synchronous 
input. See section 
3.4.1 for 
details on synchronous 
versus asynchronous 
opera- 
tion of this pin. 


3.3 Modes 
of Operation 


The 82380 
DMA Controller 
has many 
independent 
operating 
functions. 
When 
designing 
peripheral 
in- 
terfaces 
for the 
82380 
DMA 
Controller, 
all of the 
functions 
or modes 
must be considered. 
All of the 
channels 
are independent 
of each other 
(except 
in 
priority 
of operation) 
and can operate 
in any of the 
modes. 
Many of the operating 
modes, 
though 
inde- 
pendently 
programmable, 
affect 
the 
operation 
of 
other modes. 
Because 
of the large number 
of com- 


binations 
possible, 
each programmable 
mode is dis- 
cussed here with its affects 
on the operation 
of other 
modes. 
The entire 
list of possible 
combinations 
will 
not be presented. 


Table 
3-1 
shows 
the 
categories 
of 
DMA 
features 


'available 
in the 82380. 
Each of the five major cate- 
gories is independent 
of the others. The sub-catego- 
ries are the available 
modes 
within 
the major func- 
tion 
or 
mode 
category. 
The 
following 
sections 
explain each mode or function 
and its relation to oth- 
er features. 


I. Target/Requester 
Definition 


a. Data Transfer 
Direction 


b. Device Type 


c. Increment/Decrement/Hold 


II. Buffer 
Processes 


a. Single Buffer 
Process 


b. Buffer Auto-Initialize 
Process 


c. Buffer Chaining 
Process 


III. Data Transfer/Handshake 
Modes 


a. Single Transfer 
Mode 


b. Demand 
Transfer 
Mode 


c. Block Transfer 
Mode 


d. Cascade 
Mode 


IV. Priority 
Arbitration 


a. Fixed 


b. Rotating 


c. Programmable 
Fixed 


V. Bus Operation 


a. Fly-By (Single-Cycle)/Two-Cycle 


b. Data Path Width 


c. Read, Write, or Verify Cycles 


All DMA transfers 
involve 
three 
devices: 
the 
DMA 
Controller, 
the Requester, 
and the Target. 
Since the 
devices 
to be accessed 
by the DMA Controller 
vary 
widely, 
the 
operating 
characteristics 
of 
the 
DMA 
Controller 
must 
be tailored 
to the 
Requester 
and 
Target 
devices. 


The Requester 
can be defined 
as either the source 
or the destination 
of the data to be transferred. 
This 
is done 
by specifying 
a Write 
or a Read 
transfer, 
respectively. 
In a Read 
transfer, 
the Target 
is the 
data source 
and the Requester 
is the destination 
for 


the data. 
In a Write 
transfer, 
the 
Requester 
is the 
source 
and the Target 
in the destination. 


The Requester 
and Target 
addresses 
can each 
be 
independently 
programmed 
to be incremented, 
dec- 
remented, 
or 
held 
constant. 
As 
an 
example, 
the 
82380 
is capable 
of reversing 
a string 
or data 
by 
having a Requester 
address 
increment 
and the Tar- 
get 
address 
decrement 
in 
a 
memory-to-memory 
transfer. 


The 82380 DMA Controller 
allows three programma- 
ble Buffer Transfer 
Processes. 
These processes 
de- 
fine the logical 
way in which 
a buffer 
of data is ac- 
cessed 
by the DMA. 


The three Buffer Transfer 
Processes 
include the Sin- 
gle 
Buffer 
Process, 
the 
Buffer 
Auto-Initialize 
Pro- 
cess, and the Buffer 
Chaining 
Process. 
These 
pro- 
cesses 
require special 
programming 
considerations. 


See the DMA Programming 
section 
for more details 
on setting 
up the Buffer Transfer 
Processes. 


The Single Buffer 
Process 
allows the DMA channel 
to transfer 
only one buffer 
of data. When the buffer 
has 
been 
completely 
transferred 
(Current 
Byte 
Count 
decremented 
past 
zero 
or EOP# 
input 
ac- 
tive), 
the 
DMA process 
ends 
and the channel 
be- 


comes 
idle. 
In order 
for that 
channel 
to 
be used 
again, it must be reprogrammed. 


The single 
Buffer 
Process 
is usually 
used when the 
amount 
of data to be transferred 
is known 
exactly, 


and it is also known that there is not likely to be any 
data 
to 
follow 
before 
the 
operating 
system 
can 
reprogram 
the channel. 


The 
Buffer 
Auto-Initialize 
Process 
allows 
multiple 
groups 
of data to be transferred 
to or from a single 
buffer. 
This 
process 
does 
not 
require 
reprogram- 


ming. The Current 
Registers 
are automatically 
repro- 
grammed 
from the Base Registers 
when the current 
process 
is terminated, 
either 
by an 
expired 
Byte 
Count 
or by an external 
EOP # 
signal. 
The 
data 
transferred 
will always be between 
the same Target 
and Requester. 


The auto-initialization/process-execution 
cycle 
IS re- 
peated, 
with a HOLD/HLDA 
re-arbitration, 
until the 
channel 
is either disabled 
or re-programmed. 


The Buffer Chaining Process is useful for transfer- 
ring large quantities of data into non-contiguous 
buffer areas. In this process, a single channel is 
used to process data from several buffers, while 
having to program the channel only once. Each new 
buffer is programmed in a pipelined operation that 
provides the new buffer information while the old 
buffer is being processed. The chain is created by 
loading new buffer information while the 82380 DMA 
Controller is processing the Current Buffer. When 
the Current Buffer expires, the 82380 DMA Control- 
ler automatically restarts the channel using the new 
buffer information. 


Loading the new buffer information IS done by an 
interrupt routine which is requested by the 82380. 
Interrupt Request 1 (IRQ1) is tied internally to the 
82380 DMA Controller for this purpose. IRQ1 is gen- 
erated by the 82380 when the new buffer informa- 
tion is loaded into the channel's Current Registers, 
leaving the Base Registers 'empty'. The interrupt 
service routine loads new buffer information into the 
Base Registers The host processor is required to 
load the information for another buffer before the 
current Byte Count expires The process repeats un- 
til the host programs the channel back to single buff- 
er operation, or until the channel runs out of buffers. 


The channel runs out of buffers when the Current 
Buffer expires and the Base Registers have not yet 
been loaded with new buffer inft:>rmation.When this 
occurs, the channel must be reprogrammed. 


If an external EOP# is encountered while executing 
a Buffer Chaining Process, the current buffer is con- 
sidered expired and the new buffer information is 
loaded into the Current Registers. If the Base Regis- 
ters are 'empty', the chain is terminated. 


The channel uses the Base Target Address Register 
as an indicator of whether or not the Base Registers 
are full When the most significant byte of the Base 
Target Register is loaded, the channel considers all 
of the Base Registers loaded, and removes the in- 
terrupt request. This requires that the other Base 
Registers (Base 
Requester Address, 
Last Byte 
Count) must be loaded before the Base Target Ad- 
dress Register. The reason for implementing the re- 


tions, the Byte Count and the Requester will not 
change from one buffer to the next, and therefore do 
not need to be reprogrammed. The details of pro- 
gramming the channel for the Buffer Chaining Pro- 
cess can be found in the section of DMA program- 
ming. 


Three Data Transfer modes are available in the 
82380 DMA Controller. They are the Single Transfer 
Block 
Transfer, 
and 
Demand Transfer 
Modes 
These transfer modes can be used in conjunction 
with anyone of three Buffer Transfer modes: Single 
Buffer, Auto-Initialized Buffer, and Buffer Chaining. 
Any Data Transfer Modes can be used under any of 
the Buffer Transfer Modes. These modes are inde- 
pendently available for all DMA channels. 


Different devices being serviced by the DMA Con- 
troller require different handshaking sequences for 
data transfers to take place. Three handshaking 
modes are available on the 82380, giving the de- 
signer the opportunity to use the DMA Controller as 
efficiently as possible. The speed at which data can 
be presented or read by a device can affect the way 
a DMA controller uses the host's bus, thereby affect- 
ing not only data throughput during the DMA pro- 
cess, but also affecting the host's performance by 
limiting its access to the bus. 


Single Transfer 
Mode 


In the Single Transfer Mode, one data transfer to or 
from the Requester is performed by the DMA Con- 
troller at a time. The DREQn input is arbitrated and 
the HOLD/HLDA sequence is executed for each 
transfer. Transfers continue in this manner until the 
Byte Count expires, or until EOP# is sampled active. 
If the DREQn input is held active continuously, the 
entire DREQ-HOLD-HLDA-DACK sequence is re- 
peated over and over until the programmed number 
of bytes has been transferred. Bus control is re- 
leased to the host between-each transfer Figure 3-4 
shows the logical flow of events which make up a 
buffer transfer using the Single Transfer Mode. Re- 
fer to section 3.4 for an explanation of the bus con- 
trol arbitration procedure. 
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The Single Transfer Mode is used for devices which 
require complete handshake cycles with each data 
access. Data is transferred to or from the Requester 
only when the Requester is ready to perform the 
transfer. Each transfer requires the entire DREQ- 
HOLD-HLDA-DACK handshake cycle. Figure 3-5 
shows the timing of the Single Transfer Mode cy- 
cles. 


In the Block Transfer Mode, the DMA process is ini- 
tiated by a DMA request and continues until the Byte 
count expires, or until EOP# is activated by the Re- 
quester. The DREQn signal need only be held active 
until the first Requester access. Only a refresh cycle 
will interrupt the block transfer process. 


Figure 3-6 illustrates the operation of the DMA dur- 
ing the Block Transfer Mode. Figure 3-7 shows the 
timing of the handshake signals during Block Mode 
Transfers. 
Figure 3·4. Buffer Transfer 
In 
Single Transfer 
Mode 
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The Demand Transfer Mode provides the most flex- 
ible handshaking procedures during the DMA pro- 
cess. A Demand Transfer is initiated by a DMA re- 
quest. The process continues until the Byte Count 
expires, or an external EOP'" is encountered. If the 
device being serviced (Requester) desires, it can in- 
terrupt 
the 
DMA 
process 
by de-activating 
the 


DREQn line. Action is taken on the condition of 
DREQn during Requester accesses only. The ac- 
cess during which DREQn is sampled inactive is the 
last Requester access which will be performed dur- 
ing the current transfer. Figure 3-8 shows the flow of 
events during the transfer of a buffer in the Demand 
Mode. 


Figure 3·6. Buffer Transfer 
In 
Block Transfer 
Mode 


Tx 
Tx 
Tx 
n 


CLK2 


CLK 


DREOn 


HOLD 


HLDA 


ADS' 


READY' 


A(2-31} 
8E(0-3} 


MIlO' 


EOP, 


Figure 3·8. Buffer Transfer 
In 
Demand 
Transfer 
Mode 


When the DREQn line goes inactive, the DMA con- 
troller will complete the current transfer, including 
any necessary accesses to the Target, and relin- 
quish control of the bus to the host. The current pro- 
cess information is saved (byte count, Requester 
and Target addresses, and Temporary Register). 
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The Requester can restart the transfer process by 
reasserting DREQn. The 82380 will arbitrate the re- 
quest with other pending requests and begin the 
process where it left off. Figure 3-9 shows the timing 
of handshake signals during Demand Transfer Mode 
operation. 


Using the Demand Transfer Mode allows peripherals 
to access memory in small, irregular bursts without 
wasting bus control time. The 82380 is designed to 
give the best possible bus control latency in the De- 
mand Transfer Mode. Bus control latency is defined 
here as the time from the last active bus cycle of the • 
previous bus master to the first active bus cycle of 
the new bus master. The 82380 DMA Controller will 
perform its first bus access cycle two bus states af- 
ter HLDA goes active. In the typical configuration, 
bus control is returned to the host one bus state 
after the DREQn goes inactive. 


There are two cases where there may be more than 
one bus state of bus control latency at the end of a 
transfer. The first is at the end of an Auto-Initialize 
process, and the second is at the end of a process 
where the source is the Requester and Two-Cycle 
transfers are used. 


When a Buffer Auto-Initialize Process is complete, 
the 82380 requires seven bus states to reload the 
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Auto-Initialized 
channel. 
The reloading 
is done while 
the 82380 is still the bus master so that it is prepared 
to service 
the channel 
immediately 
after relinquish- 
ing the bus, if necessary. 


In the case where 
the Requester 
is the source, 
and 
Two-Cycle 
transfers 
are being 
used, there 
are two 
extra idle states 
at the end of the transfer 
process. 
This occurs due to housekeeping 
in the DMA's inter- 
nal pipeline. 
These 
two idle states 
are present 
only 
after 
the 
very 
last 
Requester 
access, 
before 
the 
DMA Controller 
de-activates 
the HOLD signal. 


DMA channel 
priority 
can be programmed 
into one 
of two arbitration 
methods: 
Fixed or Rotating. 
The 
four lower 
DMA channels 
and the four upper 
DMA 
channels 
operate 
as if they were two separate 
DMA 
controllers 
operating 
in cascade. 
The lower group of 
four 
channels 
(0-3) 
is always 
prioritized 
between 
channels 
7 and 4 of the upper group of channels 
(4- 
7). Figure 
3-10 shows 
a pictorial 
representation 
of 
the priority grouping. 


The priority 
can thus be set up as rotating 
for one 
group 
of channels 
and fixed 
for the other, 
or any 
other 
combination. 
While 
in Fixed 
Priority, 
the pro- 
grammer 
can 
also 
specify 
which 
channel 
has the 
lowest 
priority. 
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Figure 
3-10. DMA Priority 
Grouping 


The 82380 DMA Controller 
defaults 
to Fixed Priority. 


Channel 
0 has the highest 
priority, then 1, 2, 3, 4, 5, 


6, 7. Channel 
7 has the lowest 
priority. Any time the 
DMA 
Controller 
arbitrates 
DMA 
requests, 
the 
re- 
questing 
channel 
with 
the 
highest 
priority 
will 
be 
serviced 
next. 


Fixed 
Priority can be entered 
into at any time by a 
software 
command. 
The 
priority 
levels 
in 
effect 


Programmable 
Priority is available 
for fixing the prior- 
ity of the DMA channels 
within a group to levels oth- 
er than the default. 
Through 
a software 
command, 
the channel 
to have the 
lowest 
priority 
in a group 
can 
be specified. 
Each 
of the 
two 
groups 
of four 
channels 
can have the priority fixed in this way. The 
other 
channels 
in the group 
will follow 
the 
natural 
Fixed Priority sequence. 
This mode affects 
only the 
priority 
levels while operating 
with Fixed Priority. 


For example, 
if channel 
2 is programmed 
to have the 
lowest priority in its group, channel 
3 has the highest 
priority. 
In descending 
order, 
the 
other 
channels 
would have the following 
priority: 
(3, 0, 1, 2), 4, 5, 6, 
7 (channel 
2 lowest, channel 
3 highest). 
If the upper 
group were 
programmed 
to have channel 
5 as the 
lowest 
priority channel, 
the priority would 
be (again, 
highest to lowest): 
6, 7, (3, 0, 1,2),4, 
5. Figure 3-11 
shows 
this example 
pictorially. 
The 
lower 
group 
is 
always 
prioritized 
as a fifth 
channel 
of the 
upper 
group (between 
channels 
4 and 7). 
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The DMA Controller 
will only accept 
Programmable 
Priority commands 
while the addressed 
group is op- 
erating in Fixed Priority. Switching 
from Fixed to Ro- 
tating 
Priority 
preserves 
the 
current 
priority 
levels. 
Switching 
from Rotating 
to Fixed Priority returns the 
priority levels to those which were last programmed 
by use of Programmable 
Priority. 


Rotating 
Priority 
allows 
the 
devices 
using 
DMA to 
share 
the 
system 
bus 
more 
evenly. 
An individual 
channel 
does 
not retain 
highest 
priority 
after 
being 
serviced, 
priority is passed to the next highest 
priori- 
ty channel 
in the 
group. 
The 
channel 
which 
was 
most 
recently 
serviced 
inherits 
the 
lowest 
priority. 


This rotation 
occurs each time a channel 
is serviced. 


Figure 3-12 shows the sequence 
of events as priori- 
ty is passed 
between 
channels. 
Note that the lower 
group rotates 
within the upper group, and that serv- 
icing a channel 
within the lower group causes 
rota- 
tion within the group as well as rotation 
of the upper 
group. 
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Figure 3·12. Rotating 
Channel 
Priority. 
Lower and Upper 
groups are programmed 
for the Rotating 
Priority 
Mode. 
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ity modes between the- two groups of channels: 
Fixed Priority only (default), Fixed Priority upper 
group/Rotating Priority lower group, Rotating Priority 
upper group/Fixed Priority lower group, and Rotating 
Priority only. Figure 3-13 illustrates the operation of 
the two combined priority methods. 


Since the DMA Controller operates as two four- 
channel controllers in cascade, the overall priority 
scheme of all eight channels can take on a variety of 
forms. There are four possible combinations of prior- 
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Figure 3-13. Combining 
Priority 
Modes 


Data may be transferred by the DMA Controller us- 
ing two different bus cycle operations: Fly-By (one- 
cycle) and Two-Cycle. These bus handshake meth- 
ods are selectable independently for each channel 
through a command register. Device data path 
widths are independently programmable for both 
Target and Requester. Also selectable through soft- 
ware is the direction of data transfer. All of these 
parameters affect the operation of the 82380 on a 
bus-cycle by bus-cycle basis. 


3.3.6.1 Fly-By Transfers 


The Fly-By Transfer Mode is the fastest and most 
efficient way to use the 82380 DMA Controller to 
transfer data. In this method of transfer, the data is 
written to the destination device at the same time it 
is read from the source. Only one bus cycle is used 
to accomplish the transfer. 


In the Fly-By Mode, the DMA acknowledge signal is 
used to select the Requester. The DMA Controller 
simultaneously places the address of the Target on 
the address bus. The state of M/IO# 
and W/R# 
during the Fly-By transfer cycle indicate the type of 
Target and whether the target is being written to or 
read from. The Target's Bus Size is used as an in- 
crementer for the Byte Count. The Requester ad- 
dress registers are ignored during Fly-By transfers. 


Note that memory-to-memory transfers cannot be 
done using the Fly-By Mode. Only one memory or 
I/O address is generated by the DMA Controller at a 
time during Fly-By transfers. Only one of the devices 
being accessed can be selected by an address. 
Also, the Fly-By method of data transfer limits the 
hardware to accesses of devices with the same data 
bus width. The Temporary Registers are not affect- 
ed in the Fly-By Mode. 


Fly-By transfers also require that the data paths of 
the Target and Requester be directly connected. 
This requires that successive Fly-By accesses be to 
doubleword boundaries, or that the Requester be 
capable of switching its connections to the data bus. 


• 3.3.6.2 Two-Cycle 
Transfers 


Two-Cycle transfers can also be performed by the 
82380 DMA Controller. These transfers require at 
least two bus cycles to execute. The data being 
transferred is read into the DMA Controller's Tempo- 
rary Register during the first bus cycle(s). The sec- 
ond bus cycle is used to write the data from the 
Temporary Register to the destination. 


If the addresses of the data being transferred are 
not word or doubleword aligned, the 82380 will rec- 
ognize the situation and read and write the data in 
groups of bytes, placing them always at the proper 
destination. This process of collecting the desired 
bytes and putting them together is called 'byte as- 
sembly'. The reverse process (reading from aligned 
locations and writing to non-aligned locations) is 
called 'byte disassembly'. 


The assembly/disassembly 
process takes 
place 


transparent to the software, but can only be done 
while using the Two-Cycle transfer method. The • 
82380 will always perform the assembly/disassem- 
bly process as necessary for the current data trans- 
fer. Any data path widths for either the Requester or 
Target can be used in the Two-Cycle Mode. This is 
very convenient for interfacing existing 8- and 16-bit 
peripherals to the 80386's 32-bit bus. 


The 82380 DMA Controller always attempts to fill 
the Temporary Register from the source before writ- 
ing any data to the destination. If the process is ter- 
minated before the Temporary Register is filled (TC 
or EOP#), the 82380 will write the partial data to the 
destination. If a process is temporarily suspended 
(such as when DREQn is de-activated during a de- 
mand transfer), the contents of a partially filled Tem- 
porary Register will be stored within the 82380 until 
the process is restarted. 


For example, if the source is specified as an 8-bit 
device and the destination as a 32-bit device, there 
will be four reads as necessary from the 8-bit source 
to fill the Temporary Register. Then the 82380 will 
write the 32-bit contents to the destination. This cy- 
cle will repeat until the process is terminated or sus- 
pended. 


Note that for a Single-Cycle transfer mode of opera- 
tion (see section 3.3.3), the internal circuitry of the 
DMA Controller actually executes single transfers by 
removing the DREQ from the internal arbitration 
Thus single transfers from an 8-bit requester to a 32- 
bit target will consist of four complete and indepen- 
dent 8-bit requester cycles, between which bus con- 
trol is released and re-requested. Finally, the 32-bit 
data will be transferred to the target device from the 
temporary register before the fifth requester cycle. 


With Two-Cycle transfers, the devices that the 
82380 accesses can reside at any address within 
I/O or memory space. The device must be able to 
decode the byte-enables (BEn#). Also, if the deVice 
cannot accept data in byte quantities, the program- 
mer must take care not to allow the DMA Controller 
to access the device on any address other than the 
device boundary. 
. 


Considerations 


The number of bus cycles used to transfer a single 
'word' of data is affected by whether the Two-Cycle 
or the Fly-By (Single-Cycle) transfer method is used. 


The number of bus cycles used to transfer data di- 
rectly affects the data transfer rate. Inefficient use of 
bus cycles will decrease the effective data transfer 
rate that can be obtained. Generally, the data trans- 
fer rate is halved by using Two-Cycle transfers in- 
stead of Fly-By transfers. 


The choice of data path widths of both Target and 
Requester affects the data transfer rate also. During 
each bus cycle, the largest pieces of data possible 
should be transferred. 


The data path width of the devices to be accessed 
must be programmed into the DMA controller. The 
82380 defaults after reset to 8-bit-to-8-bit data trans- 
fers, but the Target and Requester can have differ- 
ent data path widths, independent of each other and 
independent of the other channels. Since this is a 
software programmable function, more discussion of 
the uses of this feature are found in the section on 
programming. 


3.3.6.4 Read, Write, and Verify 
Cycles 


Three different bus cycle types may be used in a 
data transfer. They are the Read, Write, and Verify 
cycles. These cycle types dictate the way in which 
the 82380 operates on the data to be transferred. 


A Read Cycle transfers data from the Target to the 
Requester. A Write Cycle transfers data from the 
Requester to the target. In a Fly-By transfer, the ad- 
dress and bus status signals indicate the access 
(read or write) to the Target; the access to the Re- 
quester is assumed to be the opposite. 


The Verify Cycle is used to perform a data read only. 
No write access is indicated or assumed in a Verify 
Cycle. The Verify Cycle is useful for validating block 
fill operations. An external comparator must be pro- 
vided to do any comparisons on the data read. 


3.4 
Bus Arbitration 
and Handshaking 


Figure 3-14 shows the flow of events in the DMA 
request 
arbitration 
process. The 
arbitration 
se- 
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(or DMA service is requested by software). Figure 
3-15 shows the timing of the sequence of events 
following a DMA request. This sequence is executed 
for each channel that is activated. The DREQn sig- 
nal can be replaced by a software DMA channel re- 
quest with no change in the sequence. 


After the Requester asserts the service request, the 
82380 will request control of the bus via the HOLD 
signal. The 82380 will always assert the HOLD sig- 
nal one bus state after the service request is assert- 
ed. The 80386 responds by asserting the HLDA sig- 
nal, thus releasing control of the bus to the 82380 
DMA Controller. 


Priority of pending DMA service requests is arbitrat- 
ed during the first state after HLDA is asserted by 
the 80386. The next state will be the beginning of 
the first transfer access of the highest priority pro- 
cess. 


When the 82380 DMA Controller is finished with its 
current bus activity, it returns control of the bus to 
the host processor. This is done by driving the 
HOLD signal inactive. The 82380 does not drive any 
address or data bus signals after HOLD goes low. It 
enters the Slave Mode until another DMA process is 
requested. The processor acknowledges that it has 
regained control of the bus by forcing the HLDA sig- 
nal inactive. Note that the 82380's DMA Controller 
will not re-request control of the bus until the entire 
HOLD/HLDA handshake sequence is complete. 


The 82380 DMA Controller will terminate a current 
DMA process for one of three reasons: expired byte 
count, end-of-process command (EOP# activated) 
from a peripheral, or de-activated DMA request sig- 
nal. In each case, the controller will de-assert HOLD 
immediately after completing the data transfer in 
progress. These three methods of process termina- 
tion are illustrated in Figures 3-16, 3-19, and 3-18, 
respectively. 


An expired byte count indicates that the current pro- 
cess is complete as programmed and the channel 
has no further transfers to process. The channel 
must be restarted according to the currently pro- 
grammed Buffer Transfer Mode, or reprogrammed 
completely, including a new Buffer Transfer Mode. 


If the peripheral activates the EOP# signal, it is indi- 
cating that it will not accept or deliver any more data 
for the current buffer. The 82380 DMA Controller 
considers this as a completion of the channel's cur- 
rent process and interprets the condition the same 
way as if the byte count expired. 


The action taken by the 82380 DMA Controller in 
response to a de-activated DREQn signal depends 
on the Data Transfer Mode of the channel. In the 
Demand Mode, data transfers will take place as long 
as the DREQn is active and the byte count has not 
expired. In the Block Mode, the controller will com- 
plete the entire block transfer without relinquishing 


CLK2 


CLK 


DREQn 


HOLD 


HLDA 


A(2-31) 
8E(0-3)# 
M/IO# 


EDACK(0-2) 
100 
n 


ADS# 


READY# 


NOTE: 
Channel priority resolution takes place during the bus state before HLDA is asserted, allowing the DMA Controller to 
respond to HLDA without extra idle bus states. 


the 
bus, 
even 
if DREQn 
goes 
inactive 
before 
the 
transfer 
is complete. 
In the Single Mode, the control- 
ler will execute 
single 
data 
transfers, 
relinquishing 
the bus between 
each transfer, 
as long as DREQn is 
active. 


in Figure 3-16. The condition 
of DREQn 
is ignored 
until after the process 
is terminated. 
If the channel 
is 


programmed 
to auto-initialize, 
HOLD will be held ac- 


tive for an additional 
seven 
clock 
cycles 
while 
the 


auto-initialization 
takes place. 


Normal termination 
of a DMA process 
due to expira- 
tion of the byte count (Terminal 
Count-TC) 
is shown 
Table 
3-3 shows 
the 
DMA 
channel 
activity 
due to 


EOP# 
or Byte Count expiring 
(Terminal 
Count). 
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The 82380 always relinquishes control of the bus 
between channel services. This allows the hardware 
designer the flexibility to externally arbitrate bus hold 
requests, if desired. If another DMA request is pend- 
ing when a higher priority channel service is com- 
pleted, the 82380 will relinquish the bus until the 
hold acknowledge is inactive. One bus state after 
the HLDA signal goes inactive, the 82380 will assert 
HOLD again. This is illustrated in Figure 3-17. 


3.4.1 SYNCHRONOUS 
AND ASYNCHRONOUS 
SAMPLING 
OF DREQn 
AND EOP# 


As an indicator that a DMA service is to be started, 
DREQn is always sampled asynchronously. It is 
sampled at the beginning of a bus state and acted 
upon at the end of the state. Figure 3-15 illustrates 
the start of a DMA process due to a DREQn input. 


The DREQn and EOP# inputs can be programmed 
to be sampled either synchronously or asynchro- 
nously to signal the end of a transfer. 


The synchronous mode affords the Requester one 
bus state of extra time to react to an access. This 
means the Requester can terminate a process on 
the current access, without losing any data. The 
asynchronous mode requires that the input signal be 
presented prior to the beginning of the last state of 
the Requester access. 


The timing relationships of the DREQn and EOP# 
signals to the termination of a DMA transfer are 
shown in Figures 3-18 and 3-19. Figure 3-18 shows 
the termination of a DMA transfer due to inactive 
DREQn. Figure 3-19 shows the termination of a 
DMA process due to an active EOP# input. 


In the Synchronous Mode, DREQn and EOP# are 
sampled at the end of the last state of every Re- 
quester data transfer cycle. If EOP# is active or 
DREQn is inactive at this time, the 82380 recognizes 
this access to the Requester as the last transfer. At 
this point, the 82380 completes the transfer in prog- • 
ress, if necessary, and returns bus control to the 
host. 


In the asynchronous mode, the inputs are sampled 
at the beginning of every state of a Requester ac- 
cess. The 82380 waits until the end of the state to 
act on the input. 


DREQn and EOP# are sampled at the latest possi- 
ble time when the 82380 can determine if another 
transfer is required. In the Synchronous Mode, 
DREQn and EOP# are sampled on the trailing edge 
of the last bus state before another data access cy- 
cle begins. The Asynchronous Mode requires that 
the signals be valid one clock cycle earlier. 
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While in the Pipeline Mode, if the NA# signal is sam- 
pled active during a transfer, the end of the state 
where NA# was sampled active is when the 82380 
decides whether to commit to another transfer. The 
device must de-assert DREQn or assert EOP# be- 
fore NA# is asserted, otherwise the 82380 will com- 
mit to another, possibly undesired, transfer. 


Synchronous DREQn and EOP# sampling allows 
the peripheral to prevent the next transfer from oc- 
curring by de-activating DREQn or asserting EOP# 
during the current Requester access, before the 
82380 DMA Controller commits itself to another 
transfer. The DMA Controller will not perform the 
next transfer if it has not already begun the bus cy- 
cle. Asynchronous sampling allows less stringent 
timing requirements than the Synchronous Mode, 
but requires that the DREQn signal be valid at the 
beginning of the next to last bus state of the current 
Requester access. 


Using the Asynchronous Mode with zero wait states 
can be very difficult. Since the addresses and con- 
trol signals are driven by the 82380 near half-way 
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through the first bus state of a transfer, and tne 
Asynchronous Mode requires that DREQn be active 
before the end of the state, the peripheral being ac- 
cessed is required to present DREQn only a few 
nanoseconds after the control information is avail- 
able. This means that the peripheral's control logic 
must be extremely fast (practically non-causal). An 
alternative is the Synchronous Mode. 


3.4.2 ARBITRATION 
OF CASCADED 
MASTER 
REQUESTS 


The Cascade Mode allows another DMA-type de- 
vice to share the bus by arbitrating its bus accesses 
with the 82380's. Seven of the eight DMA channels 
(0-3 and 5-7) can be connected to a cascaded de- 
vice. The cascaded device requests bus control 
through the DREQn line of the channel which is pro- 
grammed to operate in Cascade Mode. Bus hold ac- 
knowledge is signaled to the cascaded 
device 
through the EDACK lines. When the EDACK lines 
are active with the code for the requested cascade 
channel, the bus is available to the cascaded master 
device. 
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A Cascade 
cycle 
begins 
the 
same 
way 
a regular 
DMA cycle 
begins. 
The requesting 
bus master 
as- 
serts the DREQn line on the 82380. This bus control 
request 
arbitrated 
as any other 
DMA request 
would 
be. 
If any 
channel 
receives 
a DMA 
request, 
the 
82380 
requests 
control 
of the bus. When 
the host 
acknowledges 
that 
it has released 
bus control, 
the 
82380 acknowledges 
to the requesting 
master that it 
may access 
the bus. The 82380 enters an idle state 
until the new master 
relinquishes 
control. 


A cascade 
cycle 
will be terminated 
by one of two 
events: 
DREQn 
going inactive, 
or HLDA going inac- 
tive. The normal way to terminate 
the cascade 
cycle 


is for the cascaded 
master 
to drop the DREQn 
sig- 
nal. Figure 3-21 shows the two cascade 
cycle termi- 
nation sequences. 


The Refresh 
Controller 
may interrupt 
the cascaded 
master to perform 
a refresh cycle. 
If this occurs, 
the 
82380 DMA Controller 
will de-assert 
the EDACK sig- 
nal (hold acknOWledge to cascaded 
master) and wait 
for the cascaded 
master to remove 
its hold request. 


When the 82380 
regains 
bus control, 
it will perform 
the refresh 
cycle in its normal fashion. 
After the re- 
fresh cycle has been completed, 
and if the cascad- 
ed device 
has re-asserted 
its request, 
the 82380 will 
return control 
to the cascaded 
master which was in- 
terrupted. 
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The 82380 assumes that it is the only device moni- 
toring the HLDA signal. If the system designer 
wishes to place other devices on the bus as bus 
masters, the HLDA from the processor must be in- 
tercepted before presenting it to the 82380. Using 
the Cascade capability of the 82380 DMA Controller 
offers a much better solution. 


3.4.3 ARBITRATION OF REFRESH REQUESTS 


The arbitration of refresh requests by the DRAM Re- 
fresh Controller is slightly different from normal DMA 
channel request arbitration. The 82380 DRAM Re- 
fresh Controller always has the highest priority of 
any DMA process. It also can interrupt a process in 
progress. Two types of processes in progress may 
be encountered: normal DMA, and bus master cas- 
cade. 


In the event of a refresh request during a normal 
DMA process, the DMA Controller will complete the 
data transfer in progress and then execute the re- 
fresh cycle before continuing with the current DMA 
process. The priority of the interrupted process is 
not lost. If the data transfer cycle interrupted by the 
Refresh Controller is the last of a DMA process, the 
refresh cycle will always be executed before control 
of the bus is transferred back to the host. 


When the Refresh Controller request occurs during 
a cascade cycle, the Refresh Controller must be as- 
sured that the cascaded master device has relin- 
quished control of the bus before it can execute the 
refresh cycle. To do this, the DMA Controller drops 
the EDACK signal to the cascaded master and waits 
for the corresponding DREQn input to go inactive. 
By dropping the DREQn signal, the cascaded mas- 
ter relinquishes the bus. The Refresh Controller then 
performs the refresh cycle. Control of the bus is re- 
turned to the cascaded master if DREQn returns to 
an active state before the end of the refresh cycle, 
otherwise control is passed to the processor and the 
cascaded master loses its priority. 


3.5 DMA Controller Register Overview 


The 82380 DMA Controller contains 44 registers 
which are accessable to the host processor. Twen- 
ty-four of these registers contain the device ad- 
dresses and data counts for the individual DMA 
channels (three per channel). The remaining regis- 
ters are control and status registers for initiating and 
monitoring the operation of the 82380 DMA Control- 
ler. Table 3-4 lists the DMA Controller's registers 
and their accessability. 


Register Name 
Access 


Control/Status 
Register-one 
Each Per 
Group 
Command Register I 
Write Only 
Command Register II 
Write Only 
Mode Register I 
Write Only 
Mode Register II 
Write Only 
Software Request Register 
Read/Write 
Mas.kSet-Reset Register 
Write Only 
Mask Read-Write Register 
Read/Write 
Status Register 
Read Only 
Bus Size Register 
Write Only 
Chaining Register 
Read/Write 


Channel Reglsters-Qne 
Each Per Channel 
Base Target Address 
Write Only 
Current Target Address 
Read Only 
Base Requester Address 
Write Only 
Current Requester Address 
Read Only 
Base Byte Count 
Write Only 
Current Byte Count 
Read Only 


Table 3·4. DMA Controller Registers 


The following registers are available to the host 
processor for programming the 82380 DMA Control- 
ler into its various modes and for checking the oper- 
ating status of the DMA processes. Each set of four 
DMA channels has one of each of these registers 
associated with it. 


Command Register I 


Enables or disables the DMA channels as a group. 
Sets the Priority Mode (Fixed or Rotating) of the 
group. This write-only register is cleared by a hard- 
ware reset, defaulting to all channels enabled and 
Fixed Priority Mode. 


Command Register II 


Sets the sampling mode of the DREQn and EOP# 
inputs. Also sets the lowest priority channel for the 
group in the Fixed Priority Mode. The functions pro- 
grammed through Command Register II default after 
a hardware reset to: asynchronous DREQn and 
EOP#, and channels 3 and 7 lowest priority. 


Mode Register I 


Mode Register I is Identical in function to the Mode 
register of the 8237A. It programs the following func- 
tions for an indiViduallyselected channel: 


Type of Transfer-read, 
write, verify 
Auto-Initialize-enable 
or disable 
Target Address Count-increment 
or 
decrement 
Data Transfer Mode-demand, 
single, block, 
cascade 


Mode Register I functions default to the following 
after reset: verify transfer, Auto-Initialize disabled, In- 
crement Target address, Demand Mode. 


Programs the following functions for an individually 
selected channel: 


Target Address Hold-enable 
or disable 
Requester Address Count-increment 
or 
decrement 
Requester Address Hold-enable 
or disable 
Target Device Type-I/O 
or Memory 
Requester Device Type-I/O 
or Memory 
Transfer Cycles- Two-Cycle or Fly-By 


Mode Register II functions are defined as follows 
after a hardware reset: Disable Target Address Hold, 
Increment Requester Address, Target (and Re- 
quester) in memory, Fly-By Transfer Cycles. Note: 
Requester Device Type ignored in Fly-By Transfers. 


Software 
Request 
Register 


The DMA Controller can respond to service requests 
which are initiated by software. Each channel has an 
internal request status bit associated with it. The 
host processor can write to this register to set or 
reset the request bit of a selected channel. 


The status of the group's software DMA service re- 
quests can be read from this register as well. Each 
request bit is cleared upon Terminal Count or exter- 
nal EOP#. 


The software DMA requests are non-maskable and 
subject to priority arbitration with all other software 
and 
hardware 
requests. The 
entire 
register 
is 
cleared by a hardware reset. 


Each channel has associated with it a mask bit 
which can be set/reset to disable/enable that chan- 
nel. Two methods are available for setting and clear- 
ing the mask bits. The Mask Set/Reset Register is a 
write-only register which allows the host to select an 
individual channel and either set or reset the mask 
bit for that channel only. The Mask Read/Write Reg- 
ister is available for reading the mask bit status and 
for writing mask bits in groups of four. 


The mask bits of a group may be cleared in one step 
by executing the Clear Mask Command. See the 
DMA Programming section for details. A hardware 
reset sets all of the channel mask bits, disabling all 
channels. 


The Status register is a read-only register which con- 
tains the Terminal Count (TC) and Service Request 
status for a group. Four bits indicate the TC status 
and four bits indicate the hardware request status 
for the four channels in the group. The TC bits are 
set when the Byte Count expires, or when an exter- 
nal EOP# is asserted. These bits are cleared by 
reading from the Status Register. The Service Re- 
quest bit for a channel indicates when there is a 
hardware DMA request (DREQn) asserted for that 
channel. When the request has been removed, the 
bit is cleared. 


This write-only register is used to define the bus size 
of the Target and Requester of a selected channel. 
The bus sizes programmed will be used to dictate 
the sizes of the data paths accessed when the DMA 
channel is active. The values programmed into this 
register affect the operation of the Temporary Regis- 
ter. Any byte-assembly required to make the trans- 
fers using the specified data path widths will be done 
in the Temporary Register. The Bus Size register of 
the Target is used as an increment/decrement value 
for the Byte Counter and Target Address when in 
the Fly-By Mode. Upon reset, all channels default to 
8-bit Targets and 8-bit Requesters. 


As a command or write register, the Chaining regis- 
ter is used to enable or disable the Chaining Mode 
for a selected channel. Chaining can either be dis- 
abled or enabled for an individual channel, indepen- 
dently of the Chaining Mode status of other chan- 
nels. After a hardware reset, all channels default to 
Chaining disabled. 


When read by the host, the Chaining Register pro- 
vides the status of the Chaining Interrupt of each of 
the channels. These interrupt status bits are cleared 
when the new buffer information has been loaded. 


Each channel has three individually programmable 
registers necessary for the DMA process; they are 
the Base Byte Count, Base Target Address, and 
Base Requester Address registers. The 24-bit Base 
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be transferred 
by the channel. 
The 32-bit Base Tar- 
get 
Address 
Register 
contains 
the 
beginning 
ad- 
dress (memory 
or I/O) of the Target device. The 32- 
bit Base 
Requester 
Address 
register 
contains 
the 
base address 
(memory 
or I/O) of the device which is 
to request 
DMA service. 


Three 
more 
registers 
for each 
DMA 
channel 
exist 
within the DMA Controller 
which 
are directly 
related 
to the 
registers 
mentioned 
above. 
These 
registers 
contain 
the current status of the DMA process. 
They 
are the Current 
Byte Count register, the Current Tar- 
get Address, 
and the Current 
Requester 
Address. 
It 
is these registers 
which are manipulated 
(increment- 
ed, decremented, 
or held 
constant) 
by the 
82380 
DMA Controller 
during the DMA process. 
The Cur- 
rent registers 
are loaded 
from the Base registers. 


The Base registers 
are loaded 
when the host proc- 
essor 
writes 
to the respective 
channel 
register 
ad- 
dresses. 
Depending 
on the mode in which the chan- 
nel is operating, 
the Current 
registers 
are typically 
loaded 
in the 
same 
operation. 
Reading 
from 
the 
channel 
register 
addresses 
yields 
the 
contents 
of 
the corresponding 
Current 
register. 


To 
maintain 
compatibility 
with 
software 
which 
ac- 
cesses an 8237 A, a Byte Pointer Flip-Flop 
is used to 
control 
access to the upper and lower bytes of some 
words 
of the Channel 
Registers. 
These 
words 
are 
accessed 
as byte pairs at single port addresses. 
The 
Byte 
Pointer 
Flip-Flop 
acts 
as 
a 
one-bit 
pointer 
which 
is toggled 
each 
time 
a qualifying 
Channel 
Register 
byte 
is accessed. 
It always 
points 
to the 
next logical 
byte to be accessed 
of a pair of bytes. 


The 
Channel 
registers 
are 
arranged 
as 
pairs 
of 
words, each pair with its own port address. 
Address- 
ing the port with the Byte Pointer 
Flip-Flop 
reset ac- 
cesses 
the 
least 
significant 
byte 
of the 
pair. The 
most 
significant 
byte 
is accessed 
when 
the 
Byte 
Pointer 
is set. 


For compatibility 
with existing 
8237 A designs, 
there 
is one exception 
to the above 
statements 
about the 
Byte Pointer Flip-Flop. 
The third byte (bits 16-23) 
of 
the Target Address 
is accessed 
through 
its own port 
address. 
The Byte Pointer 
Flip-Flop 
is not affected 
by any accesses 
to this byte. 


The upper eight bits of the Byte Count Register 
are 
cleared 
when the least significant 
byte of the regis- 
ter is loaded. 
This 
provides 
compatibility 
with soft- 
ware 
which 
accesses 
an 8237 A. The 
8237 A has 
16-bit Byte Count Registers. 


Each channel 
has a 32-bit Temporary 
Register 
used 
for temporary 
data 
storage 
during 
two-cycle 
DMA 
transfers. 
It is this register 
in which 
any necessary 
byte assembly 
and disassembly 
of non-aligned 
data 
is performed. 
Figure 3-22 shows how a block of data 
will be moved between 
memory 
locations 
with differ- 
ent boundaries. 
Note that the order of the data does 
not change. 


DESTINATION 


50H 


51H 


52H 


53H 


54H 


55H 


56H 


57H 


58H 


59H 


5AH 


SOURCE 


20H 


21H 


22H 


23H 


24H 


25H 


26H 


27H 


A 


B 


C 


D 


E 


F 


G 


A 
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D 


E 


F 
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Target 
= source = 00000020H 
Requester 
= destination 
= 00000053H 
Byte Count = 000006H 
Figure 3·22. Transfer 
of Data between 
Memory 
Locations 
with Different 
Boundaries. 
This will be 
the result, Independent 
of data path width. 


If the destination 
is the Requester 
and an early pro- 


cess termination 
has been indicated 
by the 
EOP# 
signal or DREQn 
inactive 
in the Demand 
Mode, the 
Temporary 
Register 
is not affected. 
If data remains 
in the Temporary 
Register 
due to differences 
in data 
path widths 
of the Target 
and Requester, 
it will not 
be transferred 
or otherwise 
lost, but will be stored for 


later transfer. 


If the destination 
is the Target and the EOP# 
signal 
is sensed 
active 
during the Requester 
access 
of a 
transfer, 
the DMA Controller 
will complete 
the trans- 
fer by sending 
to the Target whatever 
information 
is 
in the 
Temporary 
Register 
at the time 
of process 
termination. 
This 
implies 
that 
the 
Target 
could 
be 
accessed 
with partial 
data. For this reason 
it is ad- 
visable 
to have an I/O device 
designated 
as a Re- 
quester, 
unless it is capable 
of handling 
partial data 
transfers. 
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· 3.6 
DMA Controller 
Programming 


Programming a DMA Channel to perform a needed 
DMA function is in general a four step process. First 
the global attributes of the DMA Controller are pro- 
grammed via the two Command Registers. These 
global attributes include: priority levels, channel 
group enables, priority mode, and DREQn/EOP# in- 
put sampling. 


The second step involves setting the operating 
modes of the particular channel. The Mode Regis- 
ters are used to define the type of transfer and the 
handshaking modes. The Bus Size Register and 
Chaining Register may also need to be programmed 
in this step. 


The third step is setting up the channel is to load the 
Base Registers in accordance with the needs of the 
operating modes chosen in step two. The Current 
Registers are automatically loaded from the Base 
Registers, if required by the Buffer Transfer Mode in 
effect. The information loaded and the order in 
which it is loaded depends on the operating mode. A 
channel used for cascading, for example, needs no 
buffer information and this step can be skipped en- 
tirely. 


The last step is to enable the newly programmed 
channel using one of the Mask Registers. The chan- 
nel is then available to perform the desired data 
transfer. The status of the channel can be observed 
at any time through the Status Register, Mask Reg- 
ister, Chaining Register, and Software Request reg- 
ister. 


Once the channel is programmed and enabled, the 
DMA process may be initiated in one of two ways, 
either by a hardware DMA request (DREQn) or a 
software request (Software Request Register). 


Once programmed to a particular Process/Mode 
configuration, the channel will operate in that config- 
uration until programmed otherwise. For this reason, 
restarting a channel after the current buffer expires 
does not require complete reprogramming of the 
channel. 
Only 
those 
parameters 
which 
have 
changed need to be reprogrammed. The Byte Count 


Register is always changed and must be repro- 
grammed. A Target or Requester Address Register 
which is incremented or decremented should be re- 
programmed also. 


The Buffer Process is determined by the Auto-Initial- 
ize bit of Mode Register I and the Chaining Register. 
If Auto-Initialize is enabled, Chaining should not be 
used. 


3.6.1.1 Single Buffer 
Process 


The Single Buffer Process is programmed by dis- 
abling Chaining via the Chaining Register and pro- 
gramming Mode Register I for non-Auto-Initialize. 


Setting the Auto-Initialize bit in Mode Register I is all 
that is necessary to place the channel in this mode. 
Buffer Auto-Initialize must not be enabled simulta- 
neous to enabling the Buffer Chaining Mode as this 
will have unpredictable results. 


Once the Base Registers are loaded, the channel is 
ready to be enabled. The channel will reload its Cur- 
rent Registers from the Base Registers each time 
the Current Buffer expires, either by an expired Byte 
Count or an external EOP#. 


3.6.1.3 Buffer Chaining 
Process 


The Buffer Chaining Process is entered into from the 
Single Buffer Process. The Mode Registers should 
be programmed first, with all of the Transfer Modes 
defined as if the channel were to operate in the Sin- 
gle Buffer Process. The channel's Base and Current 
Registers are then loaded. When the channel has 
been set up in this way, and the chaining interrupt 
service routine is in place, the Chaining Process can 
be entered by programming the Chaining Register. 
Figure 3.23 illustrates the Buffer Chaining Process. 


An interrupt (IRQ1) will be generated immediately af- 
ter the Chaining Process is entered, as the channel 


then perceives the Base Registers as empty and in 
need of reloading. It is important to have the inter- 
rupt service routine in place at the time the Chaining 
Process is entered into. The interrupt request is re- 
moved when the most significant byte of the Base 
Target Address is loaded. 


The interrupt will occur again when the first buffer 
expires and the Current Registers are loaded from 
the Base Registers. The cycle continues until the 
Chaining Process is disabled, or the host fails to re- 
spond to IRQ1 before the Current Buffer expires. 


FROM THIS 
POINT, 
THE HOST CAN 
PERFORM 
ANOTHER 
TASK. 
THE INTERRUPT 
SERVICE 
ROUTINE 
LEFT BEHIND 
WILL 
MAINTAIN 
THE CHANNEL. 


Figure 3-23. Flow of Events In the 
Buffer Chaining 
Process 


Exiting the Chaining Process can be done by reset· 
ting the Chaining Mode Register. If an interrupt is 
pending for the channel when the Chaining Register 
is reset, the interrupt request will be removed. The 
Chaining Process can be temporarily disabled by 
setting the channel's Mask bit in the Mask Register. 


The interrupt service routine for IRQ1 has the re- 
sponsibility of reloading the Base Register as neces- 
sary. It should check the status of the channel to 
determine the cause of channel expiration, etc. It 
should also have access to operating system infor- 
mation regarding the channel, if any exists. The • 
IRQ1 service routine should be capable of determin- 
ing whether the chain should be continued or termi- 
nated and act on that information. 


The Data Transfer Modes are selected via Mode 
Register I. The Demand, Single, and Block Modes 
are selected by bits D6 and D7. The individual trans- 
fer type (Fly-By vs Two-Cycle, Read-Write-Verify, 
and 1/0 vs Memory) is programmed through both of 
the Mode registers. 


The Cascade Mode is set by writing ones to D7 and 
D6 of Mode Register I. When a channel is pro- 
grammed to operate in the Cascade Mode, all of the 
other modes associated with Mode Registers I and II 
are ignored. The priority and DREQn/EOP# 
defini- 
tions of the Command Registers will have the same 
effect on the channel's operation as any other 
mode. 


There are five port addresses which, when written 
to, command certain operations to be performed by 
the 82380 DMA Controller. The data written to these 
locations is not of consequence, writing to the loca- 
tion is all that is necessary to command the 82380 to 
perform the indicated function. Following are de- 
scriptions of the command function. 


Resets the Byte Pointer Flip-Flop. This command 
should be performed at the beginning of any access 
to the channel registers in order to be assured of 
beginning at a predictable place in the register pro- 
gramming sequence. 


All DMA functions are set to their default states. This 
command is the equivalent of a hardware reset to 
the DMA Controller. Functions other than those in 
the DMA Controller section of the 82380 are not af- 
fected by this command. 


Clear Mask 
Register 
-Channels 
0-3-location 
OOOEH 
Channels 4-7-location 
OOCEH 


This command simultaneously clears the Mask Bits 
of all channels in the addressed group, enabling all 
of the channels in the group. 


Clear TC Interrupt Request-location 
001EH 


This command resets the Terminal Count Interrupt 
Request Flip-Flop. It is provided to allow the pro- 
gram which made a software DMA request to ac- 
knowledge that it has responded to the expiration of 
the requested channel(s). 


The following diagrams outline the bit definitions and 
functions of the 82380 DMA Controller's Status and 
Control Registers. The function and programming of 
the registers is covered in the previous section on 
DMA Controller Programming.An entry of 'X' as a bit 
value indicates "don't care." 


Channel 
Registers 
(Read Current, 
Write Base) 


Channel 
Register 
Name 
Address 
Byte 
Bits 
(Hex) 
Pointer 
Accessed 


Channel 0 
Target Address 
00 
0 
0-7 
1 
8-15 
87 
x 
16-23 
10 
0 
24-31 
Byte Count 
01 
0 
0-7 
1 
8-15 
11 
0 
16-23 
Requester Address 
90 
0 
0-7 
1 
8-15 
91 
0 
16-23 
1 
24-31 


Channel 1 
Target Address 
02 
0 
0-7 
1 
8-15 
83 
x 
16-23 
12 
0 
24-31 
Byte Count 
03 
0 
0-7 
1 
8-15 
13 
0 
16-23 
Requester Address 
92 
0 
0-7 
1 
8-15 
93 
0 
16-23 
1 
24-31 


Channel 
Registers 
,"eau \"urrem, wrlle Dase, 


Channel 
Register 
Name 
Addreaa 
Byte 
Bits 
(Hex) 
Pointer 
Accessed 


Channel 2 
Target Address 
04 
0 
0-7 
1 
8-15 
81 
x 
16-23 
14 
0 
24-31 
Byte Count 
05 
0 
0-7 
1 
8-15 
15 
0 
16-23 
Requester Address 
94 
0 
0-7 
1 
8-15 
95 
0 
16-23 
1 
24-31 


Channel 3 
Target Address 
06 
0 
0-7 
1 
8-15 
82 
x 
16-23 
16 
0 
24-31 
Byte Count 
07 
0 
0-7 
1 
8-15 
17 
0 
16-23 
Requester Address 
96 
0 
0-7 
1 
8-15 
97 
0 
16-23 
1 
24-31 


Channel 4 
Target Address 
CO 
0 
0-7 
1 
8-15 
8F 
x 
16-23 
DO 
0 
24-31 
Byte Count 
C1 
0 
0-7 
1 
8-15 
01 
0 
16-23 
Requester Address 
98 
0 
0-7 
1 
8-15 
99 
0 
16-23 
1 
24-31 


Channel 5 
Target Address 
C2 
0 
0-7 
1 
8-15 
8B 
x 
16-23 
02 
0 
24-31 
Byte Count 
C3 
0 
0-7 
1 
8-15 
03 
0 
16-23 
Requester Address 
9A 
0 
0-7 
1 
8-15 
9B 
0 
16-23 
1 
24-31 


• 


intel~ 


Channel 
Registers 
(Read Current, 
Write Base) 
Register 
Name 
Address 
Byte 
Bits 
Channel 
(Hex) 
Pointer 
Accessed 


Channel 6 
Target Address 
C4 
0 
0-7 
1 
8-15 
89 
x 
16-23 
04 
0 
24-31 
Byte Count 
C5 
0 
0-7 
1 
8-15 
05 
0 
16-23 
Requester Address 
9C 
0 
0-7 
1 
8-15 
90 
0 
16-23 
1 
24-31 


Channel 7 
Target Address 
C6 
0 
0-7 
1 
8-15 
8A 
x 
16-23 
06 
0 
24-31 
Byte Count 
C7 
0 
0-7 
1 
8-15 
07 
0 
16-23 
Requester Address 
9E 
0 
0-7 
1 
8-15 
9F 
0 
16-23 
1 
24-31 


Port Address-Channels 
0-3-Q008H 
Channels 4-7-QOC8H 


GROUP 
~ASK 
0= 
ENABLE 
CHANNELS 
1 = DISABLE 
CHANNELS 


PRIORITY 
0= 
F1XEO PRIORITY 
1 = ROTATING 
PRIORITY 


Port Addresses-Channels 
0-3-001AH 
Channels 4-7-Q00AH 


OREOn 
SA~PLlNG 
EOP, 
SA~PLlNG 
0= 
ASYNCHRONOUS 
1 = SYNCHRONOUS 


LOW PRIORITY 
LEVEL 
SET 
00 = CHANNEL 
0(4) 
LOWEST 
01 = CHANNEL 
1 (5) 
LOWEST 
10= 
CHANNEL 
2(6) 
LOWEST 
11 = CHANNEL 
3 (7) 
LOWEST 


intel~ 


Port Addresses-Channels 
0-3-{)OOBH 
Channels 4-7-o0CBH 


Port Addresses-Channels 
0-3-{)01 
BH 
Channels 4-7-o0DBH 


CHANNEL 
SELECT 
00 = CHANNEL 
01 = CHANNEL 
10 = CHANNEL 
11 = CHANNEL 


TRANSFER 
TYPE 
00 = VERIFY 
01 = WRITE 
10=REAO 
11 = ILLEGAL 
xx IF IN CASCADE MODE 


AUTO-INITIALIZE 
0= 
DISABLE, 
1 = ENABLE 


TARGET INCREMENT IDECREMENT 
0= 
INCREMENT 'TARGET 
1 = DECREMENT TARGET· 
X IF TARGET HOLO ENABLEO 


OATA TRANSFER 
MODE 
00 = DEMAND MODE 
01 = SINGLE TRANSFER 
MODE 
10 = BLOCK MODE 
11 = CASCADE MODE 


CHANNEL 
SELECT 
SEE MODE REGISTER I 


TARGET HOLD 
0= 
INCREMENT/DECREMENT 
1 =HOLD 


REQUESTER INCREMENT 
0= 
INCREMENT 
1 = DECREMENT· 
X IF REQUESTER HOLD ENABLED 


REQUESTER HOLD 
o = INCREMENT/DECREMENT 
1 =HOLD 


TARGET DEViCE TYPE 
O=MEMORY 
1 = INPUT/OUTPUT 


REQUESTER DEViCE TYPE 
O=MEMORY 
1 = INPUT/OUTPUT 


TRANSFER CYCLES 
o = ONE-CYCLE 
(FLY-BY) 
1 = TWO-CYCLE 


• 


Port Addresses-Channels 0-3-{)009H 
Channels4-7-{)OC9H' 


Port Addresses-Channels 0-3-{)OOAH 
Channels4-7-{)OCAH 


CHANNEL SELECT 
SEE MODE REGISTER I 


REQUEST SERVICE 
o = REMOVE REQUEST 
, = ASSERT REQUEST 


CHANNEL 0 (4) 
REQUEST 
CHANNEL 
1 (5) 
REQUEST 
CHANNEL 2 (6) 
REQUEST 
CHANNEL 3 (7) 
REQUEST 


CHANNEL SELECT 
SEE MODE REGISTER I 


MASK SET BIT 
0= CLEAR MASK (ENABLE) 
1 = SET MASK (DISABLE) 


intel~ 


inteJ~ 


Port Addresses-Channels 
0-3-QOOFH 
Channels 4-7-QOCFH 


07 
06 
05 
04 
03 
02 
01 
DO 


~ 


x 
X 
X 
M3M2M1MO 


CHANNEL 
0 (4) 
MASK 
BIT 


- 
CHANNEL 
1 (5) 
MASK 
BIT 


CHANNEL 
2 (6) 
MASK 
BIT 


CHANNEL 
3 (7) 
MASK 
BIT 


MASK 
BIT = 0 -CHANNEL 
ENABLE 
= 1 -CHANNEL 
DISABLE 


Port Addresses-Channels 
0-3-Q008H 
Channels 4-7-QOC8H 


CHANNEL 
0(4) 
EXPIRED 
1= EXPIRED 


CHANNEL 
1 (5) 
EXPIRED 


CHANNEL 
2 (6) 
EXPIRED 


CHANNEL 
3 (7) 
EXPIRED 


CHANNEL 
0 (4) 
REQUEST 
1= REQUEST 


CHANNEL 
1 (5) 
REQUEST 
PENDING 


CHANNEL 
2 (6) 
REQUEST 


CHANNEL 
3 (7) 
REQUEST 


Port Addresses-Channels 
0-3-Q018H 
Channels 4-7-QOD8H 


CHANNEL 
SELECT 
SEE MODE REGISTER I 


TARGET 
BUS 
SIZE 


REQUESTER 
BUS 
SIZE 


Bus Size Encoding: 


00 = Reserved by Intel 
01 = 32-M Bus 


Port Addresses-Channels 
0 -3-Q019H 
Channels 
4-7 -QOD9H 


CHANNEL 
SELECT 
SEE MODE REGISTER I 


CHAINING 
ENABLE 
BIT 


0= 
DISABLE 
CHAINING 
MODE 
1 = ENABLE 
CHAINING 
MODE 


The register 
arrangement 
of the 82380 
DMA Con- 
troller 
is a superset 
of the 8237 A OMA Controller. 
Functionally 
the 82380 DMA Controller 
is very differ- 
ent from 
the 
8237 A. Most 
of the 
functions 
of the 
8237 A are performed 
also by the 82380 
The follow- 
ing discussion 
points 
out the 
differences 
between 
the 8237 A and the 82380 


The 8237A 
is limited 
to transfers 
between 
I/O 
and 
memory only (except 
in one special case, where two 
channels 
can be used to perform 
memory-to-memo- 
ry transfers). 
The 82380 DMA Controller 
can transfer 
between 
any combination 
of memory 
and I/O. Sev- 


eral other 
features 
of the 8237A 
are enhanced 
or 
expanded 
in the 82380 
and other features 
are add- 


ed. 


The 
8237 A is an 8-bit 
only 
DMA 
device. 
For pro- 


gramming 
compatibility, 
all of the 8-bit registers 
are 
preserved 
in the 82380. 
The 82380 
is programmed 
via 
8-bit 
registers 
The 
address 
registers 
In the 
82380 
are 32-blt 
registers 
In order 
to support 
the 


CHANNEL 
0(4) 
BASE 
EMPTY 


CHANNEL 
1 (5) 
BASE 
EMPTY 


CHANNEL 
2 (6) 
BASE 
EMPTY 


CHANNEL 
3 (7) 
BASE 
EMPTY 


80386's 
32-bit 
bus. The 
Byte Count 
Registers 
are 
24-bit 
registers, 
allowing 
support 
of 
larger 
data 
blocks 
than possible 
with the 8237 A. 


All of the 8237 A's operating 
modes 
are supported 
by the 82380 
(except 
the cumbersome 
two-channel 
memory-to-memory 
transfer). 
The 
82380 
performs 
memory-to-memory 
transfers 
using only one 
chan- 
nel. The 
82380 
has the 
added 
features 
of buffer 
pipeltnlng 
(Buffer 
Chaining 
Process), 
programmable 
priority 
levels, and Byte Assembly. 


The 82380 
also adds the feature 
of address 
regis- 
ters for both destination 
and source 
These address- 
es may be incremented, 
decremented, 
or held con- 


stant, as required 
by the application 
of the Individual 
channel. 
This allows any combination 
of destination 
and source device. 


Each DMA channel 
has associated 
with it a Target 
and 
a Requester. 
In the 8237A, 
the Target 
is the 
device which can be accessed 
by the address 
regis- 
ter, the Requester 
is the device 
which 
is accessed 
by the DMA Acknowledge 
sigl"'als and must 
be an 


I/O device. 
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4.0 
PROGRAMMABLE 
INTERRUPT 
CONTROLLER 
(PIC) 


4.1 Functional Description 


The 82380 Programmable Interrupt Controller (PIC) 
consists of three enhanced 82C59A Interrupt Con- 
toilers. These three controllers together provide 15 
external and 5 internal interrupt request inputs. Each 
external request input can be cascaded with an ad- 
ditional 82C59A slave collector. This scheme allows 
the 82380 to support a maximum of 120 (15 x 8) 
external interrupt request inputs. 


Following one or more interrupt requests, the 82380 
PIC issues an interrupt signal to the 80386. When 
the 80386 host processor responds with an interrupt 
acknowledge signal, the PIC will arbitrate between 
the pending interrupt requests and place the inter- 
rupt vector associated with the highest priority pend- 
ing request on the data bus. 


The major enhancement in the 82380 PIC over the 
82C59A is that each of the interrupt request inputs 


TOUTOI(IRQ 
DREQ4/IRQ9# 


IRQlll 
IRQ121 
IRQ131 
IRQ141 
IRQ151 
E:- 


CC TOUT3N(IRQ 
CHAINING(IRQ 
Rsp 
ICW2 (IRQ 1 


TOUT2#/IRQ31 
WEAK PULL-UP 
SWReqTC (IRQ 
NO 
NO 
DEfAULT (IR 


IRQt61 
IRQt71 
IRQt81 
IRQt91 
IRQ201 
IRQ211 
IRQ221 
IRQ231 


can be individually programmed with its own inter- 
rupt vector, allowing more flexibility in interrupt vec- 
tor mapping. 


4.1.1 INTERNAL BLOCK DIAGRAM 


The block diagram of the 82380 Programmable In- 
terrupt Controller is shown in Figure 4-1. Internally, 
the PICconsists of three 82C59A banks: A, Band C. 
The three banks are cascaded to one another: C is 
cascaded to B, B is cascaded to A. The INT output 
of Bank A is used externally to interrupt the 80386. 


Bank A has nine interrupt request inputs (two are 
unused), and Banks Band 
C have eight interrupt 
request inputs. Of the fifteen external interrupt re- 
quest inputs, two are shared by other functions. Spe- 
cifically, the Interrupt Request 3 input (IRQ3#) can 
be used as the Timer 2 output (TOUT2#). This pin 
can be used in three different ways: IRQ3# input 
only, TOUT2# 
output only, or using TOUT2# 
to 
generate an IRQ3# interrupt request. Also, the In- 
terrupt Request 9 input (IRQ 9#) can be used as 
DMA Request 4 input (DREQ4). Typically, only 
IRQ9# or DREQ4 can be used at a time. 


0 
1 


~ INTERRUPT ~ 
4 
BANK 
5 
C 


6 
7 


81> 
0 
t 
(IRQ101>~ 
2 
INTERRUPT 
3 
BANK 
.!!!! 
4 
B 
5 
6 
7 


01> 
0 
1I> 
1 


.51> 
1.5 
(IRQ21> 4 
2 
INTERRUPT --+ 
3 
BANK 
41> 
4 
A 
TUSED-' 
5 
T USED-. 
6 
Q71> 
7 


NOTE: 
Masking 
IRQ1.5# 
also masks 
IRQ2# 


Figure 4-1. Interrupt Controller Block Diagram 


• 


All three banks are identical, with the exception of 
the IRQ1.5 on Bank A. Therefore, only one bank will 
be discussed. In the 82380 PIC,all external requests 
can be cascaded into and each interrupt controller 
bank behaves like a master. As compared to the 
82C59A, the enhancements in the banks are: 
- 
All interrupt vectors are individually programma- 
ble. (In the 82C59A, the vectors must be pro- 
grammed in eight consecutive interrupt vector lo- 
cations.) 


IRQOH 
IRQ1H 


IRQ2H 
IRQ3H 
IRQ4H 
IRQSH 
IRQ6H 
IRQ7H 
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- 
The cascade address is provided on the Data 
Bus (00-07). 
(In the 82C59A, three dedicated· 


control signals (CASO,CAS1, CAS2) are used for 
master/slave cascading.) 


The block diagram of a bank is shown in Figure 4-2. 
As can be seen from this figure, the bank consists of 
six major blocks: the Interrupt Request Register 
(IRR), the In-Service Register (ISR), the Interrupt 
Mask Register (IMR), the Priority Resolver (PR), the 
Vector Register (VR), and the Control Logic. The 
functional description of each block follows. 


IN- 
SERVICE 
REG. 


IRQO 


IRQ1 


IRQ2 


IRQ3 


IRQ4 


IRQS 


IRQ6 


IRQ7 


INDIVIDUAllY 
PROGRAt.4t.4ABlE 
VECTOR 
BANK 
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INTERRUPT REQUEST (IRR) AND IN-SERVICE 
REGISTER (ISR) 


~he interrupts at the Interrupt Request (IRQ) input 
lines are handled by two registers in cascade, the 
Interrupt Request Register (lRR) and the In-Service 
Register (ISR). The IRR is used to store all interrupt 
levels which are requesting service; and the ISR is 
used to store all interrupt levels which are being 
serviced. 


This logic block determines the priorities of the bits 
set in the IRA. The highest priority is selected and 
strobed into the corresponding bit of the ISR during 
an Interrupt Acknowledge cycle. 


The IMR stores the bits which mask the interrupt 
lines to be masked (disabled). The IMR operates on 
the IRA. Masking of a higher priority input will not 
affect the interrupt request lines of lower priority. 


This block contains a set of Vector Registers, one 
for each interrupt request line, to store the pre-pro- 
wammed interrupt vector number. The correspond- 
Ing vector number will be driven onto the Data Bus 
of the 82380 during the Interrupt Acknowledge cy- 
cle. 


The Control Logic coordinates the overall operations 
of the other internal blocks within the same bank. 
This logic will drive the Interrupt Output signal (INn 
HIGH ":,,henone or more unmasked interrupt inputs 
are active (LOW) The INT output signal goes direct- 
ly to the 80386 (in Bank A) or to another bank to 
w~ich t~is bank is cascaded (see Figure 4-1). Also, 
thiS logiC Will recognize an Interrupt Acknowledge 
c~cle (via M/IO#, D/C# and W/R# signals). During 
thiS bus cycle, the Control Logic will enable the cor- 
responding Vector Register to drive the interrupt 
vector onto the Data Bus 


In Bank A, the Control Logic ISalso responsible for 
handling the special ICW2 interrupt request input 
(IRQ1.5#). 


There are 15 external Interrupt Request inputs and 5 
internal Interrupt Requests. The external request in- 
puts are: IRQ3#, IRQ9#, IRQ11# to IRQ23#. They 
are shown in bold arrows in Figure 4-1. All IRQ in- 
puts are active LOW and they can be programmed 
(via a control bit in the Initialization Command Word 
1 (ICW1» to be either edge·triggered or level-trig- 
gered. In order to be recognized as a valid interrupt 
request, the interrupt input must be active (LOW) un- 
til the first INTA# cycle (see Bus Functional De- 
scription), 


Note that all 15 external Interrupt 
Request 
Inputs 


have weak 
Internal 
pull-up resistors. 


As mentioned earlier, an 82C59A can be cascaded 
to each external interrupt input to expand the inter- 
rupt capacity to a maximum of 120 levels. Also, two 
of the interrupt inputs are dual functions: IRQ3# can 
be used as Timer 2 output (TOUT2#) and IRQ9# 
can be used as DREQ4 input. IRQ3# is a bidirec- 
tional dual function pin, This interrupt request input is 
wired-OR with the output of Timer 2 (TOUT2#). If 
only IRQ3# function is to be used, Timer 2 should 
be programmed so that OUT2 is LOW. Note that 
TOUT2# can also be used to generate an interrupt 
request to IRQ3# input. 


The five internal interrupt requests serve special 
system functions. They are shown in Table 4-1. The 
following paragraphs describe these interrupts. 


Table 4-1. 82380 Internal Interrupt 
Requests 


Interrupt 
Request 
Interrupt 
Source 


IRQO# 
Timer 3 Output (TOUT3#) 


IRQ8# 
Timer 0 Output (TOUTO#) 


IRQ1# 
DMA Chaining Request 


IRQ4# 
DMA Terminal Count 


IRQ1.5# 
ICW2Written 


TIMER 0 AND TIMER 3 INTERRUPT REQUESTS 
[IRQO#] 


IRQ8# and IRQO# interrupt requests are initiated 
by the output of Timers 0 and 3, respectively. Each 
of these requests is generated by an edge-detector 
flip-flop. The flip-flops are activated by the following 
conditions: 


Set- 
Rising edge of timer output (TOUn; 


Clear- 
Interrupt acknowledge for this request; 
OR Request is masked (disabled); OR 
Hardware Reset. 


These interrupt requests are generated by the 
82380 
DMA 
Controller. 
The 
chaining 
request 
(IRQ1#) indicates that the DMA Base Register is 
not loaded. The Terminal Count request (IRQ4#) in- 
dicates that a software DMA request was cleared. 


Whenever an Initialization Control Word 2 (ICW2) is 
written to a Bank, a special ICW2 interrupt request is 
generated. The interrupt will be cleared when the 
newly programmed ICW2 Register is read. This in- 
terrupt request is in Bank A at level 1.5. This inter- 
rupt request is internally ORed with the Cascaded 
Request from Bank B and is always assigned a high- 
er priority than the Cascaded Request. 


This special interrupt is provided to support compati- 
bility with the original 82C59A. A detailed description 
of this interrupt is discussed in the Programming 
section. 


During an Interrupt Acknowledge cycle, if there is no 
active pending request, the PIC will automatically 


PREVIOUS 
CYCLE 


T2 


M!ION 
D!CN 
W!RN 


4.2.2 INTERRUPT 
OUTPUT 
(INT) 


The INT output pin is taken directly from bank A. 
This signal should be tied to the Maskable Interrupt 
Request (INTR) of the 80386. When this signal is 
active (HIGH), it indicates that one or more internal/ 
external interrupt requests are pending. The 80386 
is expected to respond with an interrupt acknowl- 
edge cycle. 


4.3 
Bus Functional Description 


The INT output of bank A will be activated as a result 
of any unmasked interrupt request. This may be a 
non-cascaded or cascaded request. After the PIC 
has driven the INT signal HIGH, 80386 will respond 
by performing two interrupt acknowledge cycles. 
The timing diagram in Figure 4-3 shows a typical in- 
terrupt acknowledge process between the 82380 
and the 80386 CPU. 


INTERRUPT 
ACKNOWLEDGE 
CYCLE 2 
(5 
WAIT 
STATES) 


T1 
T2 
T2 
T2 
T2 
T2 
T2 


SEE NOTE 
I 
I 
290128-51 


NOTE: 
What 
is actually 
driven 
on the Data Bus depends 
on if the current 
interrupt 
request 
is a Slave 
Request. 


NON-SLAVE 
REQUEST 
SLAVE 
REQUEST 


·Slave will place a vector at this time. 


INTACycle 
1 
OOH 
Slave Address 


INTA Cycle 2 
Vector 
High Impedance' 


After 
activating 
the INT signal, 
the 82380 
monit~rs 
the status 
lines (M/IO#, 
D/C#, 
W/R#) 
and walts 
for the 80386 
to initiate 
the first interrupt 
acknowl- 
edge cycle. 
In the 80386 
environment, 
two succes- 
sive interrupt 
acknowledge 
cycles 
(INT A) marked by 
M/IO# 
= 
LOW, 
D/C# 
= 
LOW, 
and 
W/R# 
= 
LOW are performed. 
During the first INTA cycle, the 
PIC will determine 
the highest 
priority 
request. 
As- 
suming 
this 
interrupt 
input 
has 
no external 
Slave 
Controller 
cascaded 
to it, the 
82380 
will drive 
the 
Data Bus with OOH in the first INT A cycle. During the 
second 
INTA 
cycle, 
the 
82380 
PIC will 
drive 
the 
Data Bus with the corresponding 
preprogrammed 
in- 
terrupt 
vector. 


If the PIC determines 
(from the ICW3) that this inter- 


rupt input has an external 
Slave Controller 
cascaded 
to it it will drive the Data Bus with the specific 
Slave 
Cas~ade 
Address 
(instead 
of OOH) during 
the first 
INTA cycle. This Slave Cascade 
Address 
is the pre- 
programmed 
content 
in the 
corresponding 
Vector 
Register. 
This means that no Slave Address 
should 
be chosen 
to be OOH. Note that the Slave Address 
and Interrupt 
Vector 
are different 
interpretations 
of 
the same thing. 
They are both the contents 
of the 
programmable 
Vector 
Register. 
During 
the second 
INT A cycle, the Data Bus will be floated 
so that the 
external 
Slave Controller 
can dnve its interrupt 
vec- 


tor on the bus. Since the Slave 
Interrupt 
Controller 
resides 
on the system 
bus, bus transceiver 
enable 
and directio'1 control 
logic must take thiS into consid- 
eration. 


In order 
to have a successful 
interrupt 
service, 
the 
interrupt 
request 
input 
must 
be held 
active 
(LOW) 
until the beginning 
of the first interrupt 
acknowledge 
cycle. 
If there 
is no pending 
interrupt 
requ~st 
when 
the first INTA cycle is generated, 
the PIC will gener- 
ate a default 
vector, 
which is the IRQ? vector 
(bank 
A level?). 


According 
to the Bus Cycle definition 
of the 80386, 
there 
will be four 
Bus Idle States 
between 
the two 
interrupt 
acknowledge 
cycles. These 
idle bus cycles 
will be Initiated by the 80386 
Also, during each inter- 
rupt acknowledge 
cycle, the internal Wait State Gen- 
erator 
of the 82380 
will automatically 
generate 
the 
required 
number 
of wait states for internal 
delays. 


4.4 
Mode of Operation 


A variety of modes and commands 
are available 
for 
controlling 
the 82380 
PIC. All of them are program- 
mable; that is, they may be changed 
dynamically 
un- 
der software 
control 
In fact, each bank can be pro- 
grammed 
individually 
to operate 
in different 
mo~es. 


With 
these 
modes 
and commands, 
many 
possible 


configurations 
are 
conceivable, 
giving 
the 
user 
enough 
versatility 
for almost any interrupt 
controlled 
application. 


This section 
is not intended 
to show how the 82380 
PIC can 
be programmed. 
Rather, 
it describes 
the 
operation 
In different 
modes. 


4.4.1 END-Of-INTERRUPT 


Upon completion 
of an interrupt 
service 
routine, 
the 
interrupted 
bank needs to be notified 
so its ISR can 
be updated. 
This 
allows 
the 
PIC to keep 
track. of 
which 
interrupt 
levels 
are if' the 
process 
of being 
serviced 
and their relative 
priorities. 
Three 
different 
End-Of-Interrupt 
(EOI) formats 
are available. 
They 
are: Non-Specific 
EOI Command, 
Specific 
EOI Com- 
mand, and Automatic 
EOI Mode. Selection 
of which 
EOI to use is dependent 
upon the interrupt 
opera- 
tions the user wishes 
to perform. 


If the 82380 
is NOT programmed 
in the Automatic 
EOI Mode, an EOI command 
must be issued by the 
80386 
to the 
specific 
82380 
PIC Controller 
Bank. 
Also, if this controller 
bank is cascaded 
to another 
internal 
bank, aR EOI command 
must also be sent to 
the bank to which this bank IS cascaded. 
For exam- 
ple, If an interrupt 
request 
of Bank ~ in t~e 82380 
PIC is serviced, 
an EOI should 
be wntten 
Into Bank 
C, Bank B and Bank A. If the request comes from an 
external 
interrupt 
controller 
cascaded 
to 
Bank 
C, 
then an EOI should be written 
into the external 
con- 
troller as well. 


A Non-Specific 
EOI command 
sent from the 80386 
lets the 82380 
PIC bank know when a service 
rou- 
tine has been completed, 
without 
specification 
of its 
exact 
interrupt 
level. The 
respective 
interrupt 
bank 
automatically 
determines 
the interrupt 
level and re- 
sets the correct 
bit in the ISA. 


To take advantage 
of the Non-Specific 
EOI, the in- 
terrupt bank must be in a mode of operation 
in which 
it can predetermine 
its in-service 
routine 
levels. 
For 
this reason, 
the Non-Specific 
EOI command 
should 
only be used when 
the most recent 
level acknowl- 
edged and serviced 
is always the highest priority lev- 
el (i.e., in the Fully Nested 
Mode structure 
to be de- 
scribed 
below). 
When 
the interrupt 
bank receives 
a 
Non-Specific 
EOI 
command, 
it simply 
resets 
the 
highest 
priority 
ISR bit to indicate 
that 
the 
highest 
priority routine 
in service 
is finished. 


Special 
consideration 
should 
be taken 
when deCid- 
ing to use the Non-Specific 
EOI command. 
Here are 
two 
operating 
conditions 
In which 
it is best 
NOT 


used since the Fully Nested Mode structure will be 
destroyed: 
- 
Using the Set Priority command within an inter- 
rupt service routine. 


- 
Using a Special Mask Mode. 


These conditions are covered in more detail in their 
own sections, but are listed here for reference. 


Unlike a Non-Specific EOI command which automat- 
ically resets the highest priority ISR bit, a Specific 
EOI '..:ommandspecifies an exact ISR bit to be reset. 
Anyone of the IRQ levels of an interrupt bank can 
be specified in the command. 


The Specific EOI command is needed to reset the 
ISR bit of a completed service routine whenever the 
interrupt bank is not able to automatically determine 
it. The Specific EOI command can be used in all 
conditions of operation, including those that prohibit 
Non-Specific 
EOI 
command 
usage 
mentioned 
above. 


When programmed in the Automatic EOI Mode, the 
80386 no longer needs to issue a command to notify 
the interrupt bank it has completed an interrupt rou- 
tine. The interrupt bank accomplishes this by per- 
forming a Non-Specific EOI automatically at the end 
of the second INTA cycle. 


Special consideration should be taken when decid- 
ing to use the Automatic EOI Mode because it may 
disturb the Fully Nested Mode structure. In the Auto- 
matic EOI Mode, the ISR bit of a routine in service is 
reset right after it is acknowledged, thus leaving no 
designation in the ISR that a service routine is being 
executed. If any interrupt request within the same 
bank occurs during this time and interrupts are en- 
abled, it will get serviced regardless of its priority. 


Therefore, when using this mode, the 80386 should 
keep its interrupt request input disabled during exe- 
cution of a service routine. By doing this, higher pri- 
ority interrupt levels will be serviced only after the 
completion of a routine in service. This guideline re- 
stores the Fully Nested Mode structure. However, in 
this scheme, a routine in service cannot be interrupt- 
ed since the host's interrupt request input is dis- 
abled. 


4.4.2 INTERRUPT 
PRIORITIES 


The 82380 PIC provides various methods for arrang- 
ing the interrupt priorities of the interrupt request in- 
puts to suit different applications. The following sub- 
sections explain these methods in detail. 


4.4.2.1 
Fully Nested 
Mode 


The Fully Nested Mode of operation is a general pur- 
pose priority mode. This mode supports a multi-level 
interrupt structure in which all of the Interrupt Re- 
quest (IRQ) inputs within one bank are arranged 
from highest to lowest. 


Unless otherwise programmed, the Fully Nested 
Mode is entered by default upon initialization. At this 
time, IRQO# is assigned the highest priority (priority 
= 0) and IRQ7# the lowest (priority = 7). This de- 
fault priority can be changed, as will be explained 
later in the Rotating Priority Mode. 


When an interrupt is acknowledged, the highest pri- 
ority request is determined from the Interrupt Re- 
quest Register (IRR) and its vector is placed on the 
bus. In addition, the corresponding bit in the In-Serv- 
ice Register (ISR) is set to designate the routine in 
service. This ISR bit will remain set until the 80386 
issues an End Of Interrupt (EOI) command immedi- 
ately before returning from the service routine; or 
alternately, if the Automatic End Of Interrupt (AEOI) 
bit is set, the ISR bit will be reset at the end of the 
second INTA cycle. 
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While the ISR bit is set, all further interrupts of the 
same or lower priority are inhibited. Higher level in- 
terrupts can still generate an interrupt, which will be 
acknowledged only if the 80386 internal interrupt en- 
~bl.eflip-flop has been re-enabled (through software 
Inside the current service routine). 


4.4.2.2 Automatic Rotation-Equal 
Priority 
Devices 


Automatic rotation of priorities serves in applications 
w~e~e the interrupting devices are of equal priority 
within an Interrupt bank. In this kind of environment, 
once a device is serviced, all other equal priority pe- 
ripherals should be given a chance to be serviced 
before the original device is serviced again. This is 
accomplished by automatically assigning a device 
the lowest priority after being serviced. Thus, in the 
worst case, the device would have to wait until all 
other peripherals connected to the same bank are 
serviced before it is serviced again. 


There are two methods of accomplishing automatic 
rotation. One is used in conjunction with the Non- 
Specific EOI command and the other is used with 


the Automatic EOI mode. These two methods are 
discussed below. 


When the Rotate On Non-Specific EOI command is 
issued, the highest ISR bit is reset as in a normal 
Non-Specific EOI command. However, after it is re- 
set, the corresponding Interrupt Request (IRQ) level 
is assigned the lowest priority. Other IRQ priorities 
rotate to conform to the Fully Nested Mode based 
on the newly assigned low priority. 


Figure 4-4 shows how the Rotate On Non-Specific 
EOI command affects the interrupt priorities. As- 
sume the IRQ priorities were assigned with IRQOthe 
highest and IRQ? the lowest. IRQ6 and IRQ4 are 
already in service but neither is completed. Being 
the .higher.priority routine, IRQ4 is necessarily the 
routine being executed. During the IRQ4 routine, a 
rotate on Non-Specific EOI command is executed. 
When this happens, Bit 4 in the ISR is reset. IRQ4 
then becomes the lowest priority and IRQSbecomes 
the highest. 


ISR STATUS 


PRIORITY 


(BEFORE 
COMMAND) 


ISR STATUS 


PRIORITY 


(AFTER 
COMMAND) 


The 
Rotate 
On Automatic 
EOI Mode 
works 
much 
like the Rotate On Non-Specific 
EOI Command. 
The 
main difference 
IS that priority rotation 
is done auto- 
matically 
after the second 
INTA cycle of an interrupt 
request. To enter or exit this mode, a Rotate-On-Au- 
tomatic-EOI 
Set Command 
and Rotate-On-Automat- 
ic-EOI Clear Command 
is provided. 
After this mode 
is entered, 
no other commands 
are needed as in the 
normal 
Automatic 
EOI Mode. 
However, 
it must 
be 
noted 
again that when 
using any form of the Auto- 
matic 
EOI 
Mode, 
special 
consideration 
should 
be 
taken. The guideline 
presented 
in the Automatic 
EOI 
Mode also applies 
here. 


4.4.2.3 
Specific 
Rotatlon-Speclflc 
Priority 


Specific 
rotation 
gives the user versatile 
capabilities 
in interrupt 
controlled 
operations. 
It serves 
in those 
applications 
in which a specific 
device's 
interrupt 
pri- 
ority must be altered. 
As opposed 
to Automatic 
Ro- 
tation 
which 
will 
automatically 
set 
priorities 
after 


'each interrupt 
request is serviced, 
specific 
rotation 
is 
completely 
user controlled. 
That is, the user selects 
which 
interrupt 
level is to receive 
the lowest 
or the 
highest 
priority. 
ThiS can be done 
during 
the main 


infel~ 


program 
or within interrupt 
routines. 
Two specific 
ro- 
tation commands 
are available 
to the user' Set Prior- 
ity Command 
and 
Rotate 
On 
Specific 
EOI 
Com- 
mand. 


The Set Priority Command 
allows the programmer 
to 
assign an IRQ level the lowest 
priority, 
All other 
in- 
terrupt 
levels will conform 
to the Fully Nested 
Mode· 


based on the newly assigned 
low priority, 


The Rotate 
On Specific 
EOI Command 
is literally 
a 
combination 
of the Set Priority 
Command 
and the 
Specific 
EOI Command. 
Like the Set Priority 
Com- 
mand, a specified 
IRQ level is assigned 
lowest priori- 
ty. Like the Specific 
EOI Command, 
a specified 
level 
will be reset in the ISA. Thus, this command 
accom- 
plishes both tasks in one single command. 


4.4.2.4 
Interrupt 
Priority 
Mode Summary 


In order to simplify 
understanding 
the many modes 
of interrupt 
priority, Table 4-2 is provided 
to bring out 
their summary 
of operations. 


Interrupt 
Operation 
Effect On Priority After EOI 
Priority 
Mode 
Summary 
Non-Speclflcl 
Automatic 
Specific 


Fully-Nested 
Mode 
IRQO#-Highest 
Priority 
No change in priority. 
Not Applicable. 


IRQ7#-Lowest 
Priority 
Highest ISR bit is reset. 


Automatic 
Rotation 
Interrupt 
level just serviced 
Highest ISR bit is reset and the 
Not Applicable. 


(Equal Priority Devices) 
is the lowest priority. Other 
corresponding 
level becomes 
the 
priorities 
rotate to conform 
lowest priority. 


to Fully-Nested 
Mode. 


Specific 
Rotation 
User specifies 
the lowest 
Not Applicable. 
As described 
under 
(SpeCific Priority 
priority level. Other priorities 
'Operation 
Summary'. 


Devices) 
rotate to conform 
to Fully- 
Nested 
Mode. 


4.4.3 INTERRUPT 
MASKING 


VIA INTERRUPT MASK REGISTER 


Each bank in the 82380 PIC has an Interrupt Mask 
Register (IMR) which enhances interrupt control ca- 
pabilities. This IMR allows individual IRQ masking. 
When an IRQ is masked, its interrupt request is dis- 
abled until it is unmasked. Each bit in the 8-bit IMR 
disables one interrupt channel if it is set (HIGH). Bit 
o masks IRQO, Bit 1 masks IRQ1 and so forth. 
Masking an IRQ channel will only disable the corre- 
sponding channel and does not affect the others op- 
erations. 


The IMR acts only on the output of the IRR. That is, 
if an interrupt occurs while its IMR bit is set, this 
request is not 'forgotten'. Even with an IRQ input 
masked, it is still possible to set the IRA. Therefore, 
when the IMR bit is reset, an interrupt request to the 
80386 will then be generated, providing that the IRQ 
request remains active. If the IRQ request is re- 
moved before the IMR is reset, the Default Interrupt 
Vector (Bank A, level 7) will be generated during the 
interrupt acknowledge cycle. 


In the Fully Nested Mode, all IRQ levels of lower 
priority than the routine in service are inhibited. How- 
ever, in some applications, it may be desirable to let 
a lower priority interrupt request to interrupt the rou- 
tine in service. One method to achieve this is by 
using the Special Mask Mode. Working in conjunc- 
tion with the IMR, the Special Mask Mode enables 
interrupts from all levels except the level in service. 
This is usually done inside an interrupt service rou- 
tine by masking the level that is in service and then 
issuing the Special Mask Mode Command. Once the 
Special Mask Mode is enabled, it remains in effect 
until it is disabled. 


DATA BUS 
INTA# 


(FROtol 
BUS 
CONTROLLER) 


4.4.4 EDGE OR LEVEL 
INTERRUPT 
TRIGGERING 


Each bank in the 82380 PIC can be programmed 
independently for either edge or level sensing for the 
interrupt request signals. Recall that all IRQ inputs 
are active LOW. Therefore, in the edge triggered 
mode, an active edge is defined as an input tran- 
sition from an inactive (HIGH) to active (LOW) state. 
The interrupt input may remain active without gener- 
ating another interrupt. During level triggered mode, 
an interrupt request will be recognized by an active 
(LOW) input, and there is no need for edge detec- 
tion. However, the interrupt request must be re- 
moved before the EOI Command is issued, or the 
80386 must be disabled to prevent a second false 
interrupt from occurring. 


In either modes, the interrupt request input must be 
active (LOW) during the first INTA cycle in order to 
be recognized. Otherwise, the Default Interrupt Vec- 
tor will be generated at level 7 of Bank A. 


As mentioned previously, the 82380 allows for exter- 
nal Slave interrupt controllers to be cascaded to any 
of its external interrupt request pins. The 82380 PIC 
indicates that a external Slave Controller is to be 
serviced by putting the contents of the Vector Regis- 
ter associated with the particular request on the 
80386 Data Bus during the first INTA cycle (instead 
of OOHduring a non-slave service). The external log- 
ic should latch the vector on the Data Bus using the 
INTA status signals and use it to select the external 
Slave Controller to be serviced (see Figure 4-5). The 
selected Slave will then respond to the second INTA 
cycle and place its vector on the Data Bus. This 
method requires that if external Slave Controllers 


POSITIVE 
EDGE 
tolASTER/SLAVE 
FUP-FLOP 


IN 
OUT 


CLK 


CAS(O -7) 
TO SLAVE 
8259'. 
'-f 


LATCH 
HERE 


are used in the system, no vector should be pro- 
grammed to OOH. 


Since the external Slave Cascade Address is provid- 
ed on the Data Bus during INTA cycle 1, an external 
latch is required to capture this address for the Slave 
Controller. A simple scheme is depicted in Figure 
4-5. 


4.4.5.1 Special Fully Nested Mode 


This mode will be used where cascading is em- 
ployed and the priority is to be conserved within 
each Slave Controller. The Special Fully Nested 
Mode is similar to the 'regular' Fully Nested Mode 
with the following exceptions: 
- 
When an interrupt request from a Slave Control- 
ler is in service, this Slave Controller is not 
locked out from the Master's priority logic. Fur- 
ther interrupt requests from the higher priority 
logic within the Slave Controller will be recog- 
nized by the 82380 PIC and will initiate interrupts 
to the 80386. In comparing to the 'regular' Fully 
Nested Mode, the Slave Controller is masked out 
when its request is in service and no higher re- 
quests from the same Slave Controller can be 
serviced. 


- 
Before exiting the interrupt service routine, the 
software has to check whether the interrupt serv- 
iced was the only request from the Slave Con- 
troller. This is done by sending a Non-Specific 
Eol Command to the Slave Controller and then 
reading its In Service Register. If there are no 
requests in the Slave Controller, a Non-Specific 
Eol can be sent to the corresponding 82380 PIC 
bank also. Otherwise, no Eol should be sent. 


The 82380 PIC provides several ways to read differ- 
ent status of each interrupt bank for more flexible 
interrupt control operations. These include polling 
the highest priority pending interrupt request and 
reading the contents of different interrupt status reg- 
isters. 


4.4.6.1 Poll Command 


The 82380 PIC supports status polling operations 
with the Poll Command. "In a Poll Command, the 
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pending Interrupt request with the highest priority 
can be determined. To use this command, the INT 
output is not used, or the 80386 interrupt is disabled. 
Service to devices is achieved by software using the 
Poll Command. 


This mode is useful if there is a routine command 
common to several levels so that the INTA se- 
quence is not needed. Another application is to use 
the Poll Command to expand the number of priority 
levels. 


Notice that the ICW2 mechanism is not supported 
for the Poll Command. However, if the Poll Com- 
mand is used, the programmable Vector Registers 
are of no concern since no INTA cycle will be gener- 
ated. 


4.4.6.2 Reading Interrupt Registers 


The contents of each interrupt register (IRR, ISR, 
and IMR) can be read to update the user's program 
on the present status of the 82380 PIC. This can be 
a versatile tool in the decision making process of a 
service routine, giving the user more control over 
interrupt operations. 


The reading of the IRR and ISR contents can be 
performed via the Operation Control Word 3 by us- 
ing a Read Status Register Command and the con- 
tent of IMR can be read via a simple read operation 
of the register itself. 


Each bank of the 82380 PICconsists of a set of 8-bit 
registers to control its operations. The address map 
of all the registers is shown in Table 4-3. Since all 
three register sets are identical in functions, only 
one set will be described. 


Functionally, each register set can be divided into 
five groups. They are: the four Initialization Com- 
mand Words (ICW's), the three Operation Control 
Words (oCW's), the Poll/Interrupt Request/In-Serv- 
ice Register, the Interrupt Mask Register, and the 
Vector Registers. A description of each group fol- 
lows. 
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Port 
Access 
Register 
Description 
Address 


20H 
Write 
Bank B ICW1 , OCW2, or OCW3 
Read 
Bank B Poll, Request 
or In-Service 
Status Register 
21H 
Write 
Bank B ICW2, ICW3, ICW4, OCW1 
Read 
Bank B Mask Register 
22H 
Read 
BankB 
ICW2 
28H 
Read/Write 
IRQ8 Vector Register 
29H 
Read/Write 
IRQ9 Vector 
Register 
2AH 
Read/Write 
Reserved 
2BH 
Read/Write 
IRQ11 Vector 
Register 
2CH 
Read/Write 
IRQ12 Vector 
Register 
2DH 
Read/Write 
IRQ13 Vector 
Register 
2EH 
Read/Write 
IRQ14 Vector Register 
2FH 
Read/Write 
IRQ15 Vector 
Register 


AOH 
Write 
Bank C ICW1, OCW2, or OCW3 
Read 
Bank C Poll, Request 
or In-Service 
Status Register 
A1H 
Write 
Bank C ICW2, ICW3, ICW4, OCW1 
Read 
Bank C Mask Register 
A2H 
Read 
BankCICW2 
A8H 
Read/Write 
IRQ16 Vector Register 
A9H 
Read/Write 
IRQ17 Vector Register 
AAH 
Read/Write 
IRQ18 Vector Register 
ABH 
Read/Write 
IRQ19 Vector Register 
ACH 
Read/Write 
IRQ20 Vector Register 
ADH 
Read/Write 
IRQ21 Vector Register 
AEH 
Read/Write 
IRQ22 Vector Register 
AFH 
Read/Write 
IRQ23 Vector Register 


30H 
Write 
Bank A ICW1 , OCW2, or OCW3 
Read 
Bank A Poll, Request 
or In-Service 
Status Register 
31H 
Write 
Bank A ICW2, ICW3, ICW4, OCW1 
Read 
Bank A Mask Register 
32H 
Read 
Bank ICW2 
38H 
Read/Write 
IRQO Vector Register 
39H 
Read/Write 
IRQ1 Vector Register 
3AH 
Read/Write 
IRQ1.5 Vector Register 
3BH 
Read/Write 
IRQ3 Vector Register 
3CH 
Read/Write 
IRQ4 Vector Register 
3DH 
Read/Write 
Reserved 
3EH 
Read/Write 
Reserved 
3FH 
Read/Write 
IRQ7 Vector 
Register 


Before 
normal 
operation 
can begin, the 82380 
PIC 
must be brought 
to a known 
state. 
There 
are four 
8-bit Initialization 
Command 
Words 
in each interrupt 
bank to setup the necessary 
conditions 
and modes 
for proper operation. 
Except for the second common 
word (ICW2) which is a read/write 
register, the other 
three are write-only 
registers. 
Without 
going into de- 
tail of the bit definitions 
of the command 
words, the 
following 
subsections 
give a brief description 
of what 
functions 
each command 
word controls. 


The ICW1 has three 
major functions. 
They are: 


- 
To select 
between 
the two 
IRQ input triggering 
modes 
(edge-or 
level-triggered); 


- 
To designate 
whether 
or not the interrupt 
bank is 
to be used alone or in the cascade 
mode. If the 
cascade 
mode is desired, 
the interrupt 
bank will 
accept 
ICW3 for further cascade 
mode program- 
ming. Otherwise, 
no ICW3 will be accepted; 


- 
To determine 
whether 
or not ICW4 will be issued; 
that 
is, if any of the ICW4 operations 
are to be 
used. 


ICW2 is provided 
for compatibility 
with the 82C59A 
only. Its contents 
do not affect 
the operation 
of the 
interrupt 
bank 
in any way. Whenever 
the 
ICW2 of 
any of the three banks is written 
into, an interrupt 
is 
generated 
from 
Bank 
A at level 
1.5. The 
interrupt 
request 
will be cleared 
after the ICW2 register 
has 
been 
read 
by the 80386. 
The 
user is expected 
to 
program 
the corresponding 
vector 
register 
or to use 
it as an indicator 
that an attempt 
was made to alter 
the contents. 
Note that each ICW2 register 
has dif- 
ferent 
addresses 
for read and write operations. 


The interrupt 
bank will only accept 
an ICW3 if pro- 
grammed 
in the external 
cascade 
mode (as indicat- 
ed in ICW1). ICW3 is used for specific 
programming 
within the cascade 
mode. The bits in ICW3 indicate 
which 
interrupt 
request 
Inputs have a Slave cascad- 
ed to them. 
This will subsequently 
affect 
the inter- 
rupt vector 
generation 
during the interrupt 
acknowl- 
edge cycles 
as described 
previously. 


The 
ICW4 
is accepted 
only 
if it was 
selected 
in 
ICW1. This command 
word register serves two func- 
tions: 
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- 
To select either the Automatic 
Eol 
mode or soft- 
ware Eol 
mode; 


- 
To select 
if the Special 
Nested 
mode 
is to be 
used in conjunction 
with the cascade 
mode. 


Once initialized 
by the ICW's, the interrupt 
banks will 
be operating 
in the 
Fully 
Nested 
Mode 
by default 
and 
they 
are 
ready 
to 
accept 
interrupt 
requests. 


However, 
the operations 
of each interrupt 
bank can 
be 
further 
controlled 
or 
modified 
by 
the 
use 
of 
oCW's. 
Three oCW's 
are available 
for programming 
various 
modes and commands. 
Note that all oCW's 
are 8-bit write-only 
registers. 


The modes and operations 
controlled 
by the oCW's 
are: 


- 
Fully Nested 
Mode; 
- 
Rotating 
Priority Mode; 
- 
Special 
Mask Mode; 
- 
Poll Mode; 
- 
Eol 
Commands; 
- 
Read Status Commands. 


OCW1 is used solely for masking 
operations. 
It pro- 
vides 
a direct 
link to the 
Interrupt 
Mask 
Register 
(IMR). The 80386 
can write to this OCW register 
to 
enable 
or disable 
the interrupt 
inputs. 
Reading 
the 
pre-programmed 
mask can be done via the Interrupt 
Mask Register 
which will be discussed 
shortly. 


OCW2 is used to select 
End-of-Interrupt, 
Automatic 
Priority Rotation, 
and Specific 
Priority Rotation 
oper- 
ations. 
Associated 
commands 
and modes 
of these 
operations 
are selected 
using the different 
combina- 
tions of bits in OCW2. 


Specifically, 
the OCW2 is used to: 


- 
Designate 
an interrupt 
level (0-7) 
to be used to 
reset a specific 
ISR bit or to set a specific 
priori- 
ty. This function 
can be enabled 
or disabled; 


- 
Select which software 
Eol command 
(if any) is to 
be executed 
(Le., Non-Specific 
or Specific 
Eol); 


- 
Enable 
one 
of 
the 
priority 
rotation 
operations 
(Le., Rotate On Non-Specific 
Eol, 
Rotate On Au- 
tomatic 
Eol, 
or Rotate 
on Specific 
Eol). 


There 
are three 
main categories 
of operation 
that 
OCW3 controls. 
That are summarized 
as follows: 


- 
To select and execute the Read Status Register 
Commands, either reading the Interrupt Request 
Register (IRR) or the In-Service Register (ISR); 
- 
To issue the Poll Command. The Poll Command 
will override a Read Register Command if both 
functions are enabled simultaneously; 
- 
To set or reset the Special Mask Mode. 


4.5.3 POLL/INTERRUPT 
REQUEST /IN·SERVICE 
STATUS 
REGISTER 


As the name implies, this 8-bit read-only register has 
multiple functions. Depending on the command is- 
sued in the OCW3, the content of this register re- 
flects the result of the command executed. For a 
Poll Command, the register read contains the binary 
code of the highest priority level requesting service 
(if any). For a Read IRR Command, the register con- 
tent will show the current pending interrupt reo 
quest(s). Finally, for a Read ISR Command, this reg- 
ister will specify all interrupt levels which are being 
serviced. 


This is a read-only 8-bit register which, when read, 
will specify all interrupt levels within the same bank 
that are masked. 


Each interrupt request input has an 8-bit read/write 
programmable vector register associated with it. The 
registers should be programmed to contain the inter- 
rupt vector for the corresponding request. The con- 
tents of the Vector Register will be placed on the 
Data Bus during the INTA cycles as described previ- 
ously. 


4.6 
Programming 


Programming the 82380 PIC is accomplished by us- 
ing two 
types of 
command words: 
ICW's and 
OCW's. All modes and commands explained in the 
previous 
sections 
are 
programmable 
using the 
ICW's and OCW's. The ICW's are issued from the 
80386 in a sequential format and are used to setup 
the banks in the 82380 PIC in an initial state of oper- 
ation. The OCW's are issued as needed to vary and 
control the 82380 PIC's operations. 


Both ICW's and OCW's are sent by the 80386 to the 
interrupt banks via the Data Bus. Each bank distin- 
guishes between the different ICW's and OCW's by 
the I/O address map, the sequence they are issued 
(ICW's only), and by some dedicated bits among the 
ICW's and OCW's. 


All three interrupt banks are programmed In a similar 
way. Therefore, only a single bank will be described. 


Before normal operation can begin, each bank must 
be initialized by programming a sequence of two to 
four bytes written into the ICW's. 


Figure 4-6 shows the initialization flow for an inter- 
rupt bank. Both ICW1 and ICW2 must be issued for 
any form of operation. However, ICW3and ICW4 are 
used only if designated in ICW1. Once initialized, if 
any programming changes within the ICW's are to 
be made, the entire ICW sequence must be repro- 
grammed, not just an individual ICW. 


Note that although the ICW2's in the 82380 PIC do 
not affect the Bank's operation, they still must be 
programmed in order to preserve the compatibility 
with the 82C59A. The contents programmed are not 
relevant to the overall operations of the interrupt 
banks. Also, whenever one of the three ICW2's is 
programmed, an interrupt level 1.5 in Bank A will be 
generated. This interrupt request will be cleared 
upon reading of the ICW2 registers. Since the three 
ICW2's share the same interrupt level and the sys- 
tem may not know the origin of the interrupt, all three 
ICW2's must be read. 


However, it is not necessary to provide an interrupt 
service routine for the ICW2 interrupt. One way to 
avoid this is as follows. At the beginning of the initial- 
ization of the interrupt banks, the 80386 Interrupt 
should be disabled. After each ICW2 register write 
operation is performed during the initialization, the 
corresponding ICW2 register is read. This read oper- 
ation will clear the interrupt request of the 82380. At 
the end of the initialization, the 80386 interrupt is re- 
enabled. With this method, the 80386 will not detect 
the ICW2interrupt request, thus eliminating the need 
of an interrupt service routine. 


Certain internal setup conditions occur automatically 
within the interrupt bank after the first ICW (ICW1) 
has been issued. They are: 
- 
The edge sensitive circuit is reset, which means 
that following initialization, an interrupt request 
input must make a HIGH-to-LOW transition to 
generate an interrupt; 
- 
The Interrupt Mask Register (IMR) is cleared; 
that is, all interrupt inputs are enabled; 
- 
IRQ? input of each bank is assigned priority ? 
(lowest); 


- 
Special Mask Mode is cleared and Status Read 
is set to IRR; 
- 
If no ICW4 is needed, then no Automatlc-EOI IS 
selected. 
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Each interrupt request input has a separate Vector 
Register. These Vector Registers are used to store 
the pre-programmed vector number corresponding 
to their interrupt sources. In order to guarantee prop- 
er interrupt handling, all Vector Registers must be 
programmed with the predefined vector numbers. 
Since an interrupt request will be generated whenev- 
er an ICW2 is written during the initialization se- 
quence, it is important that the Vector Register of 
IRQ1.5 in Bank A should be initialized and the inter- 
rupt service routine of this vector is set up before the 
ICW's are written. 


4.6.3 OPERATION CONTROL WORDS (OCW) 


After the ICW's are programmed, the operations of 
each interrupt controller bank can be changed by 
writing into the DCW's as explained before. There is 
no special programming sequence required for the 
DCW·s. Any DCW may be written at any time in or- 
der to change the mode of or to perform certain op- 
erations on the interrupt banks. 


4.6.3.1 Read Status and Poll Commands (OCW3) 


Since the reading of IRR and ISR status as well as 
the result of a Poll Command are available on the 


same read-only Status Register, a special Read 
Status/Poll Command must be issued before the 
Poll/Interrupt Request/In-Service Status Register is 
read. This command can be specified by writing the 
required control word into OCW3. As mentioned ear- 
lier, if both the Poll Command and the Status Read 
Command are enabled simultaneously, the Poll 
Command will override the Status Read. That is, af- 
ter the command execution, the Status Register will 
contain the result of the Poll Command. 


Note that for reading IRR and ISR, there is no need 
to issue a Read Status Command to the OCW3 ev- 
ery time the IRR or ISR is to be read. Once a Read 


Status Command is received by the interrupt bank, it 
'remembers' which register is selected. However, 
this is not true when the Poll Command is used. 


In the Poll Command, after the OCW3 is written, the 
82380 PIC treats the next read to the Status Regis- 
ter as an interrupt acknowledge. This will set the ap- 
propriate IS bit if there is a request and read the 
priority level. Interrupt Request input status remains 
unchanged from the Poll Command to the Status 
Read. 


In addition to the above read commands, the Inter- 
rupt Mask Register (IMR) can also be read. When 
read, this register reflects the contents of the pre- 
programmed OCW1 which contains information on 
which interrupt request(s) is(are) currently disabled. 


0- 
EXTERNAL CASCADE 
(ICW3 NEEDED) 
1 - 
NO EXTERNAL CASCADE 
(ICW3 NOT NEEDED) 


CONTENT IS NOT RELEVANT TO THE ACTUAL 
OPERATION OF THE BANK BUT CAN BE READ 
BY THE INTERRUPT SERVICE ROUTINE TO 
DETERMINE WHERE THE INTERRUPT VECTORS 
OF EACH BANK START. 


INITIALIZATION 
COMMAND 
WORD 
3 (ICW3) 
ICW3 for Bank A: 


0- 
NO 
CASCAOEO 
REQUEST 
TO 
IRQn 


1 - 
THERE 
IS A 
CASCADED 
REQUEST 
CONNECTED 
TO 
IRQn 
(I. •. 
THE 


CORRESPONDING 
INTERRUPT 


REQUEST 
INPUTS) 


0 
0 
1 
NON-SPECIFIC 
EOI COMMAND 
0 
1 
1 
SPECItIC 
EOI COMMAND 
(L2-LO 
USED) 
1 
0 
1 
ROTATE ON NON-SPECItIC 
EOI 
1 
0 
0 
ROTATE ON AUTO-EOI 
MODE ~SET) 
0 
0 
0 
ROTATE ON AUTO-EOI 
MODE 
CLEAR) 


1 
1 
1 
ROTATE ON SPECIFIC 
EOI (L2-LO 
USED) 
1 
1 
0 
SET PRIORllY 
(L2-LO 
USED) 
0 
1 
0 
NO OPERATION 


RIS 
o 
NO ACTION 
1 
NO ACTION 
o 
READ IR REG. (STATUS) 
1 
READ IS REG. (STATUS) 
290128-61 


ESMM-Enable 
Special Mask Mode. When this bit is set to 1, it enables the SMM bit to set or reset the Special Mask 
Mode. When this bit is set to 0, SMM bit becomes don't care. 


SMM-Special 
Mask Mode. If ESMM = 1 and SMM = 1, the interrupt controller bank will enter Special Mask Mode. If . 


ESMM = 1 and SMM = 0, the bank will revert to normal mask mode. When ESMM = 0, SMM has no effect. 


ESMM 
SMM 
o 
0 
o 
1 
1 
0 
1 
1 


NO ACTION 
NO ACTION 
RESET SPECIAL 
MASK 
SET SPECIAL 
MASK 


BINARY 
CODE OF 
THE HIGHEST 
PRIORllY 
LEVEL 
REQUESTING 


NOTE: 
Although 
all Interrupt 
Request 
inputs 
are active 
LOW, the internal 
logical 
will Invert the state 
of the pins so that when 


there 
is a pending 
interrupt 
request 
at the input, the corresponding 
IRQ bit will be set to HIGH 
In the Interrupt 
Request 


Status 
register. 


IF ISn 
BIT IS: 0 - 
NOT IN-SERVICE 
1 - 
REQUEST 
IS IN-SERVICE 


290128-64 


For ease of reference, 
Table 4-4 gives a summary 
of the different 
operating 
modes 
and commands 
with their 


corresponding 
registers. 


Operational 
Command 
Bits 
Description 
Words 


Fully Nested Mode 
OCW-Default 
- 


Non-specific 
EOI Command 
OCW2 
EOI 


Specific 
EOI Command 
OCW2 
SL, EOI, 
LO-L2 


Automatic 
EOI Mode 
ICW1,ICW4 
IC4,AEOI 
Rotate On Non-Specific 
OCW2 
EOI 


EOICommand 
Rotate On Automatic 
OCW2 
R, SL, EOI 


EOI Mode 
Set Priority Command 
OCW2 
LO-L2 


Rotate On Specific 
OCW2 
R, SL, EOI 


EOICommand 


\ 


Interrupt 
Mask Register 
OCW1 
MO-M7 


Special Mask Mode 
OCW3 
ESMM,SMM 


Level Triggered 
Mode 
ICW1 
LTIM 


Edge Triggered 
Mode 
ICW1 
LTIM 


Read Register Command, 
IRR 
OCW3 
RR,RIS 


Read Register Command, 
ISR 
OCW3 
RR, RIS 


Red IMR 
IMR 
MO-M7 


Poll Command 
OCW3 
P 


Special 
Fully Nested Mode 
ICW2,ICW4 
IC4 SFNM 


5.0 
PROGRAMMABLE 
INTERVAL 
TIMER 


5.1 
Functional 
Description 


The 82380 contains four independently Programma- 
ble Interval Timers: Timer 0-3. All four timers are 
functionally compatible to the Intel 82C54. The first 
three timers (Timer 0-2) 
have specific functions. 
The fourth timer, Timer 3, is a general purpose timer. 
Table 5-1 depicts the functions of each timer. A brief 
description of each timer's function follows. 


Table 5·1. Programmable 
Interval 
Timer Functions 


Timer 
Output 
Function 


0 
IR08 
Event Based 
IR08 Generator 
1 
TOUT1/REF# 
Gen. Purpose/DRAM 
Refresh Req. 


2 
TOUTU/IR03# 
Gen. Purpose/Speaker 
OutlIR03# 
3 
TOUT3# 
Gen. Purpose/I ROO 
Generator 


8- 
BIT 
~ 
INTERNAL BUS 


DATA BUFFER 
a: 
LOGIC 


CONTROL 
WORD 
REGISTERI 


CONTROL 
WORD 
REGISTERII 


Timer 0 is intended to be used as an Event Counter. 
The output of this timer will generate an Interrupt 
Request 8 (IR08) upon a rising edge of the timer 
output (TOUTO).Typically, this timer is used to im- 
plement a time-of-day clock or system tick. The Tim- 
er 0 output is not available as an external signal. 
TIMER 1- 
General Purpose/DRAM Refresh 
Request 


The output of Timer 1, TOUT1, can be used as a 
general purpose timer or as a DRAM Refresh Re- 
quest signal. The rising edge of this output creates a 
DRAM refresh request to the 82380 DRAM Refresh 
Controller. Upon reset, the Refresh Request func- 
tion is disabled, and the output pin is the Timer 1 
output. 


The Timer 2 output, TOUT2#, could be used to sup- 
port tone generation to an external speaker. This pin 
is a bidirectional signal. When used as an input, a 
logic LOW asserted at this pin will generate an Inter- 
rupt Register 3 (IR03#) 
(see Programmable Inter- 
rupt Controller). 


IROB 
(INTERNAL) 
BANK B 


REF ENABLE 
(INTERNAL) 


TOUT2#/IR03# 


tROO 
(INTERNAL) 
BANK A 


TIMER 3-General 
Purpose/Interrupt Request 0 
Generator 


The output of Timer 3 is fed to an edge detector and 
generates an Interrupt Request 0 (IROO) in the 
82380. The inverted output of this timer (TOUT3#) 
is also available as an external signal for general 
purpose use. 


The functional block diagram of the Programmable 
Interval Timer section is shown in Figure 5-1. Follow- 
ing is a description of each block. 


This part of the Programmable Interval Timer is used 
to interface the four timers to the 82380 internal bus. 
The Data Buffer is for transferring commands and 
data between the 8-bit internal bus and the timers. 
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The Read/Write Logic accepts inputs from the inter- 
nal bus and generates signals to control other func- 
tional blocks within the timer section. 


The Control Word Registers are write-only registers. 
They are used to control the operating modes of the 
timers. Control Word Register I controls Timers 0, 1 
and 2, and Control Word Register II controls Timer 
3. Detailed description of the Control Word Regis- 
ters will be included in the Register Set Overview 
section. 


COUNTER 0, COUNTER 1, 
COUNTER 2, COUNTER 3 


Counters 0, 1, 2, and 3 are the major parts of Timers 
0, 1, 2, and 3, respectively. These four functional 
blocks are identical in operation, so only a single 
counter will be described. The internal block dia- 
gram of one counter is shown in Figure 5-2. 


The four counters share a common clock input 
(CLKIN), but otherwise are fully independent. Each 
counter is programmable to operate in a different 
Mode. 


Although the Control Word Register is shown in the 
Figure 5-2, it is not part of the counter itself. Its pro- 
grammed contents are used to control the opera- 
tions of the counters. 


The Status Register, when latched, contains the cur- 
rent contents of the Control Word Register and 
status of the output and Null Count Flag (see Read 
Back Command). 


The Counting Element (CE) is the actual counter. It 
is a 16-bit presettable synchronous down counter. 


The Output Latches (OL) contain two 8-bit latches 
(OLM and OLL). Normally, these latches 'follow' the 
content of the CEoOLM contains the most signifi- 
cant byte of the counter and OLL contains the least 
significant byte. If the Counter Latch Command is 
sent to the counter, OL will latch the present count 
until read by the 80386 and then return to follow the 
CEoOne latch at a time is enabled by the timer's 
Control Logic to drive the internal bus. This is how 
the 16-bit Counter communicates over the 8-bit in- 
ternal bus. Note that CE cannot be read. Whenever 
the count is read, it is one of the OL's that is being 
read. 


When a new count is written into the counter, the 
value will be stored in the Count Registers (CR), and 
transferred to CEoThe transferring of the contents 
from CR's to CE is defined as 'loading' of the coun- 
ter. The Count Register contains two 8-bit registers: 
CRM (which contains the most significant byte) and 
CRL (which contains the least significant byte). Simi- 
lar to the OL's, the Control Logic allows one register 
at a time to be loaded from the 8-bit internal bus. 
However, both bytes are transferred from the CR's 
to the CE simultaneously. Both CR's are cleared 
when the Counter is programmed. This way, if the 
Counter has been programmed for one byte count 
(either the most significant or the least significant 
byte only), the other byte will be zero. Note that CE 
cannot be written into directly. Whenever a count is 
written, it is the CR that is being written. 


As shown in the diagram, the Control Logic consists 
of three signals: CLKIN, GATE, and OUT. CLKIN 
and GATE will be discussed in detail in the section 
that follows. OUT is the internal output of the coun- 
ter. The external outputs of some timers (TOUT) are 
the inverted version of OUT (see TOUT1, TOUT2#, 
TOUT3#). The state of OUT depends on the mode 
of operation of the timer. 


CLKIN is an input signal used by all four timers for 
internal timing reference. This signal can be inde- 
pendent of the 82380 system clock, CLK2. In the 
following discussion, each 'CLK Pulse' is defined as 
the time period between a rising edge and a falling 
edge, in that order, of CLKIN. 


During the rising edge of CLKIN, the state of GATE 1 
is sampled. All new counts are loaded and counters 
are decremented on the falling edge of CLKIN. 


Please note that there are restrictions on the CLKIN 
signal during WRITE cycles to the 82380 timer unit. 
Refer to the appendix of this data manual for details 
on this issue. 


5.2.2 TOUT1, TOUTU, 
TOUT3#< 


TOUT1, TOUT2# 
and TOUT3# 
are the external 
output signals of Timer 1, Timer 2 and Timer 3, re- 
spectively. TOUT2# and TOUT3# are the inverted 
signals of their respective counter outputs, OUT. 
There is no external output for Timer O. 


If Timer 2 is to be used as a tone generator of a 
speaker, external buffering must be used to provide 
sufficient drive capability. 


The Outputs of Timer 2 and 3 are dual function pins. 
The output pin of Timer 2 (TOUT2# /IR03#), 
which 
is a bidirectional open-collector signal, can also be 
used as interrupt request input. When the interrupt 
function is enabled (through the Programmable In- 
terrupt Controller), a LOW on this input will generate 
an Interrupt Request 3# to the 82380 Programma- 
ble Interrupt Controller. This pin has a weak internal 
pull-up resistor. To use the IR03# function, Timer 2 
should be programmed so that OUT2 is LOW. Addi- 
tionally, OUT3 of Timer 3 is connected to an edge 
detector which will generate an Interrupt Request 0 
{IROO)to the 82380 after the rising edge of OUT3 
(see Figure 5-1). 


GATE is not an externally controllable signal. Rath- 
er, it can be software controlled with the Internal 
Control Port. The state of GATE is always sampled 
on the rising edge of CLKIN. Depending on the 
mode of operation, GATE is used to enable/disable 
counting or trigger the start of an operation. 


For Timer 0 and 1, GATE IS always enabled (HIGH). 
For Timer 2 and 3, GATE is connected to Bit 0 and 


6, respectively, of an Internal Control Port (at ad- 
dress 61 H) of the 82380. After a hardware reset, the 
state of GATE of Timer 2 and 3 is disabled (lOW). 


Each. timer can be independently programmed to 
operate in one of six different modes. Timers are 
programmed by writing a Control Word into the con- 
trol Word Register followed by an Initial Count (see 
Programming). 


The following are defil1ed for use in describing the 
different modes of operation. 
. 


ClK Pulse-A 
rising edge, then a falling edge, in 
that order of ClKIN. 
Trigger-A 
rising edge of a timer's GATE input. 


Timer/Counter loading-The 
transfer of a count 
from Count Register (CR)to Count Element (CE). 


Note that figures 5-3 through 5-8 show the logical 
outputs of the timer units, OUTx. This signal polarity 
does not reflect that of the TOUTx signals. See the 
first paragraph of Section 5.2.2. 


5.3.1 MODE o-INTERRUPT 
ON TERMINAL 
COUNT 


Mode 0 is typically used for event counting. After the 
Control Word is written, OUT is initially lOW, and will 
remain lOW until the counter reaches zero. OUT 
then goes HIGH and remains HIGH until a new 
count or a new Mode 0 Control Word is written into 
the counter. 


In this mode, GATE = HIGH enables counting; 
GATE = lOW disables counting. However, GATE 
has no effect on OUT. 


After the Control Word and initial count are written to 
a timer, the initial count will be loaded on the next 
ClK pulse. This ClK pulse does not decrement the 


count, so for an initial count of N, OUT does not go 
HIGH until N + 1 ClK pulses after the initial count is 
written. 


If a new count is written to the timer, it will be loaded 
on the next ClK pulse and counting will continue 
from the new count. If a two-byte count is written, 
the following happens: 
1. Writing the first byte disables counting, OUT is set 
lOW immediately (Le., no ClK pulse required). 


2. Writing the second byte allows the new count to 
be loaded on the next ClK pulse. 


This allows the counting sequence to be synchroniz- 
ed by software. Again, OUT does not go HIGH until 
N + 1 ClK pulses after the new count of N is writ- 
ten. 


If an initial count is written while GATE is lOW, the 
counter will be loaded on the next ClK pulse. When 
GATE goes HIGH, OUT will go HIGH N ClK pulses 
later; no ClK pulse is needed to load the counter as 
this has already been done. 


5.3.2 MODE 1-GATE 
RETRIGGERABLE 
ONE·SHOT 


In this mode, OUT will be initially HIGH. OUT will go 
lOW on the ClK pulse following a trigger to start the 
one.shot operation. The OUT signal will then remain 
lOW until the timer reaches zero. At this point, OUT 
will stay HIGH until the next trigger comes in. Since 
the state of GATE signals of Timer 0 and 1 are inter- 
nally set to HIGH. 


After writing the Control Word and initial count, the 
timer is considered 'armed'. A trigger results in load- 
ing the timer and setting OUT lOW on the next ClK 
pulse. Therefore, an initial count of N will result in a 
one-shot pulse width of N ClK cycles. Note that this 
one-shot operation is retriggerable; Le., OUT will re- 
main lOW for N ClK pulses after every trigger. The 
one-shot operation can be repeated without rewrit- 
ing the same count into the timer. 


If a new count is written to the timer during a one- 
shot operation, the current one-shot pulse width will 
not be affected until the timer is retriggered. This is 
because loading of the new count to CE will occur 
only when the one-shot is triggered. 
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CW.10 
lSB.4 


WRITEL.!U 


ClK 


GATE 


OUT =:J 
I N I N I N I N I 
0 
0 
0 
0 
0 I ~~I 
FF 
4 
3 
2 
1 
0 
FE 
•• 


CW.10 
lSB.3 


WRITE L.!U 


ClK 


GATE 


OUT :=l 


I 
N 
I 
N 
I 
N 
I 
N 
I 
I 
~ 
I 
~ 
I 
0 
0 
FF 
1 
0 
FF 


WRITE 


ClK Jl.JlIl 


GATE 


OUT ==' 


I 
N 
I 
N 
I 
N 
I 
N 
I 
0 
0 
0 
0 
0 
FF 
3 
2 
2 
1 
0 
FF 
290128-68 


NOTES: 
The following 
conventions 
apply to all mode timing 
diagrams. 
1. Counters 
are programmed 
for binary (not BCD) counting 
and for reading/writing 
least significant 
byte (LSB) only. 
2. The counter 
is always 
selected 
(CS always 
low). 


3. CW stands 
for "Control 
Word"; 
CW = 10 means 
a control 
word of 10, Hex is written 
to the counter. 


4. LSB stands 
for "least 
significant 
byte" 
of count. 


5. Numbers 
below 
diagrams 
are count 
values. 


The lower 
number 
is the least significant 
byte. 
The upper 
number 
is the most significant 
byte. Since the counter 
is programmed 
to read/write 
LSB only, the 
most significant 
byte cannot 
be read. 


N stands 
for an undefined 
count. 


Vertical 
lines show transitions 
between 
count values. 


CW.12 
LSB.3 


WAITE LJLJ...-------------- 


GATE ------in---------~n----- 


OUT =.:J 
\ 
_ 


I N I N I N I N I N I ~ I ~ 


\ 
~I::I~I~ 


CW.12 
LSB.3 


WAITE LJU...-------------- 


\ 
1 


N I N I N I ~ I ~ 
~ 
~ 
~ 
~ I ~ I 


GATE -------in --------i rr----- 


OUT~ 


I N I N I N I N I N I ~ I ~ I ~ I :: I := I ~ 


Figure 5-4. Mode 1 


count of N, the sequence repeats every N ClK cy- 
cles. 


This mode is a divide-by-N counter. It is typically 
used to generate a Real Time Clock interrupt. OUT 
will initially be HIGH. When the initial count has dec- 
remented to 1.OUT goes lOW for one ClK pulse, 
then OUT goes HIGH again. Then the timer reloads 
the initial count and the process is repeated. In other 
words, this mode is periodic since the same se- 
quence is repeated itself indefinitely. For an initial 


Similar to Mode 0, GATE = HIGH enables counting, 
where GATE = 
lOW disables counting. If GATE 
goes lOW during an output pulse (lOW), OUT is set 
HIGH immediately. A trigger (rising edge on GATE) 
will reload the timer with the initial count on the next 
ClK pulse. Then, OUT will go lOW (for one ClK 
pulse) N ClK 
pulses after the new trigger. Thus, 


GATE can be used to synchronize the timer. 


CW=14 
LSB = 3 


WRITE LJU 


CLK 


GATE 


OUT 


I 
N I 
N I 
N I 
N I 
0 
0 
0 
0 
0 
3 
2 
3 
2 
3 


CW=14 
LSB = 3 


WRITE LJU 


CLK 


GATE 
LJ 


OUT =.:J 
LJ 


I 
N I N I 
N I N I 
I ~ I ~ I 
0 
I ~ I .~ I 
3 


LSB=5 


OUT~ 


I N I 
N I N I N I 


NOTE: 
A GATE transition 
should 
not occur 
one clock 
prior to terminal 
count. 


After 
writing 
a Control 
Word 
and 
initial 
count, 
the 
timer 
will be loaded 
on the 
next 
ClK 
pulse. 
OUT 
goes 
lOW 
(for the ClK 
pulse) 
N ClK 
pulses 
after 
the initial 
count 
is written. 
This 
is another 
way the 
timer may be synchronized 
by software. 


Figure 5-5. Mode 2 


the timer will be loaded 
with the new count 
on the 
next ClK 
pulse 
after 
the trigger, 
and counting 
will 
continue 
with the new count. 


Writing 
a new count 
while 
counting 
does 
not affect 
the 
current 
counting 
sequence 
because 
the 
new 
count will not be loaded 
until the end of the current 
counting 
cycle. 
If a trigger 
is received 
after writing a 
new count 
but before the end of the current 
period, 


5.3.4 MODE 3-SQUARE 
WAVE GENERATOR 


Mode 3 is typically 
used for Baud Rate generation. 


Functionally, 
this mode is similar 
to Mode 2 except 
for the duty cycle of OUT. In this mode, OUT will be 
initially 
HIGH. When 
half of the initial count 
has ex- 
pired, OUT goes low for the remainder 
of the count. 


• 


The counting sequence will be repeated, thus this 
mode is also periodic. Note that an initial count of N 
results in a square wave with a period of N ClK 
pulses. 


The GATE input can be used to synchronize the tim- 
er. GATE = HIGH enables counting; GATE = lOW 
disables counting. If GATE goes lOW while OUT is 
lOW, OUT is set HIGH immediately (Le., no ClK 
pulse is required). A trigger reloads the timer with the 
initial count on the next ClK pulse. 


After writing a Control Word and initial count, the 
timer will be loaded on the next ClK pulse. This al- 
lows the timer to be synchronized by software. 


Writing a new count while counting does not affect 
the current counting sequence. If a trigger is reo 
ceived after writing a new count but before the end 
of the current half-cycle of the square wave, the tim- 
er will be loaded with the new count on the next ClK 
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pulse and counting will continue from the new count. 
Otherwise, the new count will be loaded at the end 
of the current half-cycle. 


There is a slight difference in operation depending 
on whether the initial count is EVEN or ODD. The 
following description is to show exactly how this 
mode is implemented. 


OUT is initially HIGH. The initial count is loaded on 
one ClK pulse and is decremented by two on suc- 
ceeding ClK pulses. When the count expires (decre- 
mented to 2), OUT changes to lOW and the timer is 
reloaded with the initial count. The above process is 
repeated indefinitely. 


OUT is initially HIGH. The initial count minus one 
(which is an even number) is loaded on one ClK 


CW.1, 
LIB•• 
WAITE LJl-J---------------- 


CW.18 
LI••• 
WAITE LJl-J---------------- 


CW_1' 
LIB•• 
WAITE LJU---------------- 


NOTE: 
A-GATE 
transition 
should 
not occur 
one clock 
prior to terminal 
count. 
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pulse and is decremented by two on succeeding 
ClK pulses. One ClK pulse after the count expires 
(decremented to 2), OUT goes lOW and the timer is 
loaded with the initial count minus one again. Suc- 
ceeding ClK 
pulses decrement the count by two. 
When the count expires, OUT goes HIGH immedi- 
ately and the timer is reloaded with the initial count 
minus one. The above process is repeated indefi- 
nitely. So for ODD counts, OUT will be HIGH for (N 
+ 1)/2 counts and lOW for (N - 
1)/2 counts. 


5.3.5 MODE 4-INITIAL 
COUNT TRIGGERED 
STROBE 


This mode allows a strobe pulse to be generated by 
writing an initial count to the timer. Initially, OUT will 


be HIGH. When a new initial count is written into the 
timer, the counting sequence will begin. When the 
initial count expires (decremented to 1), OUT will go 
lOW for one ClK pulse and then go HIGH again. 


Again, GATE = HIGH enables counting while GATE 
= lOW disables counting. GATE has no effect on 
OUT. 


After writing the Control Word and initial count, the 
timer will be loaded on the next ClK pulse. This ClK 
pulse does not decrement the count, so for an initial 
count of N, OUT does not strobe lOW until N + 1 
ClK pulses after initial count is written. 


If a new count is written during counting, it will be 
loaded in the next ClK pulse and counting will con- 
tinue from the new count. 


CW.18 
LSB.3 


WRITE 
~------------- 


GATE 


OUT =.:J 


I N I N I N I N I 
u 


o I 
0 I FF I FF I FF I 
1 
0 
FF 
FE 
FD 


CW.18 
LSB.3 


WRITE lJU------------- 


OUT =.:J 


I N I N I N I N I ~ I ~ I ~ I ~ LJ 


o I 
0 I FF I 
1 
0 
FF 


OUT =.:J 


I N I N I N I N I ~ I ~ I ~ I ~ 


ITa IWO-OYlecoum ISwrmen, me TOllowlngWilloccur: 
1. Writing the first byte has no effect on counting. 
2. Writing the second byte allows the new count to 
be loaded on the next ClK pulse. 


OUT will strobe lOW N + 1 ClK pulses after the 
new count of N is written. Therefore, when the 
strobe pulse will occur after a trigger depends on the 
value of the initial count loaded. 


5.3.6 MODE 5-GATE 
RETRIGGERABLE 
STROBE 


Mode 5 is very similar to Mode 4 except the count 
sequence is triggered by the GATE signal instead of 


oy writing an Initial count. inItiallY,UU I WIllDe HI(jH. 
Counting is triggered by a rising edge of GATE. 
When the initial count has expired (decremented to 
1), OUT will go lOW for one ClK pulse and then go 
HIGH again. 


After loading the Control Word and initial count, the 
Count Element will not be loaded until the ClK pulse 
after a trigger. This ClK pulse does not decrement 
the count. Therefore, for an initial count of N, OUT 
does not strobe lOW until N + 1 ClK pulses after a 
trigger. 


CWzlA 
lS8=3 


WRITE LJLJ------------- 


GATE -------1 n---------lrc= 


CW=lA 
lS8=3 


WRITE LJLJ---------------- 


GATE 
- 
- 
- 
- 
- 
- 
- 
- -1~ 
------------ 


OUT =.=J 


ININININININI~I 
u- 


o I 
0 I FF I 
1 
0 
FF 


GATE 
- 
---- 
---vr---------',n--- -- 


OUT =.::J 


I N I N I N I N 
U 


I N I ~ I ~ I ~ I ~ I ~~I ~~ I 


Mode 
GATE LOW or 
GATE Rising 
GATE 
Going LOW 
HIGH 


0 
Disable Count 
No Effect 
Enable Count 
1 
No Effect 
1. Initiate Count 
No Effect 
2. Reset Output 
After Next Clock 
2 
1. Disable Count 
Initiate Count 
Enable Count 
2. Sets Output HIGH 
Immediately 
3 
1. Disable Count 
Initiate Count 
Enable Count 
2. Sets Output HIGH 
Immediately 
4 
Disable Count 
No Effect 
Enable Count 
5 
No Effect 
Initiate Count 
No Effect 


The counting sequence is retriggerable. Every trig- 
ger will result in the timer being loaded with the initial 
count on the next CLK pulse. 


If the new count is written during counting, the cur- 
rent counting sequence will not be affected. If a trig- 
ger occurs after the new count is written but before 
the current count expires, the timer will be loaded 
with the new count on the next CLK pulse and a new 
count sequence will start from there. 


The GATE input is always sampled on the rising 
edge of CLKIN. In Modes 0, 2, 3 and 4, the GATE 
input is level sensitive. The logic level is sampled on 
the rising edge of CLKIN. In Modes 1, 2, 3 and 5, the 
GATE input is rising edge sensitive. In these modes, 
a rising edge of GATE (trigger) sets an edge sensi- 
tive flip-flop in the timer. The flip-flop is reset imme- 
diately after it is sampled. This way, a trigger will be 
detected no matter when it occurs; i.e., a HIGH logic 
level does not have to be maintained until the next 
rising edge of CLKIN. Note that in Modes 2 and 3, 
the GATE input is both edge and level sensitive. 


New counts are loaded and counters are decre- 
mented on the falling edge of CLKIN. The largest 
possible initial count is O. This is equivalent to 2"16 
for binary counting and 10"4 
for BCD counting. 


Note that the counter does not stop when it reaches 
zero. In Modes 0, 1, 4, and 5, the counter 'wraps 


around' to the highest count: either FFFF Hex for 
binary counting or 9999 for BCD counting, and con- 
tinues counting. Modes 2 and 3 are periodic. The 
counter reloads itself with the initial count and con- 
tinues counting from there. 


The minimum and maximum initial count in each 
counter depends on the mode of operation. They 
are summarized below. 


Mode 
Mln 
Max 


0 
1 
0 
1 
1 
0 
2 
2 
0 
3 
2 
0 
4 
1 
0 
5 
1 
0 


The Programmable Interval Timer module of the 
82380 contains a set of six registers. The port ad- 
dress map of these registers is shown in Table 5-2. 


Table 5-2. Timer Register 
Port Address 
Map 


Port Address 
Description 


40H 
Counter 0 Register (read/write) 
41H 
Counter 1 Register (read/write) 
42H 
Counter 2 Register (read/write) 
43H 
Control Word Register I 
(Counter 0, 1 & 2) (write-only) 


44H 
Counter 3 Register (read/write) 
45H 
Reserved 
46H 
Reserved 
47H 
Control Word Register II 
(Counter 3) (write-only) 


• 


These four 8-bit registers are functionally identical. 
They are used to write the initial count value into the 
respective timer. Also, they can be used to read the 
latched count value of a timer. Since they are 8-bit 
registers, reading and writing of the 16-bit initial 
count must follow the count format specified in the 
Control Word Registers; .Le., least significant byte 
only, most significant byte only, or least significant 
byte then most significant byte (see Programming). 


There are two Control Word Registers associated 
with the Timer section. One of the two registers 
(Control Word Register I) is used to control the oper- 
ations of Counters 0, 1, and 2 and the other (Control 
Word Register II) is for Counter 3. The major func- 
tions of both Control Word Registers are listed be- 
low: 
- 
Select the timer to be programmed. 


- 
Define which mode the selected timer is to oper- 
ate in. 
- 
Define the count sequence; Le., if the selected 
timer is to count as a Binary Counter or a Binary 
Coded Decimal (BCD) Counter. 


- 
Select the byte access sequence during timer 
read/write operations; Le., least significant byte 
only, most significant byte only, or least signifi- 
cant byte first, then most significant byte. 


Also, the 
Control Word Registers can be pro- 
grammed to perform a Counter Latch Command or a 
Read Back Command which will be described later. 


Upon power-up or reset, the state of all timers is 
undefined. The mode, count value, and output of all 
timers are random. From this point on, how each 
timer operates is determined solely by how it is pro- 
grammed. Each timer must be programmed before it 
can be used. Since the outputs of some timers can 
generate interrupt signals to the 82380, all timers 
should be initialized to a known state. 


Timers are programmed by writing a Control Word 
into their respective Control Word Registers. Then, 
an Initial Count can be written into the correspond- 
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ing Count Register. In general, the programming pro- 
cedure is very flexible. Only two conventions need to 
be remembered: 
1. For each timer, the Control Word must be written 
before the initial count is written. 


2. The 16-bit initial count must follow the count for- 
mat specified in the Control Word (least signifi- 
cant byte only, most significant byte only, or least 
significant byte first, followed by most significant 
byte). 


Since the two Control Word Registers and the four 
Counter Registers have separate addresses, and 
each timer can be individually selected by the appro- 
priate Control Word Register, no special instruction 
sequence is required. Any programming sequence 
that follows the conventions above is acceptable. 


A new initial count may be written to a timer at any 
time without affecting the timer's programmed mode 
in any way. Count sequence will be affected as de- 
scribed in the Modes of Operation section. Note that 
the new count must follow the programmed count 
format. 


If a timer is previously programmed to read/write 
two-byte counts, the following precaution applies. A 
program must not transfer control between writing 
the first and second byte to another routine which 
also writes into the same timer. Otherwise, the 
read/write will result in incorrect count. 


Whenever a Control Word is written to a timer, all 
control logic for that timer(s) is immediately reset 
(Le., no CLK pulse is required). Also, the corre- 
sponding output pin, TOUT(#), goes to a known ini- 
tial state. 


Three methods are available to read the current 
count as well as the status of each timer. They are: 
Read Counter Registers, Counter Latch Command 
and Read Back Command. Following is a descrip- 
tion of these methods. 


The current count of a timer can be read by perform- 
ing a read operation on the corresponding Counter 
Register. The only restriction of this read operation 
is that the CLKIN of the timers must be inhibited by 


using external logic. Otherwise, the count may be in 
the process of changing when it is read, giving an 
undefined result. Note that since all four timers are 
sharing the same CLKIN signal, inhibiting CLKIN to 
read a timer will unavoidably disable the other timers 
also. This may prove to be impractical. Therefore, it 
is suggested that either the Counter Latch Com- 
mand or the Read Back Command be used to read 
the current count of a timer. 


Another alternative is to temporarily disable a timer 
before reading its Counter Register by using the 
GATE input. Depending on the mode of operation, 
GATE = LOW will disable the counting operation. 
However, this option is available on Timer 2 and 3 
only, since the GATE signals of the other two timers 
are internally enabled all the time. 


A Counter Latch Command will be executed when- 
ever a special Control Word is written into a Control 
Word Register. Two bits written into the Control 
Word Register distinguish this command from a 'reg- 
ular' Control Word (see Register Bit Definition). Also, 
two other bits in the Control Word will select which 
counter is to be latched. 


Upon execution of this command, the selected 
counter's Output Latch (OL) latches the count at the 
time the Counter Latch Command is received. This 
count is held in the latch until it is read by the 80386, 
or until the timer is reprogrammed. The count is then 
unlatched automatically and the OL returns to 'fol- 
lowing' the Counting Element (CE).This allows read- 
ing the contents of the counters 'on the fly' without 
affecting 
counting in progress. Multiple Counter 
Latch Commands may be used to latch more than 
one counter. Each latched count is held until it is 
read. Counter Latch Commands do not affect the 
programmed mode of the timer in any way. 


If a 'counter is latched, and at some time later, it is 
latched again before the prior latched count is read, 
the second Counter Latch Command is ignored. The 
count read will then be the count at the time the first 
command was issued. 


In any event, the latched count must be read ac- 
cording to the programmed format. Specifically, if 
the timer is programmed for two-byte counts, two 
bytes must be read. However, the two bytes do not 
have to be read right after the other. Read/write or 
programming operations of other timers may be per- 
formed between them. 


Another feature of this Counter Latch Command is 
that read and write operations of the same timer 
may be interleaved. For example, if the timer is pro- 
grammed for two-byte counts, the following se- 
quence is valid. 
1. Read least significant byte. 
2. Write new least significant byte. 
3. Read most significant byte. 
4. Write new most significant byte. 


If a timer is programmed to read/write 
two-byte 


counts, the following precaution applies. A program 
must not transfer control between reading the first 
and second byte to another routine which also reads 
from that same timer. Otherwise, an incorrect count 
will be read. 


The Read Back Command is another special Com- 
mand Word operation which allows the user to read 
the current count value and/or the status of the se- 
lected timer(s). Like the Counter Latch Command, 
two bits in the Command Word identify this as a 
Read Back Command (see Register Bit Definition). 


The Read Back Command may be used to latch 
multiple counter Output Latches (OL's) by selecting 
more than one timer within a Command Word. This 
single command is functionally equivalent to several 
Counter Latch Commands, one for each counter to 
be latched. Each counter's latched count will be 
held until it is read by the 80386 or until the timer is 
reprogrammed. The counter is automatically un- 
latched when 
read, but other 
counters 
remain 


latched until they are read. If multiple Read Back 
commands are issued to the same timer without 
reading the count, all but the first are ignored; i.e., 
the count read will correspond to the very first Read 
Back Command issued. 


As mentioned previously, the Read Back Command 
may also be used to latch status information of the 
selected timer(s). When this function is enabled, the 
status of a timer can be read from the Counter Reg- 
ister after the Read Back Command is issued. The 
status information of a timer includes the following: 
1. Mode of timer: 


This allows the user to check the mode of opera- 
tion of the timer last programmed. 


2. State of TOUT pin of the timer: 


This allows the user to monitor the counter's out- 
put pin via software, possibly eliminating some 
hardware from a system. 


The Null Count Bit in the status byte indicates if 
the last count written to the Count Register (CR) 
has been loaded into the Counting Element (CE). 
The exact time this happens depends on the 
mode of the timer and is described in the Pro- 
gramming section. Until the count is loaded into 
the Counting Element (CE),it cannot be read from 
the timer. If the count is latched or read before 
this occurs, the count value will not reflect the 
new count just written. 


If multiple status latch operations of the timer(s) are 
performed without reading the status, all but the first 
command are ignored; i.e., the status read in will 
correspond to the first Read Back Command issued. 


Both the current count and status of the selected 
timer{s) may be latched simultaneously by enabling 
both functions in a single Read Back Command. 
This is functionally the same as issuing two separate 
Read Back Commands at once. Once again, if multi- 
ple read commands are issued to latch both the 
count and status of a timer, all but the first command 
will be ignored. 
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first read operation of that timer will return the 
latched status, regardless of which was latched first. 
The next one or two (if two count bytes are to be 
read) read operations return the latched count. Note 
that subsequent read operations on the Counter 
Register will return the unlatched count (like the first 
read method discussed). 


5.6 
Register Bit Definitions 


COUNTER 0, 1, 2, 3 REGISTER (READ/WRITE) 


Port Address 
Description 


40H 
Counter 0 Register (read/write) 
41H 
Counter 1 Register (read/write) 
42H 
Counter 2 Register (read/write) 
44H 
Counter 3 Register (read/write) 
45H 
Reserved 
46H 
Reserved 


~ 


lSB Of COUNT BYTE 


MSB Of COUNT BYTE 


reaomg aT one byte of the 16-bit count value, either 
the most significant 
or the least significant 
byte. 


Port Address 
Description 


43H 
Control Word Register 
I 
(Counter 0, 1, 2) (write-only) 
47H 
Control Word Register 
II 
(Counter 3) (write-only) 


SELECT 
COUNTER: 


00 
SELECT 
COUNTER 
0 
01 
SELECT 
COUNTER 
1 
10 
SELECT 
COUNTER 
2 
11 
READ BACK 
COMMAND 
FOR COUNTER 
0-2 


0- 
16-BIT 
BINARY 
COUNTER 


1 - BCD COUNTER 
(. 
DECADES) 


READ/WRITE: 


00 
COUNTER 
LATCH 
COMMAND 
01 
READ/WRITE 
LSB 
BYTE ONLY 
10 
READ/WRITE 
MSB 
BYTE ONLY 
11 
READ/WRITE 
LSB, 
THEN 
MSB 
BYTE 


MODE: 


000 
MODE 0 
001 
MODE 
1 
Xl0 
MODE 
2 
Xl1 
MODE 3 
100 
MODE. 
101 
MODE 5 


2OO12B-75 


Timer 
Gate 
Mode 
Trigger 


0 
1 
2 
3 
Edge 
Level 


0 
X 
1 
NA 
NA 
<D 
<D 
X 
2 
X 
X 
3 
X 
X 
4 
X 
5 
NA 
NA 
<D 
<D 
X 


SELECT 
COUNTER: 


00 
SELECT 
COUNTER 
3 
01 
RESERVED 
10 
RESERVED 
11 
READ BACK 
COMMAND 
FOR COUNTER 
3 


0- 
16-BIT 
BINARY 


COUNTER 


1 - 
BCD COUNTER 
(. 
DECADES) 


READ/WRITE: 


00 
COUNTER 
LATCH 
COMMAND 
01 
READ/WRITE 
LSB 
BYTE ONLY 
10 
READ/WRITE 
MSB 
BYTE ONLY 
11 
READ/WRITE 
LSB, 
THEN 
MSB 
BYTE 


MODE: 


000 
MODE 0 
001 
MODE 
1 
Xl0 
MODE 2 


XII 
MODE 
3 


100 
MODE. 


101 
MODE 5 


2OO12B-76 


COUNTER 
LATCH COMMAND 
FORMAT 
(Write to Control 
Word Register) 


00 
COUNTER 
0 
(OR 
3) 


01 
COUNTER 
1 


10 
COUNTER 
2 


11 
READ 
BACK 
COMMAND 


Interrupt 
on Terminal 
Count 
Gate Retriggerable 
One Shot 
Rate Generator 
Square Wave Generator 
Initial Count Triggered 
Strobe 
Gate Retriggerable 
Strobe 


<D = Must use Port 61 to generate 
.../ 
edge. 


NA = Not Applicable 


•• 


intel~ 


READ BACK COMMAND FORMAT 
(Write to Control Word Register) 


0- 
LATCH STATUS 
1 - 
00 
NOT LATCH 
STATUS 


0- 
COUNTER NOT 
SELECTED 
1 - 
COUNTER IS 
SELECTED 


STATUS FORMAT 
(Returned from Read Back Command) 


0- 
COUNT AVAILABLE 
FOR READING 
1 - 
NULL COUNT 


lined mode, and 0 to 15 wait states in pipelined 
mode. Depending on the bus cycle type and the two 
Wait State Control inputs (WSC 0-1l, a pre-pro- 
grammed number of wait states in the selected Wait 
State Register will be generated. 
6.1 
Functional 
Description 


The 82380 contains a programmable Wait State 
Generator which can generate a pre-programmed 
number of wait states during both CPU and DMA 
initiated bus cycles. This Wait State Generator is ca- 
pable of generating 1 to 16 wait states in non-pipe- 


The Wait State Generator can also be disabled to 
allow the use of devices capable of generating their 
own READY# signals. Figure 6-1 is a block diagram 
of the Wait State Generator. 


The following describes the interface signals which 
affect the operation of the Wait State Generator. 
The READY#, WSCOand WSC1 signals are inputs. 
READYO# is the ready output signal to the host 
processor. 


READY# is an active LOW input signal which indi- 
cates to the 82380 the completion of a bus cycle. In 
the Master mode (e.g., 82380 initiated DMA trans- 
fer), this signal is monitored to determine whether a 
peripheral or memory needs wait states inserted in 
the current bus cycle. In the Slave mode, it is used 
(together with the ADS# signal) to trace CPU bus 
cycles to determine if the current cycle is pipelined. 


6.2.2 READYO# 


READYO# (Ready Out#) is an active LOW output 
signal and is the output of the Wait State Generator. 
The number of wait states generated depends on 
the WSC(0-1) inputs. Note that special cases are 


handled for access to the 82380 internal registers 
and for the Refresh cycles. For 82380 internal regis- 
ter access, READYO# will be delayed to take into 
account the command recovery time of the register. 
One or more wait states will be generated in a pipe- 
lined cycle. During refresh, the number of wait states 
will be determined by the preprogrammed value in 
the Refresh Wait State Register. 


In the simplest configuration, READYO# 
can be 


connected to the READY# input of the 82380 and 
the 80386 CPU. This is, however, not always the 
case. If external circuitry is to control the READY# 
inputs as well, additional logic will be required (see 
Application Issues). 


These two Wait State Control inputs select one of 
the three pre-programmed 8-bit Wait State Registers 
which determines the number of wait states to be 
generated. The most significant half of the three 
Wait State Registers corresponds to memory ac- 
cesses, the least significant half to I/O accesses. 
The combination WSC(0-1) = 11 disables the Wait 
State Generator. 


INTERNAL 
WAIT STATE 
REQUIREWENT 


07 
004 03 
DO 


t.4Et.40RY 0 
I/O 
0 


WSCO 
REGISTER 
t.4Et.40RY 1 
I/O 
1 


WSCl 
SELECT 
I/O 
2 
LOGIC 
t.4Et.40RY 2 
WAIT STATE 
t.4/10# 
(RESERVED) 
REFRESH 
COUNTER 


CLK 


A(2-31) 
lA/IO# 
8E(0- 3)# 


WSC(O-l) 


Figure 6·2. Walt States in Non·Plpelined 
Cycles 


rising edge of the next clock (82384 ClK) after the 
last state when ADS# (Address Status) is asserted. 


6.3.1 WAIT 
STATES 
IN NON·PIPELINED 
CYCLE 


The timing diagram of two typical non-pipelined cy- 
cles with 82380 generated wait states is shown in 
Figure 6-2. In this diagram, it is assumed that the 
internal registers of the 82380 are not addressed. 
During the first T2 state of each bus cycle, the Wait 
State Control and the MilOI' 
inputs are sampled to 
determine which Wait State Register (if any) is se- 
lected. If the WSC inputs are active (Le.,not both are 
driven HIGH), the pre-programmed number of wait 
states corresponding to the selected Wait State 
Register will be requested. This is done by driving 
the READYO# output HIGH during the end of each 
T2 state. 


The WSC(0-1) inputs need only be valid during the 
very first T2 state of each non-pipelined cycle. As a 
general rule, the WSC inputs are sampled on the 


The number of wait states generated depends on 
the type of bus cycle, and the number of wait states 
requested. The various combinations are discussed 
below. 
1. Access the 82380 internal registers: 2 to 5 wait 


states, depending upon the specific register ad- 
dressed. Some back-to-back sequences to the In- 
terrupt Controller will require 7 wait states. 
2. Interrupt Acknowledge 
to 
the 
82380: 5 wait 


states. 


3. Refresh: As programmed in the Refresh Wait 
State Register (see Register Set Overview). Note 
that if WSC(0-1) = 11, READYO# will stay inac- 
tive. 
4. Other bus cycles: Depending on WSC(0-1) and 
MilOI' 
inputs, these inputs select a Wait State 
Register in which the number of wait states will be 
equal to the pre-programmed wait state count in 
the register plus 1. The Wait State Register selec- 
tion is defined as follows (Table 6-1). 


MIlO#- 
WSC(1-0) 
Register Selected 


0 
00 
WAIT REG 0 (110 half) 
0 
01 
WAIT REG 1 (110 half) 
0 
10 
WAIT REG 2 (110 half) 
1 
00 
WAIT REG 0 (MEM half) 
1 
01 
WAIT REG 1 (MEM half) 
1 
10 
WAIT REG 2 (MEM half) 


X 
11 
Wait State Gen. Disabled 


The Wait State Control signals, WSC(0-1), can be 
generated with the address decode and the Readl 
Write control signals as shown in Figure 6-3. 


ADDRESS 
DECODEtlLOGIC 
WSC (O-1) 
W/R# 


290128-82 


CLK 
A(2-31) 
1.4/10# 
8E(O - 3)# 


WSC(O-1} 


Note that during HALT and SHUTDOWN, the num- 
ber of wait states will depend on the WSC(0-1) in- 
puts, which will select the memory half of one of the 
Wait State Registers (see CPU Reset and Shutdown 
Detect). 


The timing diagram of two typical pipelined cycles 
with 82380 generated wait states is shown in Figure 
6-4. Again, in this diagram, it is assumed that the 
82380 internal registers are not addressed. As de- 
fined in the timing of the 80386 processor, the Ad- 
dress (A 2-31), 
Byte Enable (BE 0-3), 
and other 
control signals (MilO#-, ADS#-) are asserted one 
T state earlier than in a non-pipelined cycle; i.e., they 
are asserted at T2P. Similar to the non-pipelined 
case, the Wait State Control (WSC) inputs are sam- 
pled in the middle of the state after the last state 
when the ADS#- signal is asserted. Therefore, the 
WSC inputs should be asserted during the T1P state 
of each pipelined cycle (which is one T state earlier 
than in the non-pipelined cycle). 


The number of wait states generated in a pipelined 
cycle is selected in a similar manner as in the non- 
pipelined case discussed in the previous section. 
The only difference here is that the actual number of 
wait states generated will be one less than that of 
the non-pipelined cycle. This is done automatically 
by the Wait State Generator. 


6.3.3 EXTENDING 
AND EARLY 
TERMINATING 
BUS CYCLE 


The 82380 allows external logic to either add wait 
states or cause early termination of a bus cycle by 
controlling the READY'# input to the 82380 and the 
host processor. A possible configuration is shown in 
Figure 6-5. 


The EXT. ROY# (External Ready) signal of Figure 
6-5 allows external devices to cause early termina- 
tion of a bus cycle. When this signal is asserted 
LOW, the output of the circuit will also go LOW 
(even though the READYO# of the 82380 may still 
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be HIGH). This output is fed to the READY# input of 
the 80386 and the 82380 to indicate the completion 
of the current bus cycle. 


Similarly, the 
EXT. NOT READY (External Not 
Ready) signal is used to delay the READY# input of 
the processor and the 82380. As long as this signal 
is driven HIGH, the output of the circuit will drive the 
READY# input HIGH. This will effectively extend the 
duration of a bus cycle. However, it is important to 
note that if the two-level logic is not fast enough to 
satisfy the READY# setup time, the OR gate should 
be eliminated. Instead, the 82380 Wait State Gener- 
ator can be disabled by driving both WSC(0-1) 
HIGH. In this case, the addressed memory or 1/0 
device should activate the external READY# input 
whenever it is ready to terminate the current bus 
cycle. 


Figure 6-6 and 6-7 show the timing relationships of 
the ready signals for the early termination and exten- 
sion of the bus cycles. Section 6.7, Application is- 
sues, contains a detailed timing analysis of the ex- 
ternal circuit. 
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A(2-31} 
tol/IO# 
8E(0 - 3)# 
ADS# 
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A(2- 31) 
1.4/10# 
BE(O- 3)# 
ADS# 


Figure 6-7. Extending Bus Cycle by 'READY,*,' 


Due to the following implications, it should be noted 
WAIT STATE REGISTER 0,1,2 
that early termination of bus cycles in which 82380 
internal registers are accessed is not recommended. 
1. Erroneous data may be read from or written into 
the addressed register. 


2. The 82380 must be allowed to recover either be- 
fore HLDA (Hold Acknowledge) is asserted or be- 
fore another bus cycle into an 82380 internal reg- 
ister is initiated. 
The recovery time, in bus periods, equals the re- 
maining wait states that were avoided plus 4. 


Altogether, there are four 8-bit internal registers as- 
sociated with the Wait State Generator. The port ad- 
dress map of these registers is shown below in Ta- 
ble 6-2. A detailed description of each follows. 


Table 6-2. Register Address Map 


Port Address 
Description 


72H 
Wait State Reg 0 (read/write) 
73H 
Wait State Reg 1 (read/write) 
74H 
Wait State Reg 2 (read/write) 
75H 
Ref. Wait State Reg (read/write) 


These three 8-bit read/write registers are functional- 
ly identical. They are used to store the pre-pro- 
grammed wait state count. One half of each register 
contains the wait state count for I/O accesses while 
the other half contains the count for memory ac- 
cesses. The total number of wait states generated 
will depend on the type of bus cycle. For a non-pipe- 
lined cycle, the actual number of wait states request- 
ed is equal to the wait state count plus 1. For a 
pipelined cycle, the number of wait states will be 
equal to the wait state count in the selected register. 
Therefore, the Wait State Generator is capable of 
generating 1 to 16 wait states in non-pipelined 
mode, and 0 to 15 wait states in pipelined mode. 


Note that the minimum wait state count in each reg- 
ister is O. This is equivalent to 0 wait states for a 
pipelined cycle and 1 wait state for a non-pipelined 
cycle. 


Similar to the Wait State Registers discussed above, 
this 4-bit register is used to store the number of wait 
states to be generated during the DRAM refresh cy- 
cle. Note that the Refresh Wait State Register is not 
selected by the WSC inputs. It will automatically be 
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tresn cycle (WSC(0-1) = 11), READYO;# will stay 
inactive and the Refresh Wait State Register is ig- 
nored. 


6.5 Programming 


Using the Wait State Generator is relatively straight- 
forward. No special programming sequence is re- 
quired. In order to ensure the expected number of 
wait states will be generated when a register is se- 
lected, the registers to be used must be pro- 
grammed after power-up by writing the appropriate 
wait state count into each register. Note that upon 
hardware reset, all Wait State Registers are initial- 
ized with the value FFH, giving the maximum num- 
ber of wait states possible. Also, each register can 
be read to check the wait state count previously 
stored in the register. 


6.6 Register Bit Definition 


WAIT STATE REGISTER 0,1,2 


Port Address 
Description 


72H 
Wait State Register 0 (read/write) 
73H 
Wait State Register 1 (read/write) 
74H 
Wait State Register 2 (read/write) 


I/O 
WAIT 
STATE COUNT 


t.4Et.40RY WAIT STATE COUNT 
290128-87 


As mentioned in section 6.3.3, wait state cycles gen- 
erated by the 82380 can be terminated early or ex- 
tended longer by means of additional external logic 
(see Figure 6-5). In order to 
ensure that 
the 
READY;# input timing requirement of the 80386 and 
the 82380 is satisfied, special care must be taken 
when designing this external control logic. This sec- 
tion addresses the design requirements. 


A simplified block diagram of the external logic along 
with the READY# tiiming diagram is shown in Figure 
6-8. The purpose is to determine the maximum delay 
time allowed in the external control logic in order to 
satisfy the READY# setup time. 


First, it will be assumed that the 80386 is running at 
16 MHz (Le.,CLK2 and 32 MHz). Therefore, one bus 
state (two CLK2 periods) will be equivalent to 62.5 
nsec. According to the AC specifications of the 


82380, the maximum delay time for valid READYO# 
signal is 31 ns after the rising edge of CLK2 in the 
beginning of T2 (for non-pipelined cycle) or T2P (for 
pipelined cycle). Also, the minimum READY# setup 
time of the 80386 and the 82380 should be 20 ns 
before the rising edge of CLK2 at the beginning of 
the next bus state. This limits the total delay time for 
the external READY# control logic to be 11 ns 
(62.5-31-21) in order to meet the READY# setup 
timing requirement. 


A = PHI1 + PHI2 = 62.5 ns 
B = 
Maximum 
READYO# 
Valid 
Delay = 31 ns 
C = READY # Set-up 
Time 
= 21 ns 
D = 
Maximum 
Ready 
Control 
Logic 
Delay 
= A - 
B - 
C = 
11 ns 
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7.1 
Functional Description 


The 82380 DRAM Refresh Controller consists of a 
24-bit Refresh Address Counter and Refresh Re- 
quest logic for DRAM refresh operations (see Figure 
7-1). TIMER 1 can be used as a trigger signal to the 
DRAM Refresh Request logic. The Refresh Bus Size 
can be programmed to be 8-, 16-, or 32-bit wide. 
Depending on the Refresh Bus Size, the Refresh 
A~dress Counter will be incremented with the appro- 
priate value after every refresh cycle. The internal 
logic of the 82380 will give the Refresh operation the 
highest priority in the bus control arbitration process. 
Bus control is not released and re-requested if the 
82380 is already a bus master. 


DRAM 
REFRESH 
CONTROLLER 


7.2.1 TOUT1/REF# 


The dual function output pin of TIMER 1 (TOUT11 
REF#) can be programmed to generate DRAM Re- 
fresh signal. If this feature is enabled, the rising edge 
of TIMER 1 output (TOUT1) will trigger the DRAM 
Refresh Request logic. After some delay for gaining 
access of the bus, the 82380 DRAM Controller will 
generate a DRAM Refresh signal by driving REF# 
output LOW. This signal is cleared after the refresh 
cycle has taken place, or by a hardware reset. 


If the 
DRAM Refresh feature 
is disabled, the 
TOUT1/REF # output pin is simply the TIMER 1 out- 
put..Detailed information of how TIMER 1 operates 


IS discussed in section 6-Programmable 
Interval 
Timer, and will not be repeated here. 


iNTERNAL 
DMA 
HANDSHAKE 
DMA 
CONTROLLER 
ARBiTRATION 
LOGIC 


24- 
BIT 
REFRESH 
ADDRESS 


TO DMA 
CONTROLLER 
(iNTERNAL) 
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7.3.1 ARBITRATION 


In order to ensure data integrity of the DRAMs, the 
82380 gives the DRAM Refresh signal the highest 
priority in the arbitration logic. It allows DRAM Re- 
fresh to interrupt a DMA in progress in order to per- 
form the DRAM Refresh cycle. The DMA service will 
be resumed after the refresh is done. 


In case of a DRAM Refresh during a DMA process, 
the cascaded device will be requested to get off the 
bus. This is done by deasserting the EDACK signal. 
Once DREQn goes inactive, the 82380 will perform 
the refresh operation. Note that the DMA controller 
does not completely relinquish the system bus dur- 
ing refresh. The Refresh Generator simply 'steals' a 
bus cycle between DMA accesses. 


Figure 7-2 shows the timing diagram of a Refresh 
Cycle. Upon expiration of TIMER 1, the 82380 will,try 
to take control of the system bus by asserting 
HOLD. As soon as the 82380 see HLDA go active, 
the DRAM Refresh Cycle will be carried out by acti- 
vating the REF# signal as well as the refresh ad- 
dress and control signals on the system bus (Note 


HLOA 


A(2-31)· 
1.4/10# 
o/c# 
8E(0-3}# 
W/R# 


Toun 


°NOTE: 
A24-A31 
= 1 during Refresh cycle. 


that REF# will not be active until two CLK periods 
after HLDA is asserted). The address bus will con- 
tain the 24-bit address currently in the Refresh Ad- 
dress Counter. The control signals are driven the 
same way as in a Memory Read cycle. This 'read' 
operation is complete when the READY# signal is 
driven LOW. Then, the 82380 will relinquish the bus 
by de-asserting HOLD. Typically, a Refresh Cycle 
without wait states will take five bus states to exe- 
cute. If 'n' wait states are added, the Refresh Cycle 
will last for five plus 'n' bus states. 


How often the Refresh Generation will initiate a re- 
fresh cycle depends on the frequency of CLKIN as 
well as TIMER1's programmed mode of operation. 
For this specific application, TIMER1 should be pro- 
grammed to operate in Mode 2 or 3 to generate a 
constant clock rate. See section 6-Programmable 
Interval Timer for more information on programming 
the timer. One DRAM Refresh Cycle will be generat- 
ed each time TIMER 1 expires (when TOUT1 chang- 
es to LOW to HIGH). 


The Wait State Generator can be used to insert wait 
states during a refresh cycle. The 82380 will auto- 
matically insert the desired number of wait states as 
programmed in the Refresh Wait State Register (see 
Wait State Generator). 


7.4.1 WORD 
SIZE AND REFRESH 
ADDRESS 
COUNTER 


The 82380 supports 8-, 16- and 32-bit refresh cycle. 
The bus width during a refresh cycle is programma- 
ble (see Programming). The bus size can be pro- 
grammed via the Refresh Control R~gis~er(see Reg- 
ister Overview). If the DRAM bus size IS8-, 16-, or 
32-bits, the Refresh Address Counter will be incre- 
mented by 1, 2, or 4, respectively. 


The Refresh Address Counter is cleared by a hard- 
ware reset. 


7.5 
Register Set Overview 


The Refresh Generator has two internal registers to 
control its operation. They are the Refresh Control 
Register and the Refresh Wait State Register. Their 
port address map is shown in Table 7-1 below. 


Port Address 
Description 


1CH 
Refresh Control Reg. (read/write) 
75H 
Ref. Wait State Reg. (read/write) 


Table 7·1. Register 
Address 
Map 


The Refresh Wait State Register is not part of the 
Refresh Generator. It is only used to program the 
number of wait states to be inserted during a refresh 
cycle. This register is discussed in detail in section 7 
(Wait State Generator) and will not be repeated 
here. 


This 2-bit register serves two functions. First, it is 
used to enable/disable the DRAM Refresh function 
output. If disabled, the output of TIMER 1 is simply 
used as a general purpose timer. The second func- 
tion of this register is to program the DRAM bus size 
for the refresh operation. The programmed bus size 
also determines how the Refresh Address Counter 
will be incremented after each refresh operation. 


7.6 
Programming 


Upon hardware reset, the DRAM Refresh function is 
disabled (the Refresh Control Register is cleared). 
The following programming steps are needed before 
the Refresh Generator can be used. Since the rate 
of refresh cycles depends on how TIMER 1 is pro- 
grammed, this timer must be initialized with the de- 
sired mode of operation as well as the correct re- 
fresh interval (see Programming Interval Timer). 


Whether or not wait states are to be generated dur- 
ing a refresh cycle, the Refresh Wait State Register 
must also be programmed with the appropriate val- 
ue. Then, the DRAM Refresh feature must be en- 
abled and the DRAM bus width should be defined. 
These can be done in one step by writing the appro- 
priate control word into the Refresh Control Register 
(see Register Bit Definition). After thes~ steps ~re 
done the refresh operation will automatically be In- 
voked by the Refresh Generator upon expiration of 
Timer 1. 


In addition to the above programming steps, it 
should be noted that after reset, although the 
TOUT1/REF # becomes the Timer 1 output, the 
state of this pin is undefined. This is because the 
Timer module has not been initialized yet. Therefore, 
if this output is used as a DRAM Refresh signal, this 
pin should be disqualified by extern.allogic until th.e 
Refresh function is enabled. One Simple solution IS 
to logically AND this output with HLDA, since HLDA 
should not be active after reset. 


7.7 
Register Bit Definition 


REFRESH CONTROL REGISTER 
Port Address: 
1CH 
(Read/Write) 


00 
REF. DISABLE 
01 
BUS SIZE = 32 
10 BUS SIZE= 
16 
11 BUS SIZE=8 
290128-92 


8.0 
RELOCATION 
REGISTER 
AND 
ADDRESS 
DECODE 


8.1 Relocation 
Register 


All the integrated peripheral devices in the 82380 
are controlled by a set of internal registers. These 
registers span a total of 256 consecutive address 
locations (although not all the 256 locations are 
used). The 82380 provides a Relocation Register 
which allows the user to map this set of internal reg- 
isters into either the memory or I/O address space. 
The function of the Relocation Register is to define 
the base address of the internal register set of the 
82380 as welt as if the registers are to be memory- 
or I/O-mapped. The format of the Relocation Regis- 
ter is depicted in Figure 8-1. 


0-1/0 
lotAPPED 
l-lotElotORY 
lotAPPED 


290128-82 


Note that the Relocation Register is part of the inter- 
nal register set of the 82380. It has a port address of 
7FH. Therefore, any time the content of the Reloca- 
tion Register is changed, the physical location of this 
register will also be moved. Upon reset of the 82380, 
the 
content 
of the 
Relocation Register will be 
cleared. This implies that the 82380 will respond to 
its I/O addresses in the range of OOOOHto OOFFH. 


As shown in the figure, Bit 0 of the Relocation Regis- 
ter determines whether the 82380 registers are to be 
memory-mapped or I/O-mapped. When Bit 0 is set 
to '0', the 82380 will respond to I/O Addresses. Ad- 
dress signals BEO#-BE3#, 
A2-A7 will be used to 
select one of the internal registers to be accessed. 
Bit 1 to Bit 7 of the Relocation Register will corre- 
spond to A9 to A15 of the Address bus, respectively. 
Together with A8 implied to be '0', A15 to A8 will be 
fully decoded by the 82380. The following shows 
how the 82380 is mapped into the I/O address 
space. 


Example 


Relocation Register = 11001110 
(OCEH) 


82380 will respond to I/O address range from 
OCEOOHto OCEFFH. 


Therefore, this I/O mapping mechanism allows the 
82380 internal registers to be located on any even, 
contiguous, 256 byte boundary of the system I/O 
space. 


When Bit 0 of the Relocation Register is set to '1', 
the 82380 will respond to memory addresses. Again, 
Address signals BEO#-BE3#, 
A2-A7 will be used 
to select one of the internal registers to be ac- 
cessed. Bit 1 to Bit 7 of the Relocation Register will 
correspond to A25-A31, 
respectively. A24 is as-' 


sumed to be '0', and A8-A23 are ignored. Consider 
the following example. 


Example 


Relocation Register = 10100111 
(OA7H) 


The 82380 will respond to memory addresses in 
the range of OA6XXXXOOHto OA6XXXXFFH 
(where 'X' is don't care). 


This scheme implies that the internal register can be 
located in any even, contiguous, 2"24 
byte page of 
the memory space. 


8.2 Address Decoding 


As mentioned previously, the 82380 internal regis- 
ters do not occupy the entire contiguous 256 ad- 
dress locations. Some of the locations are 'unoccu- 
pied'. The 82380 always decodes the lower 8 ad- 
dress bits (AO-A7) to determine if anyone 
of its 
registers is being accessed. If the address does not 
correspond to any of its registers, the 82380 will not 
respond. This allows external devices to be located 
within the 'holes' in the 82380 address space. Note 
that there are several unused addresses reserved 
for future Intel peripheral devices. 


9.0 
CPU RESET AND SHUTDOWN 
DETECT 


The 82380 will activate the CPURST signal to reset 
the host processor when one of the following condi- 
tions occurs: 
- 
82380 RESET is active; 
- 
82380 detects a 80386 Shutdown cycle (this fea- 
ture can be disabled); 
- 
CPURST software command is issued to 80386. 


Whenever the CPURST signal is activated, the 
82380 will reset its own internal Slave-Bus state ma- 
chine. 


Following a hardware reset, the 82380 will assert its 
CPURST output to reset the host processor. This 
output will stay active for as long as the RESET input 
is active. During a hardware reset, the 82380 internal 
registers will be initialized as defined in the corre- 
sponding functional descriptions. 


CPURST can be generated by writing the following 
bit pattern into 82380 register location 64H. 


• 


SlOr-WIll 
iiUlOmaucallYoetermlne the required num- 
ber of wait states. The CPURSTwill be active follow- 
ing the completion of the Write cycle to this port. 
This signal will last for 80 CLK2 periods. The 82380 
should not be accessed until the CPURST is deacti- 
vated. 


This internal port is Write-Only and the 82380 will 
not respond to a Read operation to this location. 
Also, during a CPU software reset command, the 
82380 will reset its Slave-Bus state machine. How- 
ever, its internal registers remain unchanged. This 
allows the operating system to distinguish a 'warm' 
reset by reading any 82380 internal register previ- 
ously programmed for a non-default value. The Diag- 
nostic registers can be used or this purpose (see 
Internal Control and Diagnostic Ports). 


The 82380 is constantly monitoring the Bus Cycle 
Definition signals (M/IO#, 
D/C#, 
R/W#) 
and is 
able to detect when the 80386 executes a Shutdown 
bus cycle. Upon detection of a processor shutdown, 
the 82380 will activate the CPURST output for 62 
CLK2 periods to reset the host processor. This sig- 
nal is generated after the Shutdown cycle is termi- 
nated by the READY# signal. 


Although the 82380 Wait State Generator will not 
automatically respond to a Shutdown (or Halt) cycle, 
the Wait State Control inputs (WSCO,WSC1) can be 
used to determine the number of wait states in the 
same manner as other non-82380 bus cycle. 


This Shutdown Detect feature can be enabled or dis- 
abled by writing a control bit in the Internal Control 
Port at address 61H (see Internal Control and Diag- 


Reset, the 82380 will reset its Slave-Bus state ma- 
chine but will not change any of its internal register 
contents. 


10.0 
INTERNAL 
CONTROL 
AND 
DIAGNOSTIC 
PORTS 


The format of the Internal Control Port of the 82380 
is shown in Figure 10.1. This Control Port is used to 
enable/ disable the 
Processor Shutdown 
Detect 
mechanism as well as controlling the Gate inputs of 
the Timer 2 and 3. Note that this is a Write-Only port. 
Therefore, the 82380 will not respond to a read op- 
eration to this port. Upon hardware reset, this port 
will be cleared; Le., the Shutdown Detect feature 
and the Gate inputs of Timer 2 and 3 are disabled. 


Two 8-bit read/write Diagnostic Ports are provided 
in the 82380. These are two storage registers and 
have no effect on the operation of the 82380. They 
can be used to store checkpoint data or error codes 
in the power-on sequence and in the diagnostic 
service routines. As mentioned in CPU RESET AND 
SHUTDOWN DETECT section, these 
Diagnostic 
Ports can be used to distinguish between 'cold' and 
'warm' reset. Upon hardware reset, both Diagnostic 
Ports are cleared. The address map of these Diag- 
nostic Ports is shown in Figure 10-2. 


Port 
Address 


Diagnostic Port 1 (Read/Write) 
80H 
Diagnostic Port 2 (Read/Write) 
88H 


intelQP 
82380 


11.0 
INTEL 
RESERVED 
1/0 PORTS 
tion may occur if any peripheral is assigned to the 
same address location. 
There are eleven I/O ports in the 82380 address 
space which are reserved for Intel future peripheral 
12.0 
MECHANICAL 
DATA 
device use only. Their address locations are: 2AH, 
30H, 3EH, 45H, 46H, 76H, 77H, 70H, 7EH, CCH 
and COHo These addresses should not be used in 
12.1 
Introduction 
the system since the 82380 may respond to read/ 
write operations to these locations and bus conten- 
In this section, the physical package and its connec- 
tions are described in detail. 


P 
N 
104 
K 
H 
G 
E 
0 
C 
B 
A 
"- 


01 
01 


Vcc 
Vss 
EOACKl 
BEO# 
BE1# 
143 
145 
148 
149 
1412 
Vcc 
Vss 
Vcc 
Vss 


02 
~ 
~ 
~ 
~ 
~ 
~ 
02 
~ 
~ 
~ 
~ 
~ 
~ 
Vcc 
Vss 
INT 
EOACK2 
AOS# 
BE3# 
144 
147 
1410 
•••13 
1415 
1417 
1419 
Vcc 


03 
~ 
~ 
~ 
03 
~ 
~ 
~ 
OREQ5 
OREQ7 
HLOA 
EOACKO 
EOP# 
BE2# 
•••2 
•••6 
All 
AU 
•••16 
A1B 
•••21 
VSS 


04 
04 


OREQ3 
NAI 
OREQ6 
1420 
1422 
VCC 


05 
05 


OREQl 
OREQ2 OREQ4/IRQ9# 
1423 
1424 
1425 


06 
~ 
~ 
06 
~ 
~ 
IRQ23# 
IRQ22# 
OREQO 
1426 
1427 
A2B 


07 
~ 
~ 
07 
~ 
~ 
IRQ19# 
IRQ20# 
IRQ21# 
1430 
•••29 
1431 


DB 
DB 


IRQI8# 
IRQI6# 
IRQ17# 
015 
023 
031 


09 
~ 
~ 
09 
~ 
~ 
IRQI5# 
IRQ14# 
IRQI3# 
022 
030 
07 


10 
10 


IRQ1'# 
IRQ12# 
WSCl 
013 
06 
014 


11 
~ 
~ 
11 
~ 
~ 
WSCO 
CLKIN 
REAOY# 
028 
021 
029 


12 
~ 
~ 
~ 
~ 
~ 
~ 
~ 
12 
~ 
~ 
~ 
~ 
~ 
~ 
~ 
Vcc 
RESET 
CPURST 
o/c# 
W/R# 
HOLD 
REAOYO# 
017 
010 
03 
027 
012 
05 
Vcc 


13 
~ 
~ 
~ 
~ 
~ 
~ 
~ 
13 
~ 
~ 
~ 
~ 
~ 
~ 
~ 
VSS T0UT2#/IR03# 
TOUT3# 
104/10#TOUTl/REF# 
024 
016 
09 
02 
026 
019 
04 
020 
VSS 


14 
~ 
~ 
~ 
~ 
14 
~ 
~ 
~ 
~ 
Vcc 
VSS 
Vcc 
VSS 
DB 
DO 
01 
CLK2 
025 
018 
011 
Vcc 
VSS 
Vcc 


P 
N 
104 
K 
H 
G 
0 
C 
B 
A 


2OO12B-94 


Figure 12.1.82380 PGA Pinout-View 
from TOP side 


82380 
intelQP 


12.2 
Pin Assignment 
vcc and GND connections must be made to multi- 
ple Vcc and Vss (GND) pins. Each Vcc and Vss 
The 82380 pinout as viewed from the top side of the 
MUST be connected to the appropriate voltage lev- 


component is shown in Figure 12.1. Its pinout as 
el. The circuit board should include Vcc and GND 
viewed from the pin side of the component is shown 
planes for power distribution and all Vcc pins must 


in Figure 12.2. 
be connected to the appropriate plane. 


A 
C 
0 
F . 
G 
H 
K 
L 
h4 
N 
P 
/ 
01 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
01 


Vss 
Vee 
Vss 
Vee 
A12 
A9 
A8 
A5 
A3 
BEIN 
BEON 
EOACKl 
Vss 
Vec 


02 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
02 


Vee 
A19 
A17 
A15 
A13 
Al0 
A7 
A4 
BE3N 
ADS' 
EOACK2 
INT 
Vss 
Vcc 


03 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
03 


Vss 
A21 
A18 
A16 
A14 
All 
A6 
A2 
BE2N 
EOPN 
EDACKO 
HLOA 
OREQ7 
OREQ5 


04 
0 
0 
0 
0 
0 
0 
04 


Vee 
A22 
A20 
OREQ6 
NAN 
OREQ3 
METAL 
LID 
05 
0 
0 
0 
0 
0 
0 
05 


A25 
A24 
A23 
OREQ4/ 
OREQ2 
OREQl 
IRQ9N 


06 
0 
0 
0 
0 
0 
0 
06 


A28 
A27 
A26 
OREQO 
IRQ22N 
IRQ23N 


07 
0 
0 
0 
0 
0 
0 
07 


A31 
A29 
A30 
IRQ21N 
IRQ20N 
IRQ19N 


OB 
0 
0 
0 
0 
0 
0 
08 


031 
023 
015 
IRQ17N 
IRQ16N 
IRQ1BN 


09 
0 
0 
0 
0 
0 
0 
09 


07 
030 
022 
IRQ13N 
IRQ14N 
IRQ15, 


10 
0 
0 
0 
0 
0 
0 
10 


014 
06 
013 
WSCI 
tRQ12N 
IRQllN 


11 
0 
0 
0 
0 
0 
0 
11 


029 
021 
028 
REAOYN 
CLKIN 
WSCO 


12 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
12 


Vee 
05 
012 
027 
03 
010 
017 
REAOYON 
HOLD 
W/RI 
O/CI 
CPURST 
RESET 
Vcc 


13 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
13 


Vss 
020 
D4 
019 
026 
02 
D9 
016 
024 
TOUTI/REFN 
h4/1ON TOUT3N T0UT2I/1R03N 
VSS 


14 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
14 


Vee 
Vss 
Vee 
011 
018 
025 
CLK2 
01 
DO 
08 
Vss 
Vee 
Vss 
Vee 


A 
B 
C 
0 
G 
H 
K 
h4 
N 
P 
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Figure 12.2.82380 PGA Pinout-View 
from PIN side 


Pin/Signal 
Pin/Signal 
Pin/Signal 
Pin/Signal 


A7 
A31 
A8 
031 
P12 
Vcc 
L14 
Vss 
C7 
A30 
89 
030 
M14 
Vcc 
A1 
Vss 
87 
A29 
A11 
029 
P1 
Vcc 
P13 
Vss 
A6 
A28 
C11 
028 
P2 
Vcc 
N1 
Vss 
86 
A27 
012 
027 
P14 
Vcc 
N2 
Vss 
C6 
A26 
E13 
026 
01 
Vcc 
C1 
Vss 
A5 
A25 
F14 
025 
C14 
Vcc 
A3 
Vss 
85 
A24 
J13 
024 
81 
Vcc 
814 
Vss 
C5 
A23 
88 
023 
A2 
Vcc 
A13 
Vss 
84 
A22 
C9 
022 
A4 
Vcc 
N14 
Vss 
83 
A21 
811 
021 
A12 
Vcc 
C4 
A20 
813 
020 
A14 
Vcc 
P6 
IRQ23# 
82 
A19 
013 
019 
N6 
IRQ22# 
C3 
A18 
E14 
018 
G14 
CLK2 
M7 
IRQ21# 


C2 
A17 
G12 
017 
L12 
O/C# 
N7 
IRQ20# 
03 
A16 
H13 
016 
K12 
W/R# 
P7 
IRQ19# 
02 
A15 
C8 
015 
L13 
MilOI' 
P8 
IRQ18# 
E3 
A14 
A10 
014 
K2 
AOS# 
M8 
IRQ17# 
E2 
A13 
C10 
013 
N4 
NA# 
N8 
IRQ16# 
E1 
A12 
C12 
012 
J12 
HOLO 
P9 
IRQ15# 
F3 
A11 
014 
011 
M3 
HLOA 
N9 
IRQ14# 
F2 
A10 
F12 
010 
M6 
OREQO 
M9 
IRQ13# 
F1 
A9 
G13 
09 
P5 
OREQ1 
N10 
IRQ12# 
G1 
A8 
K14 
08 
N5 
OREQ2 
P10 
IRQ11# 
G2 
A7 
A9 
07 
P4 
OREQ3 
M2 
INT 
G3 
A6 
810 
06 
M5 
OREQ4/1RQ9# 
H1 
A5 
812 
05 
P3 
OREQ5 
N11 
CLKIN 
H2 
A4 
C13 
04 
M4 
OREQ6 
K13 
TOUT1/REF# 
J1 
A3 
E12 
03 
N3 
OREQ7 
N13 
TOUT2#/IRQ3# 
H3 
A2 
F13 
02 
M13 
TOUT3# 
J2 
8E3# 
H14 
01 
K3 
EOP# 
M11 
REAOY# 


J3 
8E2# 
J14 
00 
L3 
EOACKO 
H12 
REAOYO# 


K1 
8E1# 
M1 
EOACK1 
P11 
WSCO 
L1 
8EO# 
N12 
RESET 
L2 
EOACK2 
M10 
WSC1 
M12 
CPURST 


• 


Mounting 


The 82380 package is a 132-pin ceramic Pin Grid 
Array (PGA). The pins are arranged 0.100 inch (2.54 
mm) center-to-center, in a 14 x 14 matrix, three rows 
around. 


. 
~ . 


choice of terminals 
such as soldertail, surface 


mount, or wire wrap. Several applicable sockets are 
listed in Figure 12-4. 
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• Low insertion 
force 
(LIFj 
soldertail 
55274-1 
• Amp 
tests 
indicate 
50% 
reduction 
in insertion 
force 
compared 
to machined 
sockets 
Other 
socket 
options 
• Zero 
insertion 
force 
(ZIFj 
soldertail 
55583-1 
• Zero 
insertion 
force 
(ZIFj 
Bum-in 
version 
55573-2 
Amp 
Incorporated 
(Harrisburg, 
PA 17105 
U.S.A. 


Phone 
717-564-0100) 


Peel-A-Way 
Mylar 
and Kapton 
Socket 
Terminal 
Carriers 


• Low insertion force surface mount 
CS132-37TG 


• Low insertion 
force 
soldertail 
CS132-01TG 


• Low insertion force wire-wrap 
CS132-02TG 
(two 
level) 
CS132-o3TG 
(three-level) 


• Low 
insertion 
force 
press-fit 
CS132-05TG 


Advanced 
Interconnectlona 
(5 Division 
Street 
Warwick, 
AI 02818 
U.S.A. 


Phone 
401-885-0485) 


290128-97 
Cam handle 
locks 
in low profile 
position 
when 
substrate 
is installed 
(handle 
UP for open 
and DOWN 
for closed 
positions) 


courtesy 
Amp 
Incorporated 


Peel-A-Way 
Carrier 
No. 132; 


Kapton 
Carrier 
is KS 132 
Mylar 
Carrier 
is MS 132 


Molded 
Plastic 
Body 
KS132 
is shown 
below: 
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courtesy 
Advanced 
Interconnections 
(Peel-A-Way 
Terminal 
Carriers 
U.S. Patent 
No. 4442938) 
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• Low insertion 
force 
socket 
soldertail 


(for production 
use) 


2XX-6576-00-3306 
(new 
style) 
2XX-6003-00-3302 
(older 
style) 


• Zero 
insertion 
force 
soldertail 


(for test and bum-in 
use) 
2XX-6566-QO-3302 
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Textool Products 
Electronic Products Division/3m 
(1410 
West 
Pioneer 
Drive 


Irving, 
Texas 
75601 
U.S.A. 


Phone 
214-259-2676) 
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290126-AO 


Figure 
12·4. Several 
Socket 
Options 
for 
132-pln 
PGA 
(Continued) 


12.4 
Package Thermal Specification 
to determine 
whether 
the 82380 
is within 
the speci- 


fied operating 
range. 


The 82380 is specified 
for operation 
when case tem- 


perature 
is within the range of O·C - 85·C. The case 


temperature 
may be measured 
in any environment, 
The PGA case temperature 
should 
be measured 
at 


the center of the top surface 
opposite 
the pins, as in 


Figure 12.5. 


Thermal Reslstance-°C/Watt 


Airflow-f3/min 
(m3/sec) 


Parameter 
0 
50 
100 
200 
400 
600 
800 
(0) (0.25) (0.50) (1.01) (2.03) (3.04) (4.06) 


(J Junction-to-Case 
2 
2 
2 
2 
2 
2 
2 
(case measured 
as Fig. 6.4) 


(J Case-to-Ambient 
19 
18 
17 
15 
12 
10 
9 
(no heatsink) 


(J Case-to-Ambient 
16 
15 
14 
12 
9 
7 
6 
(with omnidirectional 
heatsink) 


(J Case-to-Ambient 
15 
14 
13 
11 
8 
6 
5 
(with unidirectional 
heatsink) 


NOTES: 
1. Table 
12;6 applies 
to 82380 
PGA plugged 
into socket 
or soldered 
directly 
into board. 


2. 
0JA = 0JC + 0CA. 


3. OJ-CAP = 4"C/W 
(approx.) 


OJ-PIN 
= 4"C/W 
(inner pins) (approx.) 


OJ-PIN 
= 8"C/W 
(outer 
pins) (approx.) 


13.1 Power and Grounding 


The large number of output buffers (address, data 
and control) can cause power surges as multiple 
output buffers drive new signal levels simultaneous- 
ly. The 22 VCCand Vss pins of the 82380 each feed 
separate functional units to minimize switching in- 
duced noise effects. All VCCpins of the 82380 must 
be connected on the circuit board. 


13.2 Power Decoupling 


Liberal decoupling capacitance should be placed 
close to the 82380. The 82380 driving its 32-bit par- 
allel address and data buses at high frequencies can 
cause transient power surges when driving large ca- 
pacitive loads. Low inductance capacitors and inter- 


connects are recommended for the best reliability at 
high frequencies. Low inductance capacitors are 
available specifically for Pin Grid Array packages. 


For reliable operation, ALWAYS connect unused in- 
puts to a valid logic level. As is the case with most 
other CMOS processes, a floating input will increase 
the current consumption of the component and give 
an indeterminate state to the component. 


The 82380 specifications provide sufficient drive ca- 
pability to support the ICE386. On the pins that are 
generally shared between the 80386 and the 82380, 
the additional loading represented by the ICE386 
was allowed for in the design of the 82380. 
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13.5 Maximum Ratings 


Storage Temperature 
- 65·C to + 150·C 
Case temperature 
Under Bias 
- 65·C to + 11O·C 
Supply Voltage 
with Respect 
to VSS 
- 0.5V to + 6.5V 
Voltage 
on any other Pin 
- 0.5V to Vcc + 0.5V 


only and functional 
operation 
at these 
or any other 
conditions 
above 
those 
listed 
in the 
operational 


sections 
of this specification 
is not implied. 


NOTE: 
Stress 
above those 
listed above 
may cause perma- 
nent damage 
to the device. 
This is a stress 
rating 


Exposure 
to absolute 
maximum 
rating conditions 
for 
extended 
periods 
may 
affect 
device 
reliability. 
Al- 
though 
the 82380 contains 
protective 
circuitry 
to re- 
set damage 
from 
static 
electric 
discharges, 
always 
take precautions 
against high static voltages 
or elec- 


tric fields. 


13.6 D.C. Specifications 


TCASE = O·C to 85·C; Vcc = 5V ± 5%; VSS = OV. 


Table 13·1. 


Symbol 
Parameter 
Mln 
Max 
Unit 
Notes 


VIL 
Input Low Voltage 
-0.3 
0.8 
V 
(Note 1) 


VIH 
Input High Voltage 
2.0 
VCC + 0.3 
V 


VILC 
CLK2 Input Low Voltage 
-0.3 
0.8 
(Note 1) 


VIHC 
CLK2 Input High Voltage 
Vcc 
- 
0.8 
Vcc + 0.3 
V 


VOL 
Output Low Voltage 
IOL = 4mA: 
A2-A31, 
00-031 
0.45 
V 
IOL = 5 mA: All Others 
0.45 
V 


VOH 
Output High Voltage 
IOH = -1 
mA: A2-A31, 
00-031 
2.4 
V 
IOH = - 0.9 mA: All Others 
2.4 
V 


III 
Input Leakage Current for 
all ins except: 


IRQ11# 
-IRQ23#, 


TOUT2/IRQ3#, 
EOP#, 
OREQ4 
±15 
/loA 
OV<VIN<VCC 


ILl1 
Input Leakage Current for 
pins: IRQ11 # -IRQ23 
#, 
TOUTU/IRQ3#, 
EOP#, 
OREQ4 
10 
-300 
/loA 
OV<VIN<VCC 
(Note 3) 


ILO 
Output 
Leakage Current 
±15 
/loA 
0.45 <VOUT<VCC 


Icc 
Supply Current 
300 
mA 
CLK2 = 32 MHz 
325 
mA 
= 40 MHz 
(Note 4) 


(CAP) 
Capacitance 
(Input/IO) 
12 
pF 
fe = 1 MHz 
(Note 2) 


CCLK 
CLK2 Capacitance 
20 
pF 
fe = 1 MHz 
(Note 2) 


NOTES: 
1. Minimum value is not 100% tested. 
2. Sampled only. 
3. These pins have internal pullups on them. 
4. Ice is specified with inputs driven to CMOS levels. Ice may be higher if driven to TTL levels. 


Symbol 
Parameter 
Mln 
Max 
Unit 
Notes 


VIL 
Input Low Voltage 
-0.3 
0.8 
V 
(Note 1) 


VIH 
Input High Voltage 
2.0 
VCC + 0.3 
V 


VILC 
CLK2 Input Low Voltage 
-0.3 
0.8 
V 
(Note 1) 


VIHC 
CLK2 Input High Voltage 
VCC - 
0.8 
VCC + 0.3 
V 


VOL 
Output Low Voltage 


IOL = 4 mA: A2-A31' 
00-031 
0.45 
V 
IOL = 5 mA: All Others 
0.45 
V 


VOH 
Output High Voltage 
IOH = -1 
mA: A2-A31, 
00-031 
2.4 
V 
IOH = - 0.9 mA: All Others 
2.4 
V 


III 
Input Leakage Current 
±15 
IJ-A 
All Inputs except: 
IRQ11 #- 
IRQ23#, 
EOP#, 
TOUT2/IRQ3#, 


OREQ4 


ILI1 
Input Leakage Current 
10 
-300 
IJ-A 
0< 
VIN < VCC 
Inputs: IRQ11 # -IRQ23#, 
(Note 3) 
EOP#, 
TOUT2/IRQ3#, 
OREQ4 


ILO 
Output Leakage Current 
±15 
IJ-A 
0< 
VIN < VCC 


Icc 
Supply Current (CLK2 = 50 MHz) 
375 
mA 
(Note 4) 


CI 
Input Capacitance 
12 
pF 
(Note 2) 


CCLK 
CLK2 Input Capacitance 
20 
pF 
(Note 2) 


NOTES: 
1. Minimum value is not 100% tested. 
2. fe = 1 MHz; Sampled only. 
3. These pins have weak internal pullups. They should not be left floating. 
4. Ice is specified with inputs driven to CMOS levels, and outputs driving CMOS loads. Ice may be higher if inputs are driven 
to TIL levels, or if outputs are driving TIL loads. 
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The A.C. specifications given in the following tables 
consist of output delays and input setup require- 
ments. The A.C. diagram's purpose is to illustrate 
the clock edges from which the timing parameters 
are measured. The reader should not infer any other 
timing relationships from them. For specific informa- 
tion on timing relationships between signals, refer to 
the appropriate functional section. 


CLK2 
[ 
2V 


OUTPUTS 
lA')_A'I. .•. n.',...,v.. 


8EON-8E3N. 
AOSN. 
lA/ION. 
W/RN. 
ROYON.LOCKN. 
HOLD 


NOTE 2 


[ 
VALID 
OUTPUT 
n 1.5V 


OUTPUTS 
[ 
(00-031) 


INPUTS 
[ 
(NAN) 


INPUTS 


(REAOYN. 
HLOA. 
[ 
A2-A31. 
00-031) 


IROxN.AOSN 


LEGEND: 


®--maximum 
output delay spec 


®-minimum 
output delay spec 


©-minimum 
input setup spec 


©--minimum 
input hold spec 


~ ----- .•........._....._. 


specifications are measured. 82380 output delays 
are specified with minimum and maximum limits. 
which are measured as shown. The minimum 82380 
output delay times are hold times for external circuit- 
ry. 82380 input setup and hold times are specified as 
minimums and define the smallest acceptable sam- 
pling window. Within the sampling window, a syn- 
chronous input signal must be stable for correct 
82380 operation. 


lAAX 


VALID 
1.5V 
OUTPUT 
n+ 1 


NOTES: 
1. Input waveforms 
have tr 
:0;: 2.0 ns from 0.8V to 2.0V. 
2. Under 
rated 
loading 
(120 pF) 82380 
output 
tr, tf is typically 
:0;: 4.0 ns from 0.8V to 2.0V. 


Figure 13-1. Drive Levels and Measurement Points for A.C. Specification 


Functional 
Operating 
Range: VCC = 5V ± 5%; TCASE = O°C to + 85°C 


Table 
13·3.82380 
A.C. Characteristics 


Symbol 
Parameter 
82380·16 
82380·20 
Notes 
Min 
Max 
Min 
Max 


Operating 
Frequency 
4MHz 
16 MHz 
4MHz 
20 MHz 
Half CLK2 Frequency 


t1 
CLK2 Period 
31 ns 
125 ns 
25 ns 
125 ns 


t2a 
CLK2 High Time 
9 
8 
at2.0V 


t2b 
CLK2 High Time 
5 
5 
at (Vcc-0.8)V 


t3a 
CLK2 Low Time 
9 
8 
at2.0V 


t3b 
CLK2 Low Time 
7 
6 
atO.8V 


t4 
CLK2 Fall Time 
8 
8 
(Vcc-0.8)V 
to 0.8V 


t5 
CLK2 Rise Time 
8 
8 
0.8V to (Vcc-0.8)V 


A (2-31), 
BE (0-3) 
#, 
EDACK (0-2) 
t6 
Valid Delay 
4 
36 
4 
30 
CL = 120 pF 
t7 
Float Delay 
4 
40 
4 
32 
(Note 1) 


A (2-31), 
BE (0-3) 
# 
t8 
Setup Time 
6 
6 
t9 
Hold Time 
4 
4 


W/R#, 
M/IO#, 
D/C#, 


t10 
Valid Delay 
6 
33 
6 
28 
CL = 75 pF 
t11 
Float Delay 
4 
35 
4 
30 
(Note 1) 
t12 
Setup Time 
6 
6 
t13 
Hold Time 
4 
4 


t14 
ADS# 
Valid Delay 
6 
33 
6 
28 
CL = 75 pF 
t15 
Float Delay 
4 
35 
4 
30 
t16 
Setup Time 
21 
15 
t17 
Hold Time 
4 
4 


Slave Mode- 
D(0-31) 
Read 
t18 
Valid Delay 
, 
3 
46 
4 
46 
CL = 120 pF 
t19 
Float Delay 
6 
35 
6 
29 
(Note 1) 


Slave Mode- 
D(0-31) 
Write 
t20 
Setup Time 
31 
29 
t21 
Hold Time 
26 
26 
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Symbol 
Parameter 
82380·16 
82380·20 
Notes 
Mln 
Max 
Mln 
Max 


Master Mode- 
D(0-31) 
Write 
t22 
Valid Delay 
4 
48 
4 
38 
CL = 120 pF 
t23 
Float Delay 
4 
35 
4 
27 
(Note 1) 


Master Mode- 
D(0-31) 
Read 
t24 
Setup Time 
11 
11 
t25 
Hold Time 
6 
6 


t26 
READY /I Setup Time 
21 
12 
t27 
Hold Time 
4 
4 


t28 
WSC (0-1) 
Setup 
6 
6 
t29 
Hold 
21 
21 


t31 
RESET Setup Time 
13 
12 
t30 
Hold Time 
4 
4 


t32 
READYO/l 
Valid Delay 
4 
31 
4 
23 
CL = 25 pF 


t33 
CPU Reset From CLK2 
2 
18 
2 
16 
CL = 50 pF 


t34 
HOLD Valid Delay 
5 
33 
5 
30 
CL = 100 pF 


t35 
HLDA Setup Time 
21 
17 
t36 
, 
Hold Time 
6 
6 


t37a 
EOP /I Setup Time 
21 
17 
Synch. EOP 


t38a 
EOP /I Hold Time 
4 
4 


t37b 
EOP /I Setup Time 
11 
11 
Asynch. 
EOP 


t38b 
EOP /I Hold Time 
11 
11 


t39 
EOP/I 
Valid Delay 
5 
38 
5 
30 
CL = 100 pF ('1'-> 
'0') 


t40 
EOP /I Float Delay 
5 
40 
5 
32 


t41a 
DREQ Setup Time 
21 
19 
Synchronous 
DREQ 
t42a 
Hold Time 
4 
4 


t41b 
DREQ Setup Time 
11 
11 
Asynchronous 
DREQ 
t42b 
Hold Time 
11 
11 


t43 
INT Valid Delay 
500 
500 
From IRQ Input 
CL = 75 pF 


t44 
NA /I Setup Time 
11 
10 
t45 
Hold Time 
15 
15 
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Symbol 
Parameter 
82380-16 
82380·20 
Note. 
Mln 
Max 
Mln 
Max 


t46 
CLKIN Frequency 
OMHz 
10 MHz 
OMHz 
10 MHz 


t47 
CLKIN High Time 
30 
30 
At 1.5V 


t48 
CLKIN Low Time 
50 
50 
At 1.5V 


t49 
CLKIN Rise Time 
10 
10 
0.8Vto 
3.7V 


t50 
CLKIN Fall Time 
10 
10 
3.7Vto 
0.8V 


t51 
TOUT1 /REF" 
Valid 
4 
36 
4 
30 
From CLK2, CL = 25 pF 


t52 
TOUT1 /REF" 
Valid 
3 
93 
3 
93 
From CLKIN, CL = 120 pF 


t53 
TOUTU 
Valid Delay 
3 
93 
3 
93 
From CLKIN, CL = 120 pF 
(Falling Edge Only) 


t54 
TOUT2 # Float Delay 
3 
40 
3 
40 
From CLKIN (Note 1) 


t55 
TOUT3# 
Valid Delay 
3 
93 
3 
93 
From CLKIN, CL = 120 pF 


NOTE: 
1. Float 
condition 
occurs 
when 
the maximum 
output 
current 
becomes 
less than 
ILO in magnitude. 
Float delay 
is not tested. 


For testing 
purposes, 
the float condition 
occurs 
when 
the dynamic 
output 
driven voltage 
changes 
with current 
loads. 


Functional 
Operating 
Range: Vcc = 5V ± 5%; TCASE = O·C to + 85·C. 


A.C. timings 
are tested 
at 1.5V thresholds; 
except 
as noted. 


Symbol 
Parameter 
82380-25 
Unit 
Notes 
Mln 
Max 


Operating 
Frequency 
1/(t1a 
x 2) 
4 
25 
MHz 


t1 
CLK2 Period 
20 
125 
ns 


t2a 
CLK2 High Time 
7 
ns 
at 2.0V 
t2b 
CLK2 High Time 
4 
ns 
at 3.7V 
t3a 
CLK2 Low Time 
7 
ns 
at 2.0V 
t3b 
CLK2 Low Time 
4 
ns 
at 0.8V 
t4 
CLK2 Fall Time 
7 
ns 
3.7V to 0.8V 
t5 
CLK2 Rise Time 
7 
ns 
0.8V to 3.7V 


t6 
A2-A31, 
BEO#-BE3# 
4 
20 
ns 
50 pF Load 
EDACKO-EDACK3 
Valid Delay 
t7 
A2-A31, 
BEO#-BE3# 
4 
27 
ns 
50 pF Load 
EDACKO-EDACK3 
Float Delay 


t8 
A2-A31, 
BEO#-BE3# 
Setup Time 
6 
ns 
t9 
A2-A31 
, BEO#-BE3# 
Hold Time 
4 
ns 


t10 
W/R#, 
M/IO#, 
D/C# 
Valid Delay 
4 
20 
ns 
50 pF Load 
t11 
W/R#, 
M/IO#, 
D/C# 
Float Delay 
4 
29 
ns 
50 pF Load 
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Functional 
Operating 
Range: Vcc = 5V ± 5%; TCASE = O·C to + 85·C. 


A.C. timings 
are tested 
at 1.5V thresholds; 
except 
as noted. 


Table 
13·4.82380·25 
A.C. Characteristics 
(Continued) 


Symbol 
Parameter 
82380-25 
Unit 
Notes 
Min 
Max 


t12 
W/R#, 
M/IO#, 
D/C# 
Setup Time 
6 
ns 
t13 
W/R#, 
MIIO#, 
D/C# 
Hold Time 
4 
ns 


t14 
ADS# 
Valid Delay 
4 
19 
ns 
50 pF Load 
t15 
ADS# 
Float Delay 
4 
29 
ns 
50 pF Load 


t16 
ADS # Setup Time 
12 
ns 
t17 
ADS # Hold Time 
4 
ns 


t18 
Slave Mode DO-D31 
Read Valid 
4 
31 
ns 
50 pF Load 
t19 
Slave Mode DO-D31 
Read Float 
6 
21 
ns 
50 pF Load 


t20 
Slave Mode DO-D31 
Write Setup 
20 
ns 
t21 
Slave Mode DO-D31 
Write Hold 
20 
ns 


t22 
Master Mode DO-D31 
Write Valid 
8 
27 
ns 
50 pF Load 
t23 
Master Mode DO-D31 
Write Float 
4 
19 
ns 
50 pF Load 


t24 
Master Mode DO-D31 
Read Setup 
7 
ns 
t25 
Master Mode DO-D31 
Read Hold 
4 
ns 


t26 
READY # Setup Time 
9 
ns 
t27 
READY # Hold Time 
4 
ns 


t28 
WSCO-WSC1 
Setup Time 
6 
ns 
t29 
WSCO-WSC1 
Hold Time 
15 
ns 


t30 
RESET Hold Time 
4 
ns 
t31 
RESET Setup Time 
9 
ns 


t32 
READYO# 
Valid Delay 
3 
21 
ns 
25 pF Load 


t33 
CPURST Valid Delay 
2 
14 
ns 
50 pF Load 


t34 
HOLD Valid Delay 
4 
22 
ns 
50 pF Load 


t35 
HLDA Setup Time 
17 
ns 
t36 
HLDA Hold Time 
4 
ns 


t37a 
EOP# 
Setup (Synchronous) 
13 
ns 
t38a 
EOP# 
Hold (Synchronous) 
4 
ns 


t37b 
EOP# 
Setup (Asynchronous) 
10 
ns 
t38b 
EOP# 
Hold (Asynchronous) 
10 
ns 


t39 
EOP# 
Valid Delay 
4 
21 
ns 
50 pF Load 
t40 
EOP # Float Delay 
4 
21 
ns 
50 pF Load 


t41a 
DREQ Setup (Synchronous) 
17 
ns 
t42a 
DREQ Hold (Synchronous) 
4 
ns 


t41b 
DREQ Setup (Asynchronous) 
10 
ns 
t42b 
DREQ Hold (Asynchronous) 
10 
ns 


t43 
INT Valid Delay from IRQn 
500 
ns 
50 pF Load 
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Functional 
Operating 
Range: Vcc = SV ± SOlo;TCASE = O·C to + 8S·C. 


A.C. timings 
are tested 
at 1.SV thresholds; 
except 
as noted. 


Symbol 
Parameter 
82380-25 
Unit 
Notes 
Mln 
Max 


t44 
NA # Setup Time 
7 
ns 
t4S 
NA # Hold Time 
8 
ns 


t46 
CLKIN Frequency 
0 
10 
MHz 
t47 
CLKIN High Time 
30 
ns 
2.0V 
t48 
CLKIN Low Time 
SO 
ns 
0.8V 
t49 
CLKIN Rise Time 
10 
ns 
0.8Vto 
3.7V 
tSO 
CLKIN Fall Time 
10 
ns 
3.7Vto 
0.8V 


TOUT1/REF# 
Valid Delay 
tS1 
from CLK2 (Refresh) 
4 
20 
ns 
SOpF Load 
tS2 
from CLKIN (Timer) 
3 
90 
ns 
SOpF Load 


tS3 
TOUT2# 
Valid Delay 
3 
90 
ns 
SOpF Load 
(Falling Edge Only) 
tS4 
TOUT2 # Float Delay 
3 
37 
ns 
SOpF Load 


tSS 
TOUT3# 
Valid Delay 
3 
90 
ns 
SOpF Load 


82380~ 
. 


OUTPUT 
-L 


~CL 


Tx 


~ 


CLK2 
T30 
T31 


RESET 


Tx 


~ 


CLK2 
r- T33 MIN. 
CPURST 


I-- T33 MAX. 


A(2-31).8E(0-3)# 
VALID DELAY 


A(2- 
31). 
8E(0- 
3)# 
EDACK(O- 2) 
VALID DELAY 


A(2- 
31). 8E(0- 
3)# 
EDACK(O- 2) 
FLOAT DELAY 


ADS# 
VALID DELAY 


ADS# 
FLOAT DELAY 
•• 


CLK2 


W/Rif. lA/IOIf.D/CIf 


Port Address 
(HEX) 


00 
01 
02 
03 
04 
05 
06 
07 
OB 
09 
OA 
OB 
OC 
00 
OE 
OF 
10 
11 
12 
13 
14 
15 
16 
17 
1B 
19 
1A 
1B 
1C 
1E 
20 


APPENDIX 
A 
Ports Listed by Address 


Description 


Read/Write 
DMA Channel 
0 Target Address, 
AO-A 15 
Read/Write 
DMA Channel 
0 Byte Count, BO-B15 
Read/Write 
DMA Channel 
1 Target Address, 
AO-A 15 
Read/Write 
DMA Channel 
1 Byte Count, BO-B15 
Read/Write 
DMA Channel 
2 Target Address, 
AO-A 15 
Read/Write 
DMA Channel 
2 Byte Count, BO-B15 
Read/Write 
DMA Channel 
3 Target Address, 
AO-A 15 
Read/Write 
DMA Channel 
3 Byte Count, BO-B15 
Read/Write 
DMA Channel 
0-3 
Status/Command 
I Register 
Read/Write 
DMA Channel 
0-3 
Software 
Request 
Register 
Write DMA Channel 
0-3 
Set-Reset 
Mask Register 
Write DMA Channel 
0-3 
Mode Register 
I 
Write Clear Byte-Pointer 
FF 
Write DMA Master-Clear 
Write DMA Channel 
0-3 
Clear Mask Register 
Read/Write 
DMA Channel 
0-3 
Mask Register 
Read/Write 
DMA Channel 
0 Target Address, 
A24-A31 
Read/Write 
DMA Channel 
0 Byte Count, B16-B23 
Read/Write 
DMA Channel 
1 Target Address, 
A24-A31 
Read/Write 
DMA Channel 
1 Byte Count, B16-B23 
Read/Write 
DMA Channel 
2 Target Address, 
A24-A31 
Read/Write 
DMA Channel 
2 Byte Count, B16-B23 
Read/Write 
DMA Channel 3 Target Address, 
A24-A31 
Read/Write 
DMA Channel 
3 Byte Count, B16-B23 
Write DMA Channel 
0-3 
Bus Size Register 
Read;Write 
DMA Channel 
0-3 
Chaining 
Register 
Write DMA Channel 
0-3 
Command 
Register 
II 
Write DMA Channel 
0-3 
Mode Register 
II 
Read/Write 
Refresh Control 
Register 
Reset Software 
Request 
Interrupt 
Write Bank B ICW1, OCW2, or OCW3 
Read Bank B Poll, Interrupt 
Request 
or In-Service 
Status Register 
Write Bank B ICW2, ICW3, ICW4 or OCW1 
Read Bank B Interrupt 
Mask Register 
Read Bank B ICW2 
Read/Write 
IROB Vector 
Register 
Read/Write 
IR09 Vector Register 
Reserved 
Read/Write 
IR011 
Vector Register 
Read/Write 
IR012 
Vector Register' 


Read/Write 
IR013 
Vector 
Register 
Read/Write 
IR014 
Vector Register 
Read/Write 
IR015 
Vector Register 
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APPENDIX A-Ports 
Listed by Address (Continued) 


PortAddress(HEX) 
Description 


30 
WriteBankA ICW1,OCW2or OCW3 
ReadBankA Poll,InterruptRequestor In-Service 
StatusRegister 
31 
WriteBankA ICW2,ICW3,ICW4or OCW1 
ReadBankA InterruptMaskRegister 
32 
ReadBankA ICW2 
38 
Read/Write IRQOVectorRegister 
39 
Read/Write IRQ1VectorRegister 
3A 
Read/Write IRQ1.5Vector Register 
3B 
Read/Write IRQ3Vector Register 
3C 
Read/Write IRQ4VectorRegister 
3D 
Reserved 
3E 
Reserved 
3F 
Read/Write IRQ7VectorRegister 
40 
Read/WriteCounter0 Register 
41 
Read/WriteCounter1 Register 
42 
Read/WriteCounter2 Register 
43 
WriteControlWord RegisterI-Counter 0, 1,2 
44 
Read/WriteCounter3 Register 
45 
Reserved 
46 
Reserved 
47 
WriteWord RegisterII-Counter 3 


. 61 
WriteInternalControlPort 
64 
WriteCPUResetRegister(Data-1111XXXOH) 
72 
Read/WriteWaitStateRegister0 
73 
Read/WriteWaitState Register1 
74 
Read/WriteWaitStateRegister2 
75 
Read/Write RefreshWaitState Register 
76 
Reserved 
77 
Reserved 
70 
Reserved 
7E 
Reserved, 
7F 
Read/Write RelocationRegister 
80 
Read/Write InternalDiagnosticPort0 
81 
Read/Write DMAChannel2 TargetAddress,A16-A23 
82 
Read/Write DMAChannel3 TargetAddress,A16-A23 
83 
Read/Write DMAChannel1TargetAddress,A16-A23 
87 
Read/Write DMAChannel0 TargetAddress,A16-A23 
88 
Read/Write InternalDiagnosticPort 1 
89 
Read/Write DMAChannel6 TargetAddress,A16-A23 
8A 
Read/Write DMAChannel7 TargetAddress,A16-A23 
8B 
Read/Write DMAChannel5 TargetAddress,A16-A23 
8F 
Read/Write DMAChannel4 TargetAddress,A16-A23 
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Port Address (HEX) 


90 
91 
92 
93 
94 
95 
96 
97 
98 
99 
9A 
9B 
9C 
90 
9E 
9F 
AO 


Description 


Read/Write 
OMA Channel 0 Requester 
Address, 
AO-A 15 
Read/Write 
OMA Channel 
0 Requester 
Address, 
A 16-A31 
Read/Write 
OMA Channel 
1 Requester 
Address, 
AO-A 15 
Read/Write 
OMA Channel 
1 Requester 
Address, 
A 16-A31 
Read/Write 
OMA Channel 
2 Requester 
Address, 
AO-A 15 
Read/Write 
OMA Channel 
2 Requester 
Address, 
A 16-A31 
Read/Write 
OMA Channel 
3 Requester 
Address, 
AO-A 15 
Read/Write 
OMA Channel 
3 Requester 
Address, 
A 16-A31 
Read/Write 
OMA Channel 
4 Requester 
Address, 
AO-A15 
Read/Write 
OMA Channel 4 Requester 
Address, 
A 16-A31 
Read/Write 
OMA Channel 
5 Requester 
Address, 
AO-A15 
Read/Write 
OMA Channel 
5 Requester 
Address, 
A 16-A31 
Read/Write 
OMA Channel 6 Requester 
Address, 
AO-A 15 
Read/Write 
OMA Channel 
6 Requester 
Address, 
A 16-A31 
Read/Write 
OMA Channel 
7 Requester 
Address, 
AO-A 15 
Read/Write 
OMA Channel 
7 Requester 
Address, 
A 16-A31 
Write Bank C ICW1, OCW2 or OCW3 
Read Bank C Poll, Interrupt 
Request 
or In-Service 
Status Register 
Write Bank C ICW2, ICW3, ICW4 or OCW1 
Read Bank C Interrupt 
Mask Register 
Read Bank C ICW2 
Read/Write 
IRQ16 Vector Register 
Read/Write 
IRQ17 Vector Register 
Read/Write 
IRQ18 Vector Register 
Read/Write 
IRQ19 Vector Register 
Read/Write 
IRQ20 Vector Register 
Read/Write 
IRQ21 Vector 
Register 
Read/Write 
IRQ22 Vector Register 
Read/Write 
IRQ23 Vector Register 
Read/Write 
OMA Channel 
4 Target Address, 
AO-A 15 
Read/Write 
OMA Channel 
4 Byte Count, BO-B15 
Read/Write 
OMA Channel 
5 Target Address, 
AO-A 15 
Read/Write 
OMA Channel 
5 Byte Count, BO-B15 
Read/Write 
OMA Channel 
6 Target Address, 
AO-A 15 
Read/Write 
OMA Channel 
6 Byte Count, BO-B15 
Read/Write 
OMA Channel 
7 Target Address, 
AO-A 15 
Read/Write 
OMA Channel 
7 Byte Count, BO-B15 
Read OMA Channel 
4-7 
Status/Command 
I Register 
Read/Write 
OMA Channel 
4-7 
Software 
Request 
Register 
Write OMA Channel 4-7 
Set-Reset 
Mask Register 
Write OMA Channel 4-7 
Mode Register 
I 
Reserved 
Reserved 
Write OMA Channel 4-7 
Clear Mask Register 
Read/Write 
OMA Channel 4-7 
Mask Register 
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APPENDIX A-Ports 
Listed by Address (Continued) 


PortAddress(HEX) 
Description 


DO 
Read/WriteOMAChannel4 TargetAddress,A24-A31 
01 
Read/WriteOMAChannel4 8yte Count,816-823 
02 
Read/WriteOMAChannel5 TargetAddress,A24-A31 
03 
Read/WriteOMAChannel5 8yte Count,816-823 
04 
Read/WriteOMAChannel6 TargetAddress,A24-A31 
05 
Read/WriteOMAChannel6 8yte Count,816-823 
06 
Read/WriteOMAChannel7 TargetAddress,A24-A31 
07 
Read/WriteOMAChannel7 8yte Count,816-823 
08 
WriteOMAChannel4-7 8us SizeRegister 
09 
Read/WriteOMAChannel4-7 ChainingRegister 
OA 
WriteOMAChannel4-7 CommandRegisterII 
08 
WriteOMAChannel4- 7 ModeRegisterII 


APPENDIX 
B 
Ports Listed by Function 


Description 


DMA CONTROLLER 
Write DMA Master-Clear 
Write DMA Clear Byte-Pointer 
FF 


Read/Write 
DMA Channel 0-3 
Status/Command 
I Register 
Read/Write 
DMA Channel 4-7 
Status/Command 
I Register 
Write DMA Channel 
0-3 
Command 
Register 
II 
Write DMA Channel 
4-7 
Command 
Register 
II 


Write DMA Channel 
0-3 
Mode Re.Qister I 
Write DMA Channel 4-7 
Mode Register 
I 
Write DMA Channel 0-3 
Mode Register 
II 
Write DMA Channel 
4-7 
Mode Register 
II 


Read/Write 
DMA Channel 
0-3 
Software 
Request 
Register 
Read/Write 
DMA Channel 
4-7 
Software 
Request 
Register 
Reset Software 
Request 
Interrupt 


Write DMA Channel 
0-3 
Clear Mask Register 
Write DMA Channel 
4-7 
Clear Mask Register 
Read/Write 
DMA Channel 
0-3 
Mask Register 
Read/Write 
DMA Channel 
4- 7 Mask Register 
Write DMA Channel 
0-3 
Set-Reset 
Mask Register 
Write DMA Channel 
4-7 
Set-Reset 
Mask Register 


Write DMA Channel 
0-3 
Bus Size Register 
Write DMA Channel 4- 7 Bus Size Register 


Read/Write 
DMA Channel 
0-3 
Chaining 
Register 
Read/Write 
DMA Channel 
4- 7 Chaining 
Register 


Read/Write 
DMA Channel 
0 Target Address, 
AO-A 15 
Read/Write 
DMA Channel 
0 Target Address, 
A 16-A23 
Read/Write 
DMA Channel 
0 Target Address, 
A24-A31 
Read/Write 
DMA Channel 
0 Byte Count, BO-B15 
Read/Write 
DMA Channel 
0 Byte Count, B16-B23 
Read/Write 
DMA Channel 
0 Requester 
Address, 
AO-A 15 
Read/Write 
DMA Channel 
0 Requester 
Address, 
A16-A31 


Read/Write 
DMA Channel 
1 Target Address, 
AO-A 15 
Read/Write 
DMA Channel 
1 Target Address, 
A 16-A23 
Read/Write 
DMA Channel 
1 Target Address, 
A24-A31 
Read/Write 
DMA Channel 
1 Byte Count, BO-B15 
Read/Write 
DMA Channel 
1 Byte Count, B16-B23 
Read/Write 
DMA Channel 
1 Requester 
Address, 
AO-A 15 
Read/Write 
DMA Channel 
1 Requester 
Address, 
A16-A31 


Description 


DMA CONTROLLER 


Read/Write 
DMA Channel 
2 Target Address, 
AO-A 15 
Read/Write 
DMA Channel 
2 Target Address, 
A 16-A23 
Read/Write 
DMA Channel 
2 Target Address, 
A24-A31 
Read/Write 
DMA Channel 
2 Byte Count, BO-B15 
Read/Write 
DMA Channel 
2 Byte Count, B16-B23 
Read/Write 
DMA Channel 
2 Requester 
Address, 
AO-A 15 
Read/Write 
DMA Channel 
2 Requester 
Address, 
A16-A31 


Read/Write 
DMA Channel 
3 Target Address, 
AO- A 15 
Read/Write 
DMA Channel 
3 Target Address, 
A 16-A23 
Read/Write 
DMA Channel 
3 Target Address, 
A24-A31 
Read/Write 
DMA Channel 
3 Byte Count, BO- B 15 
Read/Write 
DMA Channel 
3 Byte Count, B16-B23 
Read/Write 
DMA Channel 3 Requester 
Address, 
AO-A15 
Read/Write 
DMA Channel 
3 Requester 
Address, 
A16-A31 


Read/Write 
DMA Channel 4 Target Address, 
AO-A 15 
Read/Write 
DMA Channel 4 Target Address, 
A16-A23 
Read/Write 
DMA Channel 4 Target Address, 
A24-A31 
Read/Write 
DMA Channel 4 Byte Count, BO-B15 
Read/Write 
DMA Channel 4 Byte Count, B16-B23 
Read/Write 
DMA Channel 4 Requester 
Address, 
AO-A 15 
Read/Write 
DMA Channel 4 Requester 
Address, 
A16-A31 


Read/Write 
DMA Channel 
5 Target Address, 
AO-A 15 
Read/Write 
DMA Channel 
5 Target Address, 
A 16-A23 
Read/Write 
DMA Channel 
5 Target Address, 
A24-A31 
Read/Write 
DMA Channel 
5 Byte Count, BO-B15 
Read/Write 
DMA Channel 
5 Byte Count, B16-B23 
Read/Write 
DMA Channel 
5 Requester 
Address, 
AO-A 15 
Read/Write 
DMA Channel 
5 Requester 
Address, 
A16-A31 


Read/Write 
DMA Channel 
6 Target Address, 
AO-A 15 
Read/Write 
DMA Channel 6 Target Address, 
A16-A23 
Read/Write 
DMA Channel 6 Target Address, 
A24-A31 
Read/Write 
DMA Channel 
6 Byte Count, BO-B15 
Read/Write 
DMA Channel 
6 Byte Count, B16-B23 
HeaOI vvrne UM1\ l"nannel 
0 Heque:Sler 
1\uure:s:s, 1\U-I'I 
I" 


Read/Write 
DMA Channel 
6 Requester 
Address, 
A 16-A31 


Read/Write 
DMA Channel? 
Target Address, 
AO-A 15 
Read/Write 
DMA Channel? 
Target Address, 
A 16-A23 
Read/Write 
DMA Channel? 
Target Address, 
A24-A31 
Read/Write 
DMA Channel? 
Byte Count, BO-B15 
Read/Write 
DMA Channel? 
Byte Count, B16-B23 
Read/Write 
DMA Channel? 
Requester 
Address, 
AO-A 15 
Read/Write 
DMA Channel? 
Requester 
Address, 
A 16-A31 


APPENDIX B-Ports 
Listed by Function 
(Continued) 


PortAddress(HEX) 
Description 


INTERRUPT 
CONTROLLER 


Write Bank B ICW1, OCW2, or OCW3 
Read Bank B Poll, Interrupt 
Request 
or In-Service 
Status Register 
Write Bank B ICW2, ICW3, ICW4 or OCW1 
Read Bank B Interrupt 
Mask Register 
Read Bank B ICW2 
Read/Write 
IRQ8 Vector 
Register 
Read/Write 
IRQ9 Vector 
Register 
Reserved 
Read/Write 
IRQ11 Vector 
Register 
Read/Write 
IRQ12 Vector 
Register 
Read/Write 
IRQ13 Vector 
Register 
Read/Write 
IRQ14 Vector Register 
Read/Write 
IRQ15 Vector 
Register 


Write Bank C ICW1, OCW2 or OCW3 
Read Bank C Poll, Interrupt 
Request 
or In-Service 
Status Register 
Write Bank C ICW2, ICW3, ICW4 or OCW1 
Read Bank C Interrupt 
Mask Register 
Read Bank C ICW2 
Read/Write 
IRQ16 Vector 
Register 
Read/Write 
IRQ17 Vector Register 
Read/Write 
IRQ18 Vector Register 
Read/Write 
IRQ19 Vector Register 
Read/Write 
IRQ20 Vector 
Register 
Read/Write 
IRQ21 Vector 
Register 
Read/Write 
IRQ22 Vector 
Register 
Read/Write 
IRQ23 Vector Register 


Write Bank A ICW1, OCW2 or OCW3 
Read Bank A Poll, Interrupt 
Request 
oor In-Service 
Status Register 
Write Bank A ICW2, ICW3, ICW4 or OCW1 
Read Bank A Interrupt 
Mask Register 
Read Bank A ICW2 
Read/Write 
IRQO Vector 
Register 
Read/Write 
IRQ1 Vector 
Register 
Read/Write 
IRQ1.5 Vector Register 
Read/Write 
IRQ3 Vector Register 
Read/Write 
IRQ4 Vector 
Register 
Reserved 
Reserved 
Read/Write 
IRQ7 Vector Register 
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APPENDIX B-Ports 
Listed by Function (Continued) 
PortAddress(HEX) 
Description 


PROGRAMMABLE 
INTERVAL 
TIMER 


Read/Write 
Counter 0 Register 
Read/Write 
Counter 
1 Register 
Read/Write 
Counter 2 Register 
Write Control Word Register 
l-Counter 
0, 1, 2 
Read/Write 
Counter 3 Register 
Write Word Register 
II-Counter 
3 


CPU RESET 
Write CPU Reset Register 
(Data-1111 XXXOH) 


WAIT STATE GENERATOR 


Read/Write 
Wait State Register 0 
Read/Write 
Wait State Register 
1 
Read/Write 
Wait State Register 
2 
Read/Write 
Refresh Wait State Register 


DRAM REFRESH 
CONTROLLER 


Read/Write 
Refresh Control 
Register 


INTERNAL 
CONTROL 
AND DIAGNOSTIC 
PORTS 


Write Internal Control 
Port 
Read/Write 
Internal Diagnostic 
Port 0 
Read/Write 
Internal Diagnostic 
Port 1 


RELOCATION 
REGISTER 


Read/Write 
Relocation 
Register 


INTEL RESERVED 
PORTS 


Reserved 
Reserved 
Reserved 
Reserved 
Reserved 
Reserved 
Reserved 
Reserved 
Reserved 
Reserved 
Reserved 
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APPENDIX 
C 
Pin Descriptions 


The 82380 
provides 
all of the signals 
necessary 
to 
interface 
it to an 80386 
processor. 
It has separate 
32-bit 
address 
and data buses. 
It also has a set of 
control 
signals to support 
operation 
as a bus master 
or a bus slave. Several special function 
signals exist 
on the 82380 for interfacing 
the system 
support 
pe- 
ripherals 
to 
their 
respective 
system 
counterparts. 
Following 
are the definitions 
of the individual 
pins of 
the 82380. These 
brief descriptions 
are provided 
as 
a reference. 
Each signal is further 
defined 
within the 
sections 
which describe 
the associated 
82380 func- 
tion. 


This 
is the 32-bit 
address 
bus. The addresses 
are 
doubleword 
memory 
and I/O addresses. 
These 
are 
three-state 
signals which are active only during Mas- 
ter mode. 
The address 
lines should 
be connected 
directly 
to the 80386's 
local bus. 


BEO# active 
indicates 
that data bits 00-07 
are be- 


ing accessed 
or are valid. It is connected 
directly 
to 
the 80386's 
BEO#. The byte enable 
signals are ac- 
tive outputs 
when the 82380 
is in the Master 
mode. 


BE1 # 
active 
indicates 
that 
data 
bits 
08-015 
are 
being accessed 
or are valid. It is connected 
directly 


to the 80386's 
BE1 #. The byte enable 
signals 
are 
active only when the 82380 
is in the Master 
mode. 


BE2# 
active 
indicates 
that data bits 015-023 
are 
being accessed 
or are valid. It is connected 
directly 
to the 80386's 
BE2 #. The byte enable 
signals 
are 
active only when the 82380 is in the Master 
mode. 


BE3# 
active 
indicates 
that data bits 024-031 
are 


. being accessed 
or are valid. The byte enable signals 
are 
active 
only 
when 
the 
82380 
is in the 
Master 
mode. This pin should 
be connected 
directly 
to the 
80386's 
BE3 #. This pin is used for factory 
testing 
and 
must 
be 
low 
during 
reset. 
The 
80386 
drives 
BE3# 
low during reset. 


This 
is the 32-bit 
data 
bus. These 
pins are active 
outputs 
during interrupt 
acknowledges, 
during Slave 
accesses, 
and 
when 
the 
82380 
is in the 
Master 
mode. 


This 
pin must 
be connected 
to CLK2. 
The 
82380 
monitors 
the phase 
of this clock 
in order to remain 
synchronized 
with the 80386. This clock drives all of 
the internal 
synchronous 
circuitry. 


O/C# 
is used to distinguish 
between 
80386 control 
cycles 
and OMA or 80386 
data access 
cycles. 
It is 
active as an output 
only in the Master 
mode. 


W/R# 
is used to distinguish 
between 
write and read 
cycles. 
It is active 
as an output 
only in the Master 
mode. 


M/IO# 
is used to distinguish 
between 
memory 
and 
10 accesses. 
It is active 
as an output 
only 
in the 
Master 
mode. 


This signal indicates 
presence 
of a valid address 
on 
the address 
bus. It is active 
as output 
only 
in the 
Master mode. ADS # is active during the first T-state 
where addresses 
and control 
signals 
are valid. 


Asserted 
by a peripheral 
or memory 
to begin a pipe- 
lined address 
cycle. This pin is monitored 
only while 
the 82380 is in the Master mode. In the Slave mode, 
pipelining 
is determined 
by the 
current 
and 
past 
status of the AOS# 
and REAOY# 
signals. 


This is an active-high signal to the 80386 to request 
control of the system bus. When control is granted, 
the 80386 activates the hold acknowledge signal 
(HLDA). 


This input signal tells the DMA controller that the 
80386 has relinquished control of the system bus to 
the DMA controller. 


The DMA Request inputs monitor requests from pe- 
ripherals requiring DMA service. Each of the eight 
DMA channels has one DREQ input. These active- 
high inputs are internally synchronized and priori- 
tized. Upon reset, channel 0 has the highest priority 
and channel 7 the lowest. 


DREQ4/IRQ9# 
QUEST 


This is the DMA request input for channel 4. It is also 
connected to the interrupt controller via interrupt re- 
quest 9. This internal connection is available for 
DMA channel 4 only. The interrupt input is active low 
and can be programmed as either edge of level trig- 
gered. Either function can be masked by the appro- 
priate mask register. Priorities of the DMA channel 
and the interrupt request are not related but follow 
the rules of the individual controllers. 


Note that this pin has a weak internal pull-up. This 
causes the interrupt request to be inactive, but the 
DMA request will be active if there is no external 
connection made. Most applications will require that 
either one or the other of these functions be used, 
but not both. For this reason, it is advised that DMA 
channel 4 be used for transfers where a software 
request is more appropriate (such as memory-to- 
memory transfers). In such an application, DREQ4 
can be masked by software, freeing IRQ9# for other 
purposes. 


As an output, this signal indicates that the current 
Requester access is the last access of the currently 
operating DMA channel. It is activated when Termi- 
nal Count is reached. As an input, it signals the DMA 
channel to terminate the current buffer and proceed 
to the next buffer, if one is available. This signal may 
be programmed as an asynchronous or synchro- 
nous input. 


EOP# must be connected to a pull-up resistor. This 
will prevent erroneous external requests for termina- 
tion of a DMA process. 


EDACK (0-2) 
0 
ENCODED DMA ACKNOWL- 
EDGE 


These signals contain the encoded acknowledge- 
ment of a request for DMA service by a peripheral. 
The binary code formed by the three signals indi- 
cates which channel is active. Channel 4 does not 
have a DMA acknowledge. The inactive state is indi- 
cated by the code 100. During a Requester access, 
EDACK presents the code for the active DMA chan- 
nel. During a Target access, EDACK presents the 
inactive code 100. 


These are active low interrupt request inputs. The 
inputs can be programmed to be edge or level sensi- 
tive. Interrupt priorities are programmable as either 
fixed or rotating. These inputs have weak internal 
pull-up resistors. Unused interrupt request inputs 
should be tied inactive externally. 


INT signals the 80386 that an interrupt request is 
pending. 


This is the clock input signal to all of the 82380's 
programmable timers. It is independent of the sys- 
tem clock input (CLK2). 


This pin is software programmable as either the di- 
rect output of Timer 1, or as the indicator of a refresh 
cycle in progress. As REF#, this signal is active dur- 
ing the memory read cycle which occurs during re- 
fresh. 


TOUT2#/IRQ3# 
I/O 
TIMER 
2 
OUTPUT/IN- 
TERRUPT REQUEST3 


This is the inverted output of Timer 2. It is also con- 
nected directly to interrupt request 3. External hard- 
ware can use IRQ3# if Timer 2 is programmed as 
OUT=0 (TOUT2# = 1) 


This active-low input indicates to the 82380 that the 
current bus cycle is complete. READY is sampled by 
the 82380 both while it is in the Master mode, and 
while it is in the Slave mode. 


WSCOAND WSC1 are inputs used by the Wait-State 
Generator to determine the number of wait states 
required by the currently accessed memory or I/O. 
The binary code on these ins, combined with the M/ 
10# signal, selects an internal register in which a 
wait-state count is stored. The combination WSC = 
11 disables the wait-state generator. 


This is the synchronized output of the wait-state 
generator. It is also valid during 80386 accesses to 
the 82380 in the Slave Mode when the 82380 re- 
quires wait states. READYO# should feed directly 
the 80386's READY# input. 


This synchronous input serves to initialize the state 
of the 82380 and provides basis for the CPURST 
output. RESET must be held active for at least 15 
CLK2 cycles in order to guarantee the state of the 
82380. After Reset, the 82380 is in the Slave mode 
with all outputs except timers and interrupts in their 
inactive states. The state of the timers and interrupt 
controller must be initialized through software. This 
input must be active for the entire time required by 
the 80386 to guarantee proper reset. 


CPURST provides a synchronized reset signal for 
the CPU. It is activated in the event of a software 
reset command, an 80386 shut-down detect, or a 
hardware reset via the RESET pin. The 82380 holds 
CPURST active for 62 clocks in response to either a 
software reset command or a shut-down detection. 
Otherwise CPURST reflects the RESET input. 


vcc 
+ 5V input power 
Vss 
Ground 


Port 
Walt-State 
Registers 
Select Inputs 
Address 
07 
04 
03 
00 
WSC1 
WSCO 


72H 
Memory 0 
1/00 
0 
0 
73H 
Memory 1 
I/O 1 
0 
1 
74H 
Memory 2 
1/02 
1 
1 
DISABLED 
1 
1 


M/IO# 
1 
0 
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APPENDIX 
D 
82380 System Notes 


The 82380 
DMA controller 
with 
Integrated 
System 
Peripherals 
is functionally 
inconsistent 
with the data 
sheet. 
This document 
explains 
the behavior 
of the 
82380 
Timer 
Unit 
and 
outlines 
subsequent 
limita- 
tions of the timer unit. This document 
also provides 
recommended 
workarounds. 


1.0 WRITE 
CYCLES TO THE 82380 
TIMER 
UNIT 


This errata applies 
only to SLAVE WRITE 
cycles 
to 
the 82380 
timer 
unit. During these 
cycles, 
the data 
being written 
into the 82380 
timer unit may be cor- 
rupted if CLKIN is not inhibited 
during a certain 
"win- 
dow" 
of the write cycle. 


During 
write 
cycles 
to 
the 
82380 
timer 
unit, 
the 
82380 
translates 
the 386DX 
interface 
signals 
such 
as ADS#, 
W/R#, 
M/IO#, 
and D/C# 
into several 
internal 
signals 
that control 
the operation 
of the in- 
ternal 
sub-blocks 
(e.g., Timer 
Unit). 


The 82380 
timer 
unit is controlled 
by such 
internal 
signals. 
These 
internal 
signals 
are generated 
and 
sampled 
with respect 
to two separate 
clock signals: 


CLK2 (the system clock) and CLKIN (the 82380 tim- 
er unit clock). 


Since the CLKIN 
and CLK2 clock 
signals 
are used 
internally 
to generate 
control 
signals 
for the 
inter- 
face to the timer unit, some timing parameters 
must 
be met 
in order 
for the 
interface 
logic 
to function 
properly. 


Those 
timing 
parameters 
are met by inhibiting 
the 
CLKIN signal for a specific 
window 
during Write Cy- 
cles to the 82380 Timer Unit. 


The CLKIN 
signal 
must be inhibited 
using external 
logic, as the GATE function 
of the 82380 timer unit is 
not guaranteed 
to totally 
inhibit CLKIN. 


This CLKIN 
inhibit circuitry 
guarantees 
proper 
write 
cycles to the 82380 timer unit. 


Without 
this solution, 
write cycles to the 82380 timer 
unit could 
place 
corrupted 
data 
into the timer 
unit 
registers. 
This, in turn, could yield inaccurate 
results 
and improper 
timer operation. 


The 
proposed 
solution 
would 
involve 
a hardware 
modification 
for existing 
systems. 


A timing waveform 
(Figure 2) shows the specific win- 
dow during which 
CLKIN 
must be inhibited. 
Please 
note that 
CLKIN 
must only 
be inhibited 
during 
the 
window shown in Figure 2. This window 
is defined 
by 
two AC timing parameters: 


The proposed 
solution 
provides 
a certain 
amount 
of 
system 
"guardband" 
to make sure that this window 
is avoided. 


PAL'equations 
for a suggested 
workaround 
are also 
included. 
Please 
refer to the comments 
in the PAL 
codes for stated assumptions 
of this particular 
work- 
around. 
A state 
diagram 
(Figure 
3) is provided 
to 
help clarify how this PAL is designed. 


Figure 4 shows 
how this PAL would fit into a system 
workaround. 
In order to show the effect of this work- 
around 
on the CLKIN 
signal, 
Figure 
5 shows 
how 
CLKIN is inhibited. 
Note that you must still meet the 
CLKIN 
AC 
timing 
parameters 
(e.g., 
t47 (min), 
t48 
(min)) in order for the timer unit to function 
properly. 


Please note that this workaround 
has not been test- 


ed. 
It is provided 
as a suggested 
solution. 
Actual 
solutions 
will vary from system 
to system. 


Intel has no plans to fix this behavior 
in the 82380 
timer unit. 


module Timer_82380_Fix 
flag '-r2','-q2','-fl', 
'-t4', '-wl,3,6,5,4,16,7,12,17,18,15,14' 
title 
'82380 Timer Unit CLKIN 
INHIBIT signal PAL Solution 
' 
Timer_Unit_Fix 
device 
'P16R6'; 


"This PAL inhibits the CLKIN signal 
(that comes from an oscillator) 
"during Slave Writes to the 82380 Timer unit. 
" 
This PAL assumes that an external 
system address 
decoder provides a signal to indicate that an 82380 
Timer Unit access is taking place. This input 
signal is called TMR in this PAL. This PAL also 
assumes that this TMR signal occurs during a 
specific T-State. Please see Figure 3 of this 
document to see when this signal is expected to 
be active by this PAL. 


This PAL does not support pipe lined 82380 SLAVE 
cycles. 


"(c) Intel Corporation 
1989. This PAL is provided as a proposed 
"method of solving a certain 82380 Timer Unit problem. 
This PAL 
"has not been tested or validated. 
Please validate this solution 
"for your system and application. 
• 


"Input Pins" 


CLK2 
pin 
1 ; "System Clock 
RESET 
pin 
2; "Microprocessor 
RESET signal 
TMR 
pin 
3; "Input from Address Decoder, 
indicating 
"an access to the timer unit of the 
"82380. 
!RDY 
pin 
4- "End of Cycle indicator 
, 
!ADS 
pin 
5 ; "Address and control strobe 
CLK 
pin 
6 ; "PHI2 clock 
W_R 
pin 
7 ; "Write/Read 
Signal" 
ncl 
pin 
8 ; "No Connect 0" 
nc3 
pin 
9 ; "No Connect 1" 
GNDa 
pin 
10 ; "Tied to ground, documentation 
only 
GNDb 
pin 
11; "Output enable, documentation 
only 
CLKIN_IN 
pin 
12 ; "Input-CLKIN 
directly 
from oscillator 


"Output Pins" 


Q_O 
pin 
18 ; "Internal signal only, fed back to 
"PAL logic" 
CLKIN_OUT 
pin 
17 ; "CLKIN signal fed to 82380 Timer Unit 
INHIBIT 
pin 
16 ; "CLKIN Inhibit signal 
SO 
pin 
15 ; "Unused State Indicator Pin 
Sl 
pin 
14; "Unused State Indicator Pin 


"Declarations" 


Valid_ADS = ADS 
&: CLK 
"ADS# sampled in PHIl of 386DX T-State 


Valid_RDY = RDY 
&: CLK 
"RDY# sampled in PHIl of 386DX T-State 


Timer_Acc = TMR 
&: CLK 
"Timer Unit Access, 
as provided by 
"external Address Decoder 
" 


State_Diagram 
[INHIBIT, Sl, SO] 


if RESET then 000 
else if Valid_ADS 
&: W_R then 001 
else 000; 


if RESET then 000 
else if Timer_Acc 
then 010 
else if 
lTimer_Acc then 000 
else 001; 


if RESET then 000 
else if CLK then 110 
else 010; 


if RESET then 000 
else if CLK then 111 
else 110; 


if RESET then 000 
else if CLK then 011 
else 111; 


if RESET then 000 
else if Valid_RDY 
then 000 
else 011; 


if RESET then 000 
else 000; 


if RESET then 000 
else 000; 


Q_O 
:= CLKIN_IN 
; "Latched incoming 
clock. This signal is used 
"internally 
to feed into the MUX-ing 
logic" 


CLKIN_OUT 
:= (INHIBIT & CLKIN_OUT & !RESET) 
+( !INHIBIT & Q_O & !RESET); 


"Equation 
for CLKIN_OUT. 
This 
"feeds directly 
to the 82380 Timer Unit." 
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!Sl := (RESET 
# INHIBIT & !Sl 
# CLK 
& 
!INHIBIT & 
!-RDY 
& SO 
& Sl 
# 
!CLK & 
!Sl 
# !Sl & !TMR 
# 
ISO & 
!Sl); 


ISO ._ (RESET 
# INHIBIT & !Sl 
# CLK 
& 
!INHIBIT & 
!-RDY 
& Sl 
# !CLK & ISO 
# !INHIBIT & ISO & Sl 
# SO & !Sl 
# !Sl & !W_R 
# -ADS 
& 
!Sl); 


• 
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Changes in this revision: 
Figure 4-1: 
Added details about IRQ3# and IRQ2#/IRQ1.5#. 


Section 5.2.1: Added note referring reader to Appendix D (System Notes). 
Table 13-2: 
Changed VIHCMIN to Vcc - 
0.8V. 
Figure 13-1: 
Changed signal names to reflect accurate drive levels and measurement points for those sig- 
nals. 


Appendix D: 
Added this appendix to explain the restrictions on the CLKIN signal of the 82380 Timer Unit. 


82370 
INTEGRATED SYSTEM PERIPHERAL 


• 
High Performance 32-Bit DMA 
Controller for 16-Bit Bus 
-16 
MBytes/Sec Maximum Data 
Transfer Rate at 16 MHz 
- 
8 Independently Programmable 
Channels 


• 
20·Source Interrupt Controller 
-Individually 
Programmable Interrupt 
Vectors 
-15 
External, 5 Internal Interrupts 
- 
82C59A Superset 


• 
Four 16-Blt Programmable Interval 
Timers 
- 
82C54 Compatible 


• 
Software Compatible to 82380 


• 
Programmable Wait State Generator 
- 
0 to 15 Wait States Pipellned 
-1 
to 16 Wait States Non·Plpelined 


• 
DRAM Refresh Controller 


• 
80376 Shutdown Detect and Reset 
Control 
- 
Software/Hardware Reset 


• 
High Speed CHMOS III Technology 


• 
100-Pln Plastic Quad Flat-Pack Package 
and 132·Pln Pin Grid Array Package 


(See 
Packaging 
Handbook 
Order 
# 240800-001, 
Package 
Type 
NG or Package 
Type 
A) 


• 
Optimized for Use with the 80376 
Microprocessor 
- 
Resides on Local Bus for Maximum 
Bus Bandwidth 
- 
16 MHz Clock 


The 
82370 
is a multi-function 
support 
peripheral 
that 
integrates 
system 
functions 
necessary 
in an 80376 
environment. 
It has eight channels 
of high performance 
32-bit 
DMA (32-bit 
internal, 
16-bit external) 
with the 
most efficient 
transfer 
rates possible 
on the 80376 bus. System 
support 
peripherals 
integrated 
into the 82370 
provide 
Interrupt 
Control, 
Timers, 
Wait State generation, 
DRAM Refresh 
Control, 
and System 
Reset logic. 


The 82370's 
DMA Controller 
can transfer 
data between 
devices 
of different 
data path widths 
using a single 
channel. 
Each DMA channel 
operates 
independently 
in any of several 
modes. 
Each channel 
has a temporary 
data storage 
register 
for handling 
non-aligned 
data without 
the need for external 
alignment 
logic. 


16 - 81T PHYSICAL 
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Pin Descriptions 


The 82370 
provides 
all of the signals 
necessary 
to 
interface 
an 80376 host processor. 
It has a separate 
24-bit address 
and 16-bit data bus. It also has a set 
of control 
signals to support operation 
as a bus mas- 
ter or a bus slave. 
Several 
special 
function 
signals 


exist on the 82370 for interfacing 
the system support 
peripherals 
to their respective 
system 
counterparts. 


Following 
are the definitions 
of the individual 
pins of 
the 82370. These 
brief descriptions 
are provided 
as 
a reference. 
Each signal is further 
defined 
within the 
sections 
which describe 
the associated 
82370 func- 
tion. 


Symbol 
Type 
Name and Function 


A1-A23 
I/O 
ADDRESS 
BUS: Outputs 
physical 
memory or port I/O addresses. 
See 
Address 
Bus (2.2.3) for additional 
information. 


BHE# 
I/O 
BYTE ENABLES: 
Indicate which data bytes of the data bus take part in a bus 
BLE# 
cycle. See Byte Enable (2.2.4) for additional 
information. 


00-015 
I/O 
DATA BUS: This is the 16-bit data bus. These pins are active outputs during 
interrupt 
acknowledges, 
during Slave accesses, 
and when the 82370 is in the 
Master Mode. 


CLK2 
I 
PROCESSOR 
CLOCK: This pin must be connected 
to the processor's 
clock, 
CLK2. The 82370 monitors 
the phase of this clock in order to remain 
synchronized 
with the CPU. This clock drives all of the internal synchronous 
circuitry. 


D/C# 
I/O 
DATA/CONTROL: 
D/C# 
is used to distinguish 
between 
CPU control 
cycles 
and DMA or CPU data access cycles. It is active as an output only in the 
Master Mode. 


W/R# 
I/O 
WRITE/READ: 
W/R# 
is used to distinguish 
between 
write and read cycles. 
It 
is active as an output only in the Master Mode. 


M/IO# 
I/O 
MEMORY /10: M/IO# 
is used to distinguish 
between 
memory and 10 
accesses. 
It is active as an output only in the Master Mode. 


ADS# 
I/O 
ADDRESS 
STATUS: This signal indicates 
presence 
of a valid address 
on the 
address 
bus. It is active as output only in the Master Mode. ADS# 
is active 
during the first T-state where addresses 
and control 
signals are valid. 


NA# 
I 
NEXT ADDRESS: 
Asserted 
by a peripheral 
or memory to begin a pipelined 
address cycle. This pin is monitored 
only while the 82370 is in the Master 
Mode. In the Slave Mode, pipelining 
is determined 
by the current and past 
status of the ADS# 
and READY # signals. 


HOLD 
0 
HOLD REQUEST: 
This is an active-high 
signal to the Bus Master to request 
control 
of the system bus. When control 
is granted, the Bus Master activates 
the hold acknowledge 
signal (HLDA). 


HLDA 
I 
HOLD ACKNOWLEDGE: 
This input signal tells the DMA controller 
that the 
Bus Master has relinquished 
control 
of the system bus to the DMA controller. 
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Symbol 
Type 
Name and Function 


DREQ (0-3, 
5-7) 
I 
DMA REQUEST: 
The DMA Request 
inputs monitor 
requests 
from peripherals 
requiring 
DMA service. Each of the eight DMA channels 
has one DREQ input. 


These active-high 
inputs are internally 
synchronized 
and prioritized. 
Upon 
request, channel 
0 has the highest priority and channel 
7 the lowest. 


DREQ4/1RQ9 
# 
I 
DMA/INTERRUPT 
REQUEST: 
This is the DMA request input for channel 
4. It 
is also connected 
to the interrupt 
controller 
via interrupt 
request 9. This 
internal connection 
is available 
for DMA channel 
4 only. The interrupt 
input is 
active low and can be programmed 
as either edge or level triggered. 
Either 
function 
can be masked by the appropriate 
mask register. 
Priorities of the 
DMA channel 
and the interrupt 
request are not related but follow the rules of 
the individual 
controllers. 


Note that this pin has a weak internal pull-up. This causes the interrupt 
request to be inactive, but the DMA request will be active if there is no 
external connection 
made. Most applications 
will require that either one or the 
other of these functions 
be used, but not both. For this reason, it is advised 
that DMA channel 
4 be used for transfers 
where a software 
request is more 
appropriate 
(such as memory-to-memory 
transfers). 
In such an application, 
DREQ4 can be masked by software, 
freeing IRQ9# 
for other purposes. 


EOP# 
1/0 
END OF PROCESS: As an output, this signal indicates 
that the current 
Requester 
access is the last access of the currently 
operating 
DMA channel. 


It is activated 
when Terminal 
Count is reached. 
As an input, it signals the DMA 
channel 
to terminate 
the current buffer and proceed 
to the next buffer, if one 
is available. 
This signal may be programmed 
as an asynchronous 
or 
synchronous 
input. 


EOP# 
must be connected 
to a pull-up resistor. This will prevent erroneous 
external 
requests 
for termination 
of a DMA process. 


EDACK (0-2) 
0 
ENCODED 
DMA ACKNOWLEDGE: 
These signals contain the encoded 
acknowledgment 
of a request for DMA service by a peripheral. 
The binary 
code formed by the three signals indicates 
which channel 
is active. Channel 
4 
does not have a DMA acknowledge. 
The inactive state is indicated 
by the 
code 100. During a Requester 
access, 
EDACK presents 
the code for the 
active DMA channel. 
During a Target access, 
EDACK presents 
the inactive 
code 100. 


IRQ (11-23)# 
I 
INTERRUPT 
REQUEST: 
These are active low interrupt 
request inputs. The 
inputs can be programmed 
to be edge or level sensitive. 
Interrupt 
priorities 
are programmable 
as either fixed or rotating. These inputs have weak internal 
pull-up resistors. 
Unused interrupt 
request inputs should be tied inactive 
externally. 


INT 
0 
INTERRUPT 
OUT: INT signals that an interrupt 
request is pending. 


CLKIN 
I 
TIMER CLOCK INPUT: This is the clock input signal to all of the 82370's 
programmable 
timers. It is independent 
of the system clock input (CLK2). 


TOUT1/REF# 
0 
TIMER 
1 OUTPUT IREFRESH: 
This pin is software 
programmable 
as either 
the direct output of Timer 1, or as the indicator 
of a refresh cycle in progress. 
As REF # , this signal is active during the memory read cycle which occurs 
during refresh. 
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Symbol 
Type 
Name and Function 


TOUT2#/IRQ3# 
I/O 
TIMER 2 OUTPUT IINTERRUPT 
REQUEST: 
This is the inverted 
output of 
Timer 2. It is also connected 
directly to interrupt 
request 3. External hardware 
can use IRQ3# 
if Timer 2 is programmed 
as OUT=O 
(TOUT2# 
= 1). 


TOUT3# 
0 
TIMER 3 OUTPUT: 
This is the inverted output of Timer 3. 


READY# 
I 
READY INPUT: This active-low 
input indicates 
to the 82370 that the current 
bus cycle is complete. 
READY is sampled 
by the 82370 both while it is in the 
Master Mode, and while it is in the Slave Mode. 


WSC(0-1) 
I 
WAIT STATE CONTROL: 
WSCO and WSC1 are inputs used by the Wait- 
State Generator 
to determine 
the number of wait states required 
by the 
currently 
accessed 
memory or I/O. The binary code on these pins, combined 
with the MIIO# 
signal, selects an internal register in which a wait-state 
count 
is stored. The combination 
WSC= 
11 disables the wait-state 
generator. 


READYO# 
0 
READY OUTPUT: 
This is the synchronized 
output of the wait-state 
generator. 


It is also valid during CPU accesses 
to the 82370 in the Slave Mode when the 
82370 requires wait states. READYO# 
should feed directly the processor's 
READY # input. 


RESET 
I 
RESET: This synchronous 
input serves to initialize the state of the 82370 and 
provides 
basis for the CPURST output. RESET must be held active for at least 
15 CLK2 cycles in order to guarantee 
the state of the 82370. After Reset, the 
82370 is in the Slave Mode with all outputs except timers and interrupts 
in 
their inactive states. The state of the timers and interrupt 
controller 
must be 
initialized through software. 
This input must be active for the entire time 
required 
by the host processor 
to guarantee 
proper reset. 


CHPSEL# 
0 
CHIP SELECT: This pin is driven active whenever 
the 82370 is addressed 
in a 
slave bus read or write cycle. It is also active during interrupt 
acknowledge 
cycles when the 82370 is driving the Data Bus. It can be used to control the 
local bus transceivers 
to prevent contention 
with the system bus. 


CPURST 
0 
CPU RESET: CPURST provides 
a synchronized 
reset signal for the CPU. It is 
activated 
in the event of a software 
reset command, 
a processor 
shut-down 
detect, or a hardware 
reset via the RESET pin. The 82370 holds CPURST 
active for 62 clocks in response 
to either a software 
reset command 
or a shut- 
down detection. 
Otherwise 
CPURST reflects the RESET input. 


Vcc 
POWER: + 5V input power. 


Vss 
Ground Reference. 


Port 
Wait-State 
Registers 
Select Inputs 


Address 
D7 
D4 
D3 
DO 
WSC1 
WSCO 


72H 
MEMORY 
0 
1/00 
0 
0 
73H 
MEMORY 
1 
I/O 1 
0 
1 
74H 
MEMORY 
2 
1/02 
1 
0 
DISABLED 
1 
1 


M/IO# 
1 
0 


A Row 
BRow 
CRow 
DRow 


Pin 
Label 
Pin 
Label 
Pin 
Label 
Pin 
Label 


1 
CPURST 
26 
Vcc 
51 
A11 
76 
OREQ5 
2 
INT 
27 
011 
52 
AlO 
77 
OREQ4/IRQ9# 
3 
Vcc 
28 
04 
53 
A9 
78 
OREQ3 
4 
Vss 
29 
012 
54 
A8 
79 
OREQ2 
5 
TOUT2# IIRQ3# 
30 
05 
55 
A7 
80 
OREQ1 
6 
TOUT3# 
31 
013 
56 
As 
81 
OREQO 
7 
O/C# 
32 
Os 
57 
A5 
82 
IRQ23# 


8 
Vcc 
33 
Vss 
58 
Vcc 
83 
IRQ22# 


9 
W/R# 
34 
014 
59 
A4 
84 
IRQ21# 


10 
M/IO# 
35 
07 
60 
A3 
85 
IRQ20# 


11 
HOLD 
36 
015 
61 
A2 
86 
IRQ19# 


12 
TOUT1/REF# 
37 
A23 
62 
A1 
87 
IRQ18# 


13 
CLK2 
38 
A22 
63 
Vss 
88 
IRQ17# 


14 
Vss 
39 
A21 
64 
BLE# 
89 
IRQ16# 


15 
REAOYO# 
40 
A20 
65 
BHE# 
90 
IRQ15# 


16 
EOP# 
41 
A19 
66 
Vss 
91 
IRQ14# 


17 
CHPSEL# 
42 
A18 
67 
AOS# 
92 
IRQ13# 


18 
Vcc 
43 
Vcc 
68 
Vcc 
93 
IRQ12# 


19 
Do 
44 
An 
69 
EOACK2 
94 
IRQ11# 


20 
08 
45 
A1S 
70 
EOACK1 
95 
CLKIN 
21 
01 
46 
A15 
71 
EOACKO 
96 
WSCO 
22 
09 
47 
A14 
72 
HLOA 
97 
WSC1 
23 
02 
48 
Vss 
73 
OREQ7 
98 
RESET 
24 
010 
49 
A13 
74 
OREQ6 
99 
REAOY# 


25 
03 
50 
A12 
75 
NA# 
100 
Vss 


82370 
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A 
B 
C 
0 
E 
G 
H 
K 
lol 
N 
P 
I'. 
VCC 
VSS 
VCC 
A12 
A9 
AB 
A5 
A3 
BHE# 
OREOO 
EOACKI 
Vss 
Vcc 
Vss 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 


Vcc 
A19 
A17 
A15 
A13 
A10 
A7 
A4 
Al 
AOS# 
EOACK2 
INT 
Vss 
Vcc 


2 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 


ORE04/ 
VSS 
A21 
A18 
A16 
A14 
All 
A6 
A2 
BLE# 
IR09# 
EOACKO 
HLOA 
ORE07 
ORE05 


3 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 


Vcc 
A22 
A20 
ORE06 
NA# 
ORE03 


4 
0 
0 
0 
0 
0 
0 


(NC) 
(NC) 
A23 
WSCO 
ORE02 
OREOI 


5 
0 
0 
0 
0 
0 
0 
Bonolol 
VIEW 
(NC) 
(NC) 
(NC) 
IolETAL LID 
WSCI 
IR022# 
IR023# 


6 
0 
0 
0 
0 
0 
0 


(NC) 
(NC) 
(NC) 
IR021# 
IR020# 
IR019# 


7 
0 
0 
0 
0 
0 
0 


(NC) 
(NC) 
015 
(82370) 
IR017# 
IR016# 
IR018# 


8 
0 
0 
0 
0 
0 
0 


07 
(NC) 
(NC) 
IR013# 
IR014# 
IR015# 


9 
0 
0 
0 
0 
0 
0 


014 
06 
013 
o/e# 
IR012# 
IR011# 


10 
0 
0 
0 
0 
0 
0 


(NC) 
05 
(NC) 
REAOY# 
CLKIN 
W/R# 


11 
0 
0 
0 
0 
0 
0 


Vcc 
(NC) 
012 
(NC) 
03 
010 
(NC) 
REAOYO# 
HOLD 
CHPSEL# 
EOP# 
CPURST 
RESET 
Vcc 


12 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 


(NC) 
(NC) 
(NC) 
(NC) 
(NC) 
TOUTI/ 
lol/O# 
TOUT2#/ 
Vss 
04 
02 
09 
REF# 
TOUT3# 
IR03 
Vss 


13 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 


Vcc 
Vss 
Vcc 
011 
(NC) 
(NC) 
CLK2 
01 
DO 
08, 
Vss 
Vcc 
Vss 
Vcc 


14 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
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82370 PGA Pinout 


I 
III 
_", 
__ 
1 
1 
•• _ 
----- 
. ... 
---_ . 
.... 
---_. 


G14 
CLK2 
014 
011 
L1 
OREQO 
A2 
VCC 
N12 
RESET 
F12 
010 
P6 
IRQ23# 
P2 
VCC 
M12 
CPURST 
G13 
Og 
N6 
IRQ22# 
A4 
VCC 
C5 
A23 
K14 
De 
M7 
IRQ21 # 
A12 
Vcc 
B4 
A22 
A9 
07 
N7 
IRQ20# 
P12 
Vcc 
B3 
A21 
B10 
06 
P7 
IRQ19# 
A14 
Vcc 
C4 
A20 
B11 
Os 
P8 
IRQ18# 
C14 
Vcc 
B2 
A19 
C13 
04 
M8 
IRQ17# 
M14 
Vcc 
C3 
A1e 
E12 
03 
N8 
IRQ16# 
P14 
Vcc 
C2 
Au 
F13 
02 
P9 
IRQ15# 
A5 
NC 
03 
A16 
H14 
01 
N9 
IRQ14# 
B5 
NC 
02 
A1S 
J14 
Do 
M9 
IRQ13# 
A6 
NC 
E3 
A14 
P11 
W/R# 
N10 
IRQ12# 
B6 
NC 
E2 
A13 
L13 
M/lO# 
P10 
IRQ11 # 
C6 
NC 
E1 
A12 
K2 
AOS# 
M5 
WSCO 
A7 
NC 
F3 
An 
M10 
O/C# 
M6 
WSC1 
B7 
NC 
F2 
A10 
N4 
NA# 
M13 
TOUT3# 
C7 
NC 
F1 
Ag 
M11 
REAOY# 
N13 
TOUT2#/IRQ3# 
A8 
NC 
G1 
Ae 
H12 
REAOYO# 
K13 
TOUT1/REF# 
B8 
NC 
G2 
A7 
J12 
HOLD 
N11 
CLKIN 
B9 
NC 
G3 
A6 
M3 
HLOA 
A1 
Vss 
C9 
NC 
H1 
As 
M2 
INT 
C1 
Vss 
A11 
NC 
H2 
A4 
L12 
EOP# 
N1 
Vss 
B12 
NC 
J1 
A3 
L2 
EOACK2 
N2 
Vss 
C11 
NC 
H3 
A2 
M1 
EOACK1 
A3 
Vss 
012 
NC 
J2 
A1 
1,.3 
EOACKO 
A13 
Vss 
G12 
NC 
J3 
BLE# 
N3 
OREQ7 
P13 
Vss 
B13 
NC 
K1 
BHE# 
M4 
OREQ6 
B14 
Vss 
013 
NC 
K12 
CHPSEL# 
P3 
OREQ5 
L14 
Vss 
E13 
NC 
C8 
°1S 
K3 
OREQ4/IRQ9# 
N14 
Vss 
H13 
NC 
A10 
014 
P4 
OREQ3 
B1 
Vcc 
J13 
NC 
C10 
013 
N5 
OREQ2 
01 
Vcc 
E14 
NC 
C12 
012 
P5 
OREQ1 
P1 
Vcc 
F14 
NC 


Controller 
which 
is a superset 
of the 82C59A; 
four 


16-bit Programmable 
Interval Timers which are func- 


tionally equivalent 
to the 82C54 timers; a DRAM Re- 


fresh Controller; 
a Programmable 
Wait State Gener- 


ator; 
and 
system 
reset 
logic. 
The 
interface 
to the 


82370 
is optimized 
for high-performance 
operation 


with the 80376 
microprocessor. 


The 82370 
contains 
several 
independent 
functional 


modules. 
The following 
is a brief discussion 
of the 
components 
and features 
of the 82370. 
Each mod- 
ule has a corresponding 
detailed 
section 
later in this 
data sheet. Those sections 
should be referred 
to for 
design and programming 
information. 
The 82370 
operates 
directly 
on the 80376 
bus. 
In 


the Slave Mode, it monitors 
the state of the proces- 


sor at all times 
and acts 
or idles according 
to the 


commands 
of the host. It monitors 
the address 
pipe- 


line status 
and generates 
the programmed 
number 


of wait 
states 
for the device 
being 
accessed. 
The 


82370 
also has logic to the reset of the 80376 
via 


hardware 
or software 
reset requests 
and processor 


shutdown 
status. 


The 82370 is comprised 
of several computer 
system 
functions 
that 
are 
normally 
found 
in separate 
LSI 
and 
VLSI 
components. 
These 
include: 
a high-per- 


formance, 
eight-channel, 
32-bit 
Direct 
Memory 
Ac- 


cess 
Controller; 
a 20-level 
Programmable 
Interrupt 


• 
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After a system reset, the 82370 is in the Slave 
Mode. It appears to the system as an I/O device. It 
becomes a bus master when it is performing DMA 
transfers. 


are automatically inserted into the access cycle. 
This allows the programmer to write initialization rou- 
tines, etc. without regard to hardware recovery 
times. 


To maintain compatibility with existing software. the 
registers within the 82370 are accessed as bytes. If 
the internal logic of the 82370 requires a delay be- 
fore another access by the processor, wait states 


Figure 1-1 shows the basic architectural compo- 
nents of the 82370. The following sections briefly 
discuss the architecture and function of each of the 
distinct sections of the 82370. 


I 
I 
HOLD 
HOLDA _ 
INTERNAL BUS 
I 
. 
ARBITRAlION 
CLK2 ~ 
AND CONTROL 
I 


READYN 


READYON 


WSCO 
WSCl 


13 
IRON 


INT 


DRE07 


EDACKO 


EDACKI 


EDACK2 


EOPN 


TOUT2N 


TOUT3N 


The 82370 contains a high-performance, 8-channel 
DMA Controller. It provides a 32-bit internal data 
path Through its 16-bit external physical data bus, it 
is capable of transferring data in any combination of 
bytes, words and double-words. The addresses of 
both source and destination can be independently 
incremented, decremented or held constant, and 
cover the entire 16-bit physical address space of the 
80376. It can disassemble and assemble non- 
aligned data via a 32-bit internal temporary data 
storage register. Data transferred between devices 
of different data path widths can also be assembled 
and disassembled using the internal temporary data 
storage register. The DMA Controller can also trans- 
fer aligned data between I/O and memory on the fly, 
allowing data transfer rates up to 16 megabytes per 
second for an 82370 operating at 16 MHz. Figure 
1-2 illustrates the functional components of the DMA 
Controller. 


There are twenty-four general status and command 
registers in the 82370 DMA Controller. Through 
these registers any of the channels may be pro- 
grammed into any of the possible modes. The oper- 
ating modes of anyone channel are independent of 
the operation of the other channels. 


Each channel has three programmable registers 
which determine the location and amount of data to 
be transferred: 


Byte Count Register- 
Number of bytes to trans- 
fer. (24.bits) 


Requester Register - 
Byte Address of memory 
or peripheral which is re- 
questing 
DMA 
service. 


(24-bits) 
Target Register 
- 
Byte Address of peripheral 
or memory which will be 
accessed. (24-bits) 


There are also port addresses which, when ac- 
cessed, cause the 82370 to perform specific func- 
tions. The actual data written doesn't matter, the act 
of writing to the specific address causes the com- 
mand to be executed. The commands which operate 
in this mode are: Master Clear, Clear Terminal Count 
Interrupt Request, Clear Mask Register, and Clear 
Byte Pointer Flip-Flop. 


DMA transfers can be done between all combina- 
tions of memory and I/O; memory-to-memory, mem- 
ory-tOoI/O, I/O-to-memory, 
and I/O-tOol/D. 
DMA 


service can be requested through software and/or 
hardware. Hardware DMA acknowledge signals are 
available for all channels (except channel 4) through 
an 
encoded 
3-bit 
DMA 
acknowledge 
bus 


(EDACKO-2). 


HOLD 
CONTROL/STATUS 
REGISTERS 
CHANNEL 
REGISTERS 


HLDA 
COlollolAND REGISTER I 
BASE 
CURRENT 
TElolPORARY 


COlollolAND REGISTER II 
BYTE COUNT 
BYTE COUNT 
REGISTER 
DREQO 
DREQ1 
lolODE REGISTER I 
BASE 
CURRENT 


DREQ2 


REQUESTER 
REQUESTER 
CHANNEL 
0 
lolODE REGISTER II 
ADDRESS 
ADDRESS 


DREQ3 
SOFTWARE REQUEST 
BASE 
CURRENT 


DREQ4 
REGISTER 
TARGET 
TARGET 


DREQ5 
lolASK REGISTER 
ADDRESS 
ADDRESS 


DREQ6 
STATUS REGISTER 
CHANNEL 
1 (SAlolE AS CH 0) 


DREQ7 
BUS SIZE REGISTER 
CHANNEL 
2 (SAlolE AS CH 0) 


CHAINING 
REGISTER 
CHANNEL 
3 (SAlolE AS CH 0) 


CONTROL/STATUS 
(SAlolE AS 
LOWER GROUP) 


"UPPER" 
GROUP OF CHANNELS 


CHANNEL 
4 
SAlolE AS CH 0 


. CHANNEL 
5 
SAlolE AS CH 0 


CHANNEL 
6 
SAlolE AS CH 0 


CHANNEL 
7 (SAlolE AS CH 0) 


The 82370 DMA Controller transfers blocks of data 
(buffers) in three modes: Single Buffer, Buffer Auto- 
Initialize, and Buffer Chaining. In the Single Buffer 
Process, the 82370 DMA Controller is programmed 
to transfer one particular block of data. Successive 
transfers then require reprogramming of the DMA 
channel. Single Buffer transfers are useful in sys- 
tems where it is known at the time the transfer be- 
gins what quantity of data is to be transferred, and 
there is a contiguous block of data area available. 


The Buffer Auto-Initialize Process allows the same 
data area to be used for successive DMA transfers 
without having to reprogram the channel. 


The Buffer Chaining Process allows a program to 
specify a list of buffer transfers to be executed. The 
82370 DMA Controller, through interrupt routines, is 
reprogrammed from the list. The channel is repro- 
grammed for a new buffer before the current buffer 
transfer is complete. This pipelining of the channel 
programming process allows the system to allocate 
non-contiguous blocks of data storage space, and 
transfer all of the data with one DMA process. The 
buffers that make up the chain do not have to be in 
contiguous locations. 


Channel priority can be fixed or rotating. Fixed priori- 
ty allows the programmer to define the priority of 
DMA channels based on hardware or other fixed pa- 
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rameters. Rotating priority is used to provide periph- 
erals access to the bus on a shared basis. 


With fixed priority, the programmer can set any 
channel to have the current lowest priority. This al- 
lows the user to reset or manually rotate the priority 
schedule without reprogramming the command reg- 
isters. 


Four 16-bit programmable interval timers reside 
within the 82370. These timers are identical in func- 
tion to the timers in the 82C54 Programmable Inter- 
val Timer. All four of the timers share a common 
clock input which can be independent of the system 
clock. The timers are capable of operating in six dif- 
ferent modes. In all of the modes, the current count 
can be latched and read by the 80376 at any time, 
making these very versatile event timers. Figure 1-3 
shows the functional components of the Program- 
mable Interval Timers. 


The outputs of the timers are directed to key system 
functions, making system design simpler. Timer 0 is 
routed directly to an interrupt input and is not avail- 
able externally. This timer would typically be used to 
generate time-keeping interrupts. 


TI~ER 0 


TI~ER 1 


Timers 1 and 2 have outputs which are available for 
general timer/counter purposes as well as special 
functions. Timer 1 is routed to the refresh control 
logic to provide refresh timing. Timer 2 is connected 
to an interrupt request input to provide other timer 
functions. Timer 3 is a general purpose timer/coun- 
ter whose output is available to external hardware. It 
is also connected internally to the interrupt request 
which defaults to the highest priority (IROO). 


The 82370 has the equivalent of three enhanced 
82C59A Programmable Interrupt Controllers. These 
controllers can all be operated in the Master Mode, 
but the priority is always as if they were cascaded. 
There are 15 interrupt request inputs provided for 
the user, all of which can be inputs from external 
slave interrupt controllers. Cascading 82C59As to 
these request inputs allows a possible total of 120 
external interrupt requests. Figure 1-4 is a block dia- 
gram of the 82370 Interrupt Controller. 


Each of the interrupt request inputs can be individu- 
ally programmed with its own interrupt vector, allow- 
ing more flexibility in interrupt vector mapping than 


IRQO# 
IRQ1# 
IRQ2# 
IRQ3# 
IRQ4# 
IRQS# 
IRQ6# 
IRQ7# 


was available with the 82C59A. An interrupt is pro- 
vided to alert the system that an attempt is being 
made to program the vectors in the method of the 
82C59A. This provides compatibility of existing soft- 
ware that used the 82C59A or 8259A with new de- 
signs using the 82370. 


In the event of an unrequested or otherwise errone- 
ous interrupt acknowledge cycle, the 82370 Interrupt 
Controller issues a default vector. This vector, pro- 
grammed by the system software, will alert the sys- 
tem of unsolicited interrupts of the 80376. 


The functions of the 82370 Interrupt Controller are 
identical to the 82C59A, except in regards to pro- 
gramming the interrupt vectors as mentioned above. 
Interrupt request inputs are programmable as either 
edge or level triggered and are software maskable. 
Priority can be either fixed or rotating and interrupt 
requests can be nested. 


Enhancements are added to the 82370 for cascad- 
ing external interrupt controllers. Master to Slave 
handshaking takes place on the data bus, instead of 
dedicated cascade lines. 


IN- 
SERVICE 
REG. 


IRQO 


IRQ1 


IRQ2 


IRQ3 


IRQ4 


IRQS 


IRQ6 


IRQ7 


INDIVIDUALLY 
PROGRA~~ABLE 
VECTOR BANK 


• 


1.1.4 WAIT 
STATE 
GENERATOR 


The 
Wait 
State 
Generator 
is 
a 
programmable 
READY 
generation 
circuit 
for the 80376 
bus. A p~- 
ripheral 
requiring 
wait states 
can request 
the Walt 
State Generator 
to hold the processor's 
READY 
in- 
put 
inactive 
for 
a 
predetermined 
number 
of 
bus 
states. 
Six different 
wait 
state 
counts 
can be pro- 
grammed 
into the Wait State Generator 
by software; 
three 
for memory 
accesses 
and three 
for I/O 
ac- 
cesses. 
A block 
diagram 
of the 82370 
Wait 
State 
Generator 
is shown 
in Figure 1-5 


The peripheral 
being accessed 
selects 
the require~ 
wait state 
count 
by placing 
a code 
on a 2-blt walt 
state 
select 
bus. This code 
along 
with the 
M/IO# 
signal from the bus master 
is used to select 
one of 
six internal 
4-bit wait state registers 
which 
has been 
programmed 
with the desired 
number of wait states. 
From zero to fifteen wait states can be programmed 
into the wait state registers. 
The Wait State genera- 


tor tracks 
the state of the processor 
or current 
bus 
master at all times, regardless 
of which device is the 
current 
bus master and regardless 
of whether 
or not 
the wait state generator 
is currently 
active. 


The 82370 Wait State Generator 
is disabled 
by mak- 
ing the select inputs both high. This allows hardware 
which is intelligent 
enough to generate 
its own ready 
signal to be accessed 
without 
penalty. As previously 
mentioned, 
deselecting 
the 
Wait 
State 
Generator 
does 
not disable 
its ability 
to determine 
the proper 
number 
of wait states 
due to pipeline 
status in sub- 
sequent 
bus cycles. 


The number 
of wait states 
inserted 
into a pipelined 
bus cycle is the value in the selected 
wait state reg- 
ister. If the bus master 
is operating 
in the non-pipe- 
lined 
mode, 
the Wait State 
Generator 
will increase 
the number of wait states inserted 
into the bus cycle 
by one. 


WSCO 


WSCI 


1.1/10# 


REGISTER 
SELECT 
LOGIC 


On reset 
the Wait State 
Generator's 
registers 
are 
loaded 
~ith 
the 
value 
FFH, 
giving 
the 
maximum 
number 
of wait states 
for any access 
in which 
the 
wait state select 
inputs are active. 


1.1.5 DRAM 
REFRESH 
CONTROLLER 


The 82370 
DRAM 
Refresh 
Controller 
consists 
of a 
24-bit 
refresh 
address 
counter 
and 
bus arbitration 
logic. The output 
of Timer 
1 is used to periodically 
request 
a refresh 
cycle. 
When 
the 
controller 
re- 
ceives the request, 
it requests 
access to the system 
bus through 
the HOLD signal. 
When 
bus control 
is 
acknowledged 
by the processor 
or current 
bus mas- 
ter, the refresh 
controller 
executes 
a memory 
read 
operation 
at the address currently 
in the Refresh 
Ad- 
dress 
Register. 
At the same 
time, it activates 
a re- 
fresh signal (REF #) that the memory 
uses to force a 
refresh 
instead 
of a normal 
read. Control 
of the bus 
is transferred 
to the processor 
at the completion 
of 
this cycle. Typically 
a refresh cycle will take six clock 
cycles to execute 
on an 80376 
bus. 


The 82370 
DRAM 
Refresh 
Controller 
has the high- 
est priority 
when requesting 
bus access 
and will in- 
terrupt 
any active 
DMA process. 
This allows 
large 
blocks 
of data to be moved 
by the DMA controller 
without 
affecting 
the refresh function. 
Also the DMA 
controller 
is not required to completely 
relinquish 
the 
bus, the refresh 
controller 
simply steals a bus cycle 
between 
DMA accesses. 


The amount 
by which 
the refresh 
address 
is incre- 
mented 
is programmable 
to allow 
for different 
bus 
widths 
and memory 
bank arrangements. 


1.1.6 CPU RESET 
FUNCTION 


The 82370 
contains 
a special 
reset function 
which 
can respond 
to hardware 
reset signals 
as well as a 
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REFRESH 


MEMORY 1 


MEMORY 2 


(RESERVED) 


software reset command. The circuit will hold the 
80376's RESET line active while an external hard- 
ware reset signal is present at its RESET input. It 
can also reset the 80376 processor as the result of a 
software command. The software reset command 
causes the 82370 to hold the processor's RESET 
line active for a minimum of 62 clock cycles. The 
80376 requires that its RESET line be held active for 
a minimum of 80 clock cycles to re-initialize. For a 
more detailed explanation and solution, see Appen- 
dix D (System Notes). 


The 82370 can be programmed to sense the shut- 
down detect code on the status lines from the 
80376. If the Shutdown Detect function is enabled, 
the 82370 will automatically reset the processor. A 
diagnostic register is available which can be used to 
determine the cause of reset. 


After a hardware reset, the internal registers of the 
82370 are located in I/O space beginning at port 
address OOOOH.The map of the 82370's registers is 
relocatable via a software command. The default 
mapping places the 82370 between I/O addresses 
OOOOHand OODBH.The relocation register allows 
this map to be moved to any even 256-byte bounda- 
ry in the processor's 16-bit I/O address space or any 
even 64 kbyte boundary in the 24-bit memory ad- 
dress space. 


The 82370 is designed to operate efficiently on the 
local bus of an 80376 microprocessor. The control 
signals of the 82370 are identical in function to 
those of the 80376. As a slave, the 82370 operates 
with all of the features available on the 80376 bus. 
When the 82370 is in the Master Mode, it looks iden- 
tical to an 80376 to the connected devices. 


The 82370 monitors the bus at all times, and deter: 
mines whether the current bus cycle is a pipelined or 
non-pipelined access. All of the status signals of the 
processor are monitored. 


The control, status, and data registers within the 
82370 are located at fixed addresses relative to 
each other, but the group can be relocated to either 
memory or I/O space and to different locations with- 
in those spaces. 


As a Slave device, the 82370 monitors the control/ 
status lines of the CPU. The 82370 will generate all 
of the wait states it needs whenever it is accessed. 
This allows the programmer the freedom of access- 


ing 82370 registers without having to insert NOPs in 
the program to wait for slower 82370 internal regis- 
ters. 


The 82370 can determine if a current bus cycle is a 
pipelined or a non-pipelined cycle. It does this by 
monitoring the ADS#, NA# and READY# signals 
and thereby keeping track of the current state of the 
80376. 


As a bus master, the 82370 looks like an 80376 to 
the rest of the system. This enables the designer 
greater flexibility 
in systems which 
include the 
82370. The designer does not have to alter the inter- 
faces of any peripherals designed to operate with 
the 80376 to accommodate the 82370. The 82370 
will access any peripherals on the bus in the same 
manner as the 80376, including recognizing pipe- 
lined bus cycles. 


The 82370 is accessed as an 8-bit peripheral. The 
80376 places the data of all 8-bit accesses either on 
D(0-7) or D(8-15). The 82370 will only accept data 
on these lines when in the Slave Mode. When in the 
Master Mode, the 82370 is a full 16-bit machine, 
sending and receiving data in the same manner as 
the 80376. 


The 82370 contains a set of interface signals to op- 
erate efficiently with the 80376 host processor. 
These signals were designed so that minimal hard- 
ware is needed to connect the 82370 to the 80376. 
Figure 2-1 depicts a typical system configuration 
with the 80376 processor. As shown in the diagram, 
the 82370 is designed to interface directly with the 
80376 bus. 


Since the 82370 resides on the opposite side of the 
data bus transceivers with respect to the rest of the 
system peripherals, it is important to note that the 
transceivers should be controlled so that contention 
between the data bus transceivers and the 82370 
will not occur. In order to ease the implementation of 
this, the 82370 activates the CHPSEL# signal which 
indicates that the 82370 has been addressed and 
may output data. This signal should be included in 
the direction and enable control logic of the trans- 
ceiver. When any of the 82370 internal registers are 
read, the data bus transceivers should be disabled 
so that only the 82370 will drive the local bus. 


This section describes the basic bus functions of the 
82370 to show how this device interacts with the 
80376 processor. Other signals which are not direct- 
ly related to the host interface will be discussed in 
their associated functional block description. 
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At any time, the 82370 acts as either a Slave device 
or a Master 
device 
in the system. 
Upon 
reset, the 
82370 
will be in the Slave 
Mode. 
In this mode, the 
80376 
processor 
can read/write 
into the 82370 
in- 
ternal registers. 
Initialization 
information 
may be pro- 
grammed 
into the 82370 
during Slave Mode. 


When DMA service (including 
DRAM Refresh Cycles 
generated 
by the 82370) is requested, 
the 82370 will 
request 
and subsequently 
get control 
of the 80376 
local bus. This is done through 
the HOLD and HLDA 
(Hold Acknowledge) 
signals. 
When the 80376 
proc- 


essor 
responds 
by asserting 
the 
HLDA 
signal, 
the 
82370 
will 
switch 
into 
Master 
Mode 
and 
perform 
DMA transfers. 
In this mode, 
the 82370 
is the bus 
master of the system. 
It can read/write 
data from/to 
memory 
and peripheral 
devices. 
The 82370 
will re- 
turn 
to the 
Slave 
Mode 
upon 
completion 
of DMA 
transfers, 
or when HLDA is negated. 


As mentioned 
in the Architecture 
section, 
the 
Bus 
Interface 
module 
of the 82370 
(see Figure 1-1) con- 
tains 
signals 
that 
are 
directly 
connected 
to 
the 
80376 
host 
processor. 
This 
module 
has 
separate 


additiOnalcontrol signals to support dltterent bUSop- 
erations on the system. By residing on the 80376 
local bus, the 82370 shares the same address, data 
and control lines with the processor. The following 
subsections discuss the signals which interface to 
the 80376 host processor. 


The CLK2 input provides fundamental timing for the 
82370. It is divided by two internally to generate the 
82370 internal clock. Therefore, CLK2 should be 
driven with twice the 80376's frequency. In order to 
maintain synchronization with the 80376 host proc- 
essor, the 82370 and the 80376 should share a 
common clock source. 


The internal clock consists of two phases: PHI1 and 
PHI2. Each CLK2 period is a phase of the internal 
clock. PHI2 is usually used to sample input and set 
up internal signals and PHI1 is for latching internal 
data. Figure 2-2 illustrates the relationship of CLK2 
and the 82370 internal clock signals. The CPURST 
signal generated by the 82370 guarantees that the 
80376 will wake up in phase with PHI1. 


This 16-bit three-state bidirectional bus provides a 
general purpose data path between the 82370 and 
the system. These pins are tied directly to the corre- 
sponding Data Bus pins of the 80376 local bus. The 
Data Bus is also used for interrupt vectors generated 
by the 82370 in the Interrupt Acknowledge cycle. 


During Slave I/O operations, the 82370 expects a 
single byte to be written or read. When the 80376 
host processor writes into the 82370, either 00-07 
or 08-015 will be latched into the 82370, depending 


Iable 2-1). When the 80376 hOst processor reads 
from the 82370, the single byte data will be duplicat- 
ed twice on the Data Bus; i.e. on 00-07 
and 08- 


015' 


During Master Mode, the 82370 can transfer 16-, 
and 8-bit data between memory (or I/O devices) and 
I/O devices (or memory) via the Data Bus. 


These three-state bidirectional signals are connect- 
ed directly to the 80376 Address Bus. In the Slave 
Mode, they are used as input signals so that the 
processor can address the 82370 internal ports/reg- 
isters. In the Master Mode, they are used as output 
signals by the 82370 to address memory and periph- 
eral devices. The Address Bus is capable of ad- 
dressing 16 Mbytes of physical memory space 
(OOOOOOH 
to FFFFFFH), and 64 Kbytes of I/O ad- 
dresses. 


2.2.4 BYTE ENABLE (BHE #, BlE #) 


The Byte Enable pins BHE# and BLE# select the 
specific byte(s) in the word addressed by A1-A23. 
During Master Mode operation, it is used as an out- 
put by the 82370 to address memory and I/O loca- 
tions. The definition of BHE# and BLE# is further 
illustrated in Table 2-1. 


NOTE: 


The 82370 will activate BHE# when output in Mas- 
ter Mode. For a more detailed explanation and its 
solutions, see Appendix 0 (System Notes). 
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Byte to be Accessed 
Logical 
Byte 
Presented 
on 
BHE# 
BLE# 
Relative 
to A23-Al 
Data Bus During 
WRITE Only' 


D15-D8 
D7-DO 


0 
0 
0,1 
B 
A 
0 
1 
1 
A 
A 
1 
0 
0 
U 
A 
1 
1 
(Not Used) 


U = Undefined 
A = Logical 00-07 
B = Logical 08-015 


·NOTE: 
Actual number of bytes accessed depends upon the programmed data path width. 


M/IO# 
D/C# 
W/R# 
As INPUTS 
As OUTPUTS 


0 
0 
0 
Interrupt Acknowledge 
NOT GENERATED 
0 
0 
1 
UNDEFINED 
NOT GENERATED 
0 
1 
0 
I/O Read 
I/O Read 
0 
1 
1 
I/O Write 
I/O Write 
1 
0 
0 
UNDEFINED 
NOT GENERATED 
1 
0 
1 
HALT if A1 = 1 
NOT GENERATED 
SHUTDOWN 
if A1 = 0 
1 
1 
0 
Memory 
Read 
Memory 
Read 
1 
1 
1 
Memory Write 
Memory Write 


2.2.5 BUS CYCLE 
DEFINITION 
SIGNALS 
(D/C#, 
W/R#, 
M/lO#) 


These 
three-state 
bidirectional 
signals 
define 
the 
type 
of bus cycle 
being 
performed. 
W/R# 
distin~ 
guishes 
between 
write 
and read cycles. 
D/C# 
dis- 
tinguishes 
between 
processor 
data and control 
cy- 
cles. M/IO# 
distinguishes 
between 
memory and I/O 
cycles. 


During Slave 
Mode, these 
signals 
are driven 
by the 
80376 host processor; 
during Master Mode, they are 
driven 
by the 82370. 
In either 
mode, 
these 
signals 
will 
be valid 
when 
the 
Address 
Status 
(ADS #) 
is 
driven 
LOW. Exact bus cycle definitions 
are given in 
Table 
2-2. Note that some combinations 
are recog- 
nized as inputs, but not generated 
as outputs. 
In the 
Master 
Mode, D/C# 
is always 
HIGH. 


This signal 
indicates 
that 
a valid address 
(A1 -A23' 


BHE#, 
BLE#) 
and 
bus 
cycle 
definition 
(W/R#, 


D/C#, 
M/IO#) 
is being 
driven 
on the bus. 
In the 
Master Mode, it is driven by the 82370 as an output. 
In the 
Slave 
Mode, 
this 
signal 
is 
monitored 
as 


an 
input 
by the 
82370. 
By the 
current 
and 
past 
status of ADS# 
and the READY # input, the 82370 
is able to determine, 
during Slave Mode, if the next 
bus cycle is a pipe lined address 
cycle. ADS # is as- 
serted during T1 and T2P bus states (see Bus State 
Definition). 


NOTE: 
ADS # 
must 
be 
qualified 
with 
the 
rising 
edge 
of 
CLK2. 


This 
input 
indicates 
that 
the 
current 
bus 
cycle 
is 
complete. 
In the Master 
Mode, assertion 
of this sig- 
nal indicates 
the 
end 
of a DMA 
bus cycle. 
In the 
Slave 
Mode, 
the 
82370 
monitors 
this 
input 
and 
ADS# 
to detect 
a pipelined 
address 
cycle. This sig- 
nal should 
be tied directly 
to the READY # input of 
the 80376 
host processor. 


This 
input 
is used to indicate 
to the 
82370 
in the 
Master 
Mode that the system 
is requesting 
address 


pipelining. 
When 
driven 
LOW 
by either 
memory 
or 
peripheral 
devices 
during 
Master 
Mode, 
it indicates 
that the system is prepared 
to accept 
a new address 
and bus cycle definition 
signals 
from the 82370 
be- 
fore the end of the current 
bus cycle. 
If this input is 
active when sampled 
by the 82370, the next address 
is driven 
onto 
the 
bus, 
provided 
a bus request 
is 
already 
pending 
internally. 


This input pin is monitored 
only in the Master 
Mode. 


In the Slave Mode, the 82370 
uses the ADS# 
and 
READY # 
signals 
to 
determine 
address 
pipelining 
cycles, 
and NA# 
will be ignored. 


2.2.9 RESET 
(RESET, 
CPURSn 


RESET 


This 
synchronous 
input 
suspends 
any operation 
in 
progress 
and 
places 
the 
82370 
in a known 
initial 
state. 
Upon 
reset, 
the 
82370 
will 
be in the 
Slave 
Mode 
waiting 
to 
be 
initialized 
by the 
80376 
host 
processor. 
The 82370 
is reset by asserting 
RESET 
for 15 or more CLK2 
periods. 
When 
RESET 
is as- 
serted, 
all other input pins are ignored, 
and all other 
bus pins are driven to an idle bus state as shown 
in 
Table 2-3. The 82370 will determine 
the phase of its 
internal 
clock following 
RESET going inactive. 


RESET 
is level-sensitive 
and must be synchronous 
to the CLK2 signal. The RESET setup and hold time 
requirements 
are shown 
in Figure 2-3. 


Signal 
Level 


A1-A23' 
Do-D15' 
BHE#, 
BLE# 
Float 


D/C#, 
W/R#, 
M/lO#, 
ADS# 
Float 


READYO# 
'1 ' 


EOP# 
'1' (Weak Pull-UP) 


EDACK2-EDACKO 
'100' 


HOLD 
'0' 


INT 
UNDEFINED" 


TOUT1 /REF #, 
UNDEFINED' 
TOUTU 
/IRQ3 # , TOUT3 # 


CPURST 
'0' 


CHPSEL# 
'1' 


• NOTE: 
The Interrupt Controller and Programmable Interval Timer 
are initialized by software commands. 


This output 
signal 
is used to reset the 80376 
host 
processor. 
It will go active 
(HIGH) whenever 
one of 
the following 
events occurs: a) 82370's 
RESET input 
is active; 
b) a software 
RESET 
command 
is issued 
to the 82370; 
or c) when the 82370 
detects 
a proc- 
essor Shutdown 
cycle and when this detection 
fea- 
ture is enabled 
(see CPU Reset and Shutdown 
De- 
tect). 
When' activated, 
CPURST 
will be held active 
for 62 clocks. The timing of CPURST is such that the 
80376 
processor 
will be in synchronization 
with the 
82370. This timing is shown 
in Figure 2-4. 


I T31 
T30 
. 
II',------------------ 
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Hold Time 
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Setup Time 


• 


2.2.10 INTERRUPT 
OUT (INT) 


This 
output 
pin is used 
to signal 
the 
80376 
host 
processor 
that one or more interrupt 
requests 
(either 
internal 
or external) 
are pending. 
The 
processor 
is 
expected 
to respond 
with an Interrupt 
Acknowledge 
cycle. 
This 
signal 
should 
be connected 
directly 
to 
the Maskable 
Interrupt 
Request 
(INTR) 
input of the 
80376 
host processor. 


2.3 82370 Bus Timing 


The 82370 internally 
divides the CLK2 signal by two 
to generate 
its internal 
clock. 
Figure 2-2 showed 
the 
relationship 
of CLK2 
and 
the 
internal 
clock 
which 
consists 
of two phases: 
PHI1 and PHI2. Each CLK2 
period is a phase of the internal 
clock. 


In the 82370, 
whether 
it is in the 
Master 
or Slave 
Mode, the shortest 
time unit of bus activity 
is a bus 
state. 
A 
bus 
state, 
which 
is also 
referred 
as 
a 


'T-state', 
is defined 
as one 82370 PHI2 clock period 
(Le. two CLK2 periods). 
Recall 
in Table 2-2 various 
types of bus cycles 
in the 82370 
are defined 
by the 
M/IO#, 
D/C# 
and W/R# 
signals. 
Each 
of these 
bus cycles 
is composed 
of two or more bus states. 
The 
length 
of a bus cycle 
depends 
on when 
the 
READY # input is asserted 
(Le. driven 
LOW). 


The 82370 supports 
Address 
Pipelining 
as an option 
in both the Master and Slave Mode. This feature typ- 
ically allows a memory 
or peripheral 
device 
to oper- 
ate with one less wait state than would otherwise 
be 
required. 
This is possible 
because 
during a pipelined 
cycle, 
the 
address 
and bus cycle 
definition 
of the 
next cycle will be generated 
by the bus master while 
waiting 
for the end 
of the 
current 
cycle 
to be ac- 
knowledged. 
The 
pipelined 
bus 
is especially 
well 
suited 
for an interleaved 
memory 
environment. 
For 
16 MHz interleaved 
memory designs with 100 ns ac- 
cess time DRAMs, zero wait state memory accesses 
can be achieved 
when 
pipelined 
addressing 
is se- 
lected. 


In the Master 
Mode, the 82370 
is capable 
of initiat- 
ing, on a cycle-by-cycle 
basis, either 
a pipelined 
or 
non-pipelined 
access 
depending 
upon the state 
of 
the NA# 
input. If a pipelined 
cycle is requested 
(indi- 
cated 
by NA# 
being 
driven 
LOW), 
the 82370 
will 
drive the address and bus cycle definition 
of the next 
cycle 
as soon 
as there 
is an internal 
bus request 
pending. 


In the Slave Mode, the 82370 is constantly 
monitor- 
ing the ADS# 
and READY# 
signals 
on the proces- 
sor local bus to determine 
if the current 
bus cycle is 


a pipelined 
cycle. If a pipelined 
cycle is detected, 
the 
82370 will request one less wait state from the proc- 
essor if the Wait State Generator 
feature 
is selected. 
On the other hand, during an 82370 internal 
register 
access 
in a pipelined 
cycle, 
it will make 
use of the 
advance 
address 
and 
bus cycle 
information. 
In all 
cases, 
Address 
Pipelining 
will result 
in a savings 
of 
one wait state. 


When the 82370 
is in the Master 
Mode, it will be in 
one of six bus states. Figure 2-5 shows the complete 
bus state 
diagram 
of the 
Master 
Mode, 
including 
pipelined 
address 
states. 
As seen in the figure, 
the 
82370 
state 
diagram 
is very 
similar 
to that 
of the 
80376. 
The 
major 
difference 
is that 
in the 
82370, 


there is no Hold state. Also, in the 82370, the condi- 
tions for some state transitions 
depend 
upon wheth- 
er it is the end of a DMA process. 


NOTE: 
The term 'end of a DMA process' 
is loosely 
defined 
here. 
It depends 
on the 
DMA 
modes 
of operation 
as well 
as the 
state 
of the 
EOP# 
and 
DREQ 
in- 
puts. This is expained 
in detail 
in seCtion 3-DMA 
Controller. 


The 82370 will enter the idle state, Ti, upon RESET 
and whenever 
the internal address 
is not available 
at 
the 
end of a DMA 
cycle 
or at the 
end 
of a DMA 
process. 
When address 
pipelining 
is not used (NA# 


is not asserted), 
a new bus cycle always begins with 
state T1. During T1, address and bus cycle definition 
signals 
will be driven 
on the bus. T1 is always 
fol- 


lowed by T2. 


If a bus cycle 
is not acknowledged 
(with READY#) 


during T2 and NA# 
is negated, 
T2 will be repeated. 


When the end of the bus cycle is acknowledged 
dur- 
ing T2, the following 
state will be T1 of the next bus 
cycle 
(if the internal 
address 
latch 
is loaded 
and if 
this is not the end of the DMA process). 
Otherwise, 


the Ti state will be entered. 
Therefore, 
if the memory 
or peripheral 
accessed 
is fast 
enough 
to respond 
within the first T2, the fastest 
non-pipelined 
cycle will 
take one T1 and one T2 state. 


Use 
of 
the 
address 
pipelining 
feature 
allows 
the 
82370 to enter three additional 
bus states: T1 P, T2P 
and T2L T1 P is the first bus state of a pipelined 
bus 
cycle. 
T2P follows 
T1 P (or T2) if NA # 
is asserted 
when sampled. 
The 82370 will drive the bus with the 
address 
and bus cycle definition 
signals 
of the next 


cycle during T2P. From the state diagram, 
it can be 
seen 
that 
after 
an idle state 
Ti, the first bus cycle 
must begin with T1, and is therefore 
a non-pipelined 
bus cycle. 
The 
next 
bus cycle 
can 
be pipelined 
if 
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NA iF is asserted and the previous bus cycle ended 
in a T2P state. Once the 82370 is in a pipelined 
cycle and provided that NAiF is asserted in subse- 
quent cycles, the 82370 will be switching between 
T1P and T2P states. If the end of the current bus 
cycle is not acknowledged by the READYiF input, 
the 82370 will extend the cycle by adding T2P 
states. The fastest pipelined cycle will consist of one 
T1P and one T2P state. 


The 82370 will enter state T2i when NAiF is assert- 
ed and when one of the following two conditions 
occurs. The first condition is when the 82370 is in 
state T2. T2i will be entered if READYiF is not as- 
serted and there is no next address available. This 
situation is similar to a wait state. The 82370 will stay 
in T2i for as long as this condition exists. The sec- 
ond condition which will cause the 82370 to enter 
T2i is when the 82370 is in state T1P. Before going 
to state T2P, the 82370 needs to wait in state T2i 
until the next address is available. Also, in both cas- 
es, if the DMA process is complete, the 82370 will 
enter the T2i state in order to finish the current DMA 
cycle. 


Figure 2-6 is a timing diagram showing non-pipelined 
bus accesses in the Master Mode. Figure 2-7 shows 
the timing of pipelined accesses in the Master Mode. 


Figure 2-8 shows the Slave Mode bus timing in both 
pipelined and non-pipelined cycles when the 82370 
is being accessed. Recall that during Slave Mode, 
the 82370 will constantly monitor the ADSiF and 
READYiF signals to determine if the next cycle is 
pipelined. In Figure 2-8, the first cycle is non-pipe- 
lined and the second cycle is pipelined. In the pipe- 
lined cycle, the 82370 will start decoding the ad- 
dress and bus cycle signals one bus state earlier 
than in a non-pipelined cycle. 


The READYiF input signal is sampled by the 80376 
host processor to determine the completion of a bus 
cycle. This occurs during the end of every T2, T2i 
and T2P state. Normally, the output of the 82370 
Wait State Generator, READYOiF, is directly con- 
nected to the READYiF 
input of the 80376 host 
processor and the 82370. In such case, READYOiF 
and READYiF will be identical (see Wait State Gen- 
erator). 
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NOTE: 
NA# is shown here only for timing reference. It is not sampled by the 82370 during Slave Mode. 
When the 82370 registers are accessed. it will take one or more wait states in pipelined and two or more wait states in 
non-pipelined cycle to complete the internal access. 


The 82370 DMA Controller is capable of transferring 
data between any combination of memory andlor 
liD, with any combination of data path widths. The 
82370 DMA Controller can be programmed to ac- 
commodate 8- or 16-bit devices. With its 16-bit ex- 
ternal data path, it can transfer data in units of byte 
or a word. Bus bandwidth is optimized through the 
use of an internal temporary register which can dis- 
assemble or assemble data to or from either an 
aligned or non-aligned destination or source. Figure 
3-1 is a block diagram of the 82370 DMA Controller. 


The 82370 has eight channels of DMA. Each chan- 
nel operates independently of the others. Within the 
operation of the individual channels, there are many 
different modes of data transfer available. Many of 
the operating modes can be intermixed to provide a 
very versatile DMA controller. 


3.1 
Functional Description 


In describing the operation of the 82370's DMA Con- 
troller, close attention to terminology is required. Be- 


CONTROL/STATUS 
REGISTERS 


COMMAND REGISTER I 


COMMAND REGISTER II 


MODE REGISTER I 


MODE REGISTER II 


SOFlWARE 
REQUEST 
REGISTER 


MASK REGISTER 


STATUS REGISTER 


BUS SIZE REGISTER 


CHAINING REGISTER 


CONTROL/STATUS 
(SAME AS 
LOWER GROUP) 


fore entering the discussion of the function of the 
82370 DMA Controller, the following explanations of 
some of the terminology used herein may be of ben- 
efit. First, a few terms for clarification: 


DREQO 
DREQl 
DREQ2 
DREQ3 
DREQ4 


DREQS 
DREQ6 


DREQ7 


DMA PROCESS-A 
DMA process is the execution 
of a programmed DMA task from beginning to end. 
Each DMA process requires intitial programming by 
the host 80376 microprocessor. 


BASE 
CURRENT 
TEMPORARY 
BYTE COUNT 
BYTE COUNT 
REGISTER 


BASE 
CURRENT 
REQUESTER 
REQUESTER 
ADDRESS 
ADDRESS 


BASE 
CURRENT 
TARGET 
TARGET 
ADDRESS 
ADDRESS 


CHANNEL 
1 (SAME AS CH 0) 


CHANNEL 2 (SAME AS CH 0) 


CHANNEL 3 (SAME AS CH 0) 


BUFFER-A 
contiguous block of data. 


BUFFER TRANSFER-The 
action required by the 
DMA to transfer an entire buffer. 


"UPPER" 
GROUP OF CHANNELS 


CHANNEL 
4 
SAME AS CH 0 


CHANNEL S (SAME AS CH 0 


CHANNEL 
6 
SAME AS CH 0 


CHANNEL 
7 (SAt.!E AS CH 0) 


DATA TRANSFER-The 
DMA action in which a 
group of bytes or words are moved between devices 
by the DMA Controller. A data transfer operation 
may involve movement of one or many bytes. 


BUS CYCLE-Access 
by the DMA to a single byte 
or word. 


Each DMA channel consists of three major compo- 
nents. These components are identified by the con- 
tents of programmable registers which define the 


memory or I/O devices being serviced by the DMA. 
They are the Target, the Requester, and the Byte 
Count. They will be defined generically here and in 
greater detail in the DMA register definition section. 


The Requester is the device which requires service 
by the 82370 DMA Controller, and makes the re- 
quest for service. All of the control signals which the 
DMA monitors or generates for specific channels 
are logically related to the Requester. Only the Re- 
quester is considered capable of initiating or termi- 
nating a DMA process. 


The Target is the device with which the Requester 
wishes to communicate. As far as the DMA process 
is concerned, the Target is a slave which is incapa- 
ble of control over the process. 


The direction of data transfer can be either from Re- 
quester to Target or from Target to Requester; Le. 
each can be either a source or a destination. 


The Requester and Target may each be either I/O 
or memory Each has an address associated with it 
that can be incremented, decremented, or held con- 
stant. The addresses are stored in the Requester 


Address Registers and Target Address Registers, 
respectively. These registers have two parts: one 
which contains the current address being used in the 
DMA process (Current Address Register), and one 
which holds the programmed base address (Base 
Address Register). The contents of the Base Regis- 
ters are never changed by the 82370 DMA Control- 
ler. The Current Registers are incremented or decre- 
mented according to the progress of the DMA pro- 
cess. 


The Byte Count is the component of the DMA pro- 
cess which dictates the amount of data which must 
be transferred. Current and Base Byte Count Regis- 
ters are provided. The Current Byte Count Register 
is decremented once for each byte transferred by 
the DMA process. When the register is decremented 
past zero, the Byte Count is considered 'expired' 
and the process is terminated or restarted, depend- 
ing on the mode of operation of the channel. The 
point at which the Byte Count expires is called 'Ter- 
minal Count' and several status signals are depen- 
dent on this event. 


Each channel of the 82370 DMA Controller also 
contains a 32-bit Temporary Register for use in as- 
sembling and disassembling non-aligned data. The 
operation of this register is transparent to the user, 
although the contents of it may affect the timing of 
some DMA handshake sequences. Since there is 
data storage available for each channel, the DMA 
Controller can be interrupted without loss of data. 


To avoid unexpected results, care should be taken 
in programming the byte count correctly when as- 
sembing and disassembling non-aligned data. For 
example: 


Words to Bytes: 
Transferring two words to bytes. but setting the byte 
count to three, will result in three bytes transferred 
and the final byte flushed. 


Bytes to Words: 
Transferring six bytes to three words, but setting the 
byte count to five, will result in the sixth byte trans- 
ferred being undefined. 


The 82370 DMA Controller is a slave on the bus until 
a request for DMA service is received via either a 
software request command or a hardware request 
signal. The host processor may access any of the 
control/status or channel registers at any time the 
82370 is a bus slave. Figure 3-2 shows the flow of 
operations that the DMA Controller performs. 


At the time a DMA service request is received, the 
DMA Controller issues a bus hold request to the 
host processor. The 82370 becomes the bus master 
when the host relinquishes the bus by asserting a 


hold acknowledge signal. The channel to be serv- 
iced will be the one with the highest priority at the 
time the DMA Controller becomes the bus master. 
The DMA Controller will remain in control of the bus 
until the hold acknowledge signal is removed, or un- 
til the current DMA transfer is complete. 


While the 82370 DMA Controller has control of the 
bus, it will perform the required data transfer(s). The 
type of transfer, source and destination addresses, 
and amount of data to transfer are programmed in 
the control registers of the DMA channel which re- 
ceived the request for service. 


At completion of the DMA process, the 82370 will 
remove the bus hold request. At this time the 82370 
becomes a slave again, and the host returns to be- 
ing a master. If there are other DMA channels with 
requests pending, the controller will again assert the 
hold request signal and restart the bus arbitration 
and switching process. 


There are fourteen control signals dedicated to the 
DMA process. They include eight DMA Channel Re- 
quests (DREQn), three Encoded DMA Acknowledge 
signals (EDACKn), Processor Hold and Hold Ac- 
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(EOP#). The DREQn inputs and EDACK (0-2) out- 
puts are handshake signals to the devices requiring 
DMA service. The HOLD output and HLDA input are 
handshake signals to the host processor. Figure 3-3 
shows these signals and how they interconnect be- 
tween the 82370 DMA Controller, and the Requester 
and Target devices. 


3.2.1 DREQn 
and EDACK (0-2) 


These signals are the handshake signals between 
the peripheral and the 82370. When the peripheral 
requires DMA service, it asserts the DREQn signal 
of the channel which is programmed to perform the 
service. The 82370 arbitrates the DREQn against 
other pending requests and begins the DMA pro- 
cess after finishing other higher priority processes. 


When the DMA service for the requested channel is 
in progress, the EDACK (0-2) signals represent the 
DMA channel which is accessing the Requester. 
The 3-bit code on the EDACK (0-2) lines indicates 
the number of the channel presently being serviced. 
Table 3-2 shows the encoding of these signals. Note 
that Channel 4 does not have a corresponding hard- 
ware acknowledge. 


The DMA acknowledge (EDACK) signals indicate 
the active channel only during DMA accesses to the 
Requester. During accesses to the Target, EDACK 
(0-2) 
has the idle code (100). EDACK (0-2) can 
thus be used to select a Requester device during a 
transfer. 


DREQn can be programmed as either an Asynchro- 
nous or Synchronous input. See section 3.4.1 for de- 
tails on synchronous versus asynchronous operation 
of these pins. 


Table 3·2. EDACK Encoding 


During a DMA Transfer 


EDACK2 
EDACK1 
EDACKO 
Active Channel 


0 
0 
0 
0 


0 
0 
1 
1 


0 
1 
0 
2 


0 
1 
1 
3 


1 
0 
0 
Target Access 


1 
0 
1 
5 


1 
1 
0 
6 


1 
1 
1 
7 


The EDACKn signals are always active. They either 
indicate 'no acknowledge' or they indicate a bus ac- 
cess to the requester. The acknowledge code is ei- 
ther 100, for an idle DMA or during a DMA access to 
the Target, or 'n' during a Requester access, where 
n is the binary value representing the channel. A 
simple 3-line to 8-line decoder can be used to pro- 
vide discrete acknowledge signals for the peripher- 
als. 


3.2.2 HOLD AND HLDA 


The Hold Request (HOLD) and Hold Acknowledge 
(HLDA) signals are the handshake signals between 
the DMA Controller and the host processor. HOLD is 
an output from the 82370 and HLDA is an input. 
HOLD is asserted by the DMA Controller when there 
is a pending DMA request, thus requesting the proc- 
essor to give up control of the bus so the DMA pro- 
cess can take place. The 80376 responds by assert- 
ing HLDA when it is ready to relinquish control of the 
bus. 
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this reason, other devices on the bus should be in 
the slave mode when HLDA is active. 


HOLD and HLDA should not be used to gate or se- 
lect peripherals requesting DMA service. This is be- 
cause of the use of DMA-Iike operations by the 
DRAM Refresh Controller. The Refresh Controller is 
arbitrated with the DMA Controller for control of the 
bus, and refresh cycles have the highest priority. A 
refresh cycle will take place between DMA cycles 
without relinquishing bus control. See section 3.4.3 
for a more detailed discussion of the interaction be- 
tween the DMA Controller and the DRAM Refresh 
Controller. 


EOPII is a bi-directional signal used to indicate the 
end of a DMA process. The 82370 activates this as 
an output during the T2 states of the last Requester 
bus cycle for which a channel is programmed to exe- 
cute. The Requester should respond by either with- 
drawing its DMA request, or interrupting the host 
processor to indicate that the channel needs to be 
programmed with a new buffer. As an input, this sig- 
nal is used to tell the DMA Controller that the periph- 
eral being serviced does not require any more data 
to be transferred. This indicates that the current 
buffer is to be terminated. 


EOPII can be programmed as either an Asynchro- 
nous or a Synchronous input. See section 3.4.1 for 
details on synchronous versus asynchronous opera- 
tion of this pin. 


3.3 
Modes of Operation 


The 82370 DMA Controller has many independent 
operating functions. When designing peripheral in- 
terfaces for the 82370 DMA Controller, all of the 
functions or modes must be considered. All of the 
channels are independent of each other (except in 
priority of operation) and can operate in any of the 
modes. Many of the operating modes, though inde- 
pendently programmable, affect the operation of 
other modes. Because of the large number of com- 
binations possible, each programmable mode is dis- 
cussed here with its affects on the operation of other 
modes. The entire list of possible combinations will 
not be presented. 


Table 3-1 shows the categories of DMA features 
available in the 82370. Each of the five major cate- 
gories is independent of the others. The sub-catego- 
ries are the available modes within the major func- 


I. TARGET/REQUESTER DEFINITION 
a. Data Transfer Direction 
b. Device Type 
II. BUFFER PROCESSES 
a. Single Buffer Process 
b. Buffer Auto-Initialize Process 
c. Buffer Chaining Process 
III. DATATRANSFER/HANDSHAKE MODES 


a. Single Transfer Mode 
• 
b. Demand Transfer Mode 
c. Block Transfer Mode 
d. Cascade Mode 
IV. PRIORITYARBITRATION 
a. Fixed 
b. Rotating 
c. Programmable Fixed 
V. BUS OPERATION 
a. Fly-By (Single-Cycle)/Two-Cycle 
b. Data Path Width 
c. Read, Write, or Verify Cycles 


tion or mode category. The following sections ex- 
plain each mode or function and its relation to other 
features. 


All DMA transfers involve three devices: the DMA 
Controller, the Requester, and the Target. Since the 
devices to be accessed by the DMA Controller vary 
widely, the operating characteristics of the DMA 
Controller must be tailored to the Requester and 
Target devices. 


The Requester can be defined as either the source 
or the destination of the data to be transferred. This 
is done by specifying a Write or a Read transfer, 
respectively. In a Read transfer, the Target is the 
data source and the Requester is the destination for 
the data. In a Write transfer, the Requester is the 
source and the Target is the destination. 


The Requester and Target addresses can each be 
independently programmed to be incremented, dec- 
remented, or held constant. As an example, the 
82370 is capable of reversing a string of data by 
having the Requester address increment and the 
Target address decrement in a memory-to-memory 
transfer. 


The 82370 DMA Controller allows three programma- 
ble Buffer Transfer Processes. These processes de- 
fine the logical way in which a buffer of data is ac- 
cessed by the DMA. 


The three Buffer Transfer Processes include the Sin- 
gle Buffer Process, the Buffer Auto-Initialize Pro- 
cess, and the Buffer Chaining Process. These pro- 
cesses require special programming considerations. 
See the DMA Programming section for more details 
on setting up the Buffer Transfer Processes. 


The Single Buffer Process allows the DMA channel 
to transfer only one buffer of data. When the buffer 
has 
been 
completely 
transferred 
(Current Byte 
COunt decremented past zero or EOP# input ac- 
tive), the DMA process ends and the channel be- 
comes idle. In order for that channel to be used 
again, it must be reprogrammed. 


The Single Buffer Process is usually used when the 
amount of data to be transferred is known exactly, 
and it is also known that there is not likely to be any 
data to follow before the operating system can re- 
program the channel. 


The Buffer Auto-Initialize Process allows multiple 
groups of data to be transferred to or from a single 
buffer. This process does not require reprogram- 
ming. The Current Registers are automatically repro- 
grammed from the Base Registers when the current 
process is terminated, either by an expired Byte 
Count or by an external EOP# signal. The data 
transferred will always be between the same Target 
and Requester. 


The auto-initialization/process-execution cycle is re- 
peated until the channel is either disabled or re-pro- 
grammed. 


Buffer 
Chaining 
Process 


The Buffer Chaining Process is useful for transfer- 
ring large quantities of data into non-contiguous 
buffer areas. In this process, a single channel is 
used to process data from several buffers, while 
having to program the channel only once. Each new 
buffer is programmed in a pipelined operation that 
provides the new buffer information while the old 
buffer is being processed. The chain is created by 
loading new buffer information while the 82370 DMA 
Controller is processing the Current Buffer. When 
the Current Buffer expires, the 82370 DMA Control- 
ler automatically restarts the channel using the new 
buffer information. 


Loading the new buffer information is done by an 
interrupt routine which is requested by the 82370. 
Interrupt Request 1 (IRQ1) is tied internally to the 
82370 DMA Controller for this purpose. IRQ1 is gen- 
erated by the 82370 when the new buffer informa- 
tion is loaded into the channel's Current Registers, 
leaving the Base Registers 'empty'. The interrupt 
service routine loads new buffer information into the 
Base Registers. The host processor is required to 
load the information for another buffer before the 
current Byte Count expires. The process repeats un- 
til the host programs the channel back to single buff- 
er operation, or until the channel runs out of buffers. 


The channel runs out of buffers when the Current 
Buffer expires and the Base Registers have not yet 
been loaded with new buffer information. When this 
occurs, the channel must be reprogrammed. 


If an external EOP# is encountered while executing 
a Buffer Chaining Process, the current buffer is con- 
sidered expired and the new buffer information is 
loaded into the Current Registers. If the Base Regis- 
ters are 'empty', the chain is terminated. 


The channel uses the Base Target Address Register 
as an indicator of whether or not the Base Registers 
are full. When the most significant byte of the Base 
Target Register is loaded, the channel considers all 
of the Base Registers loaded, and removes the in- 
terrupt request. This requires that the other Base 
Registers (Base Requester Address, Base Byte 
Count) must be loaded before the Base Target Ad- 
dress Register. The reason for implementing the re- 
loading process this way is that, for most applica- 
tions, the Byte Count and the Requester will not 
change from one buffer to the next, and therefore do 
not need to be reprogrammed. The details of pro- 
gramming the channel for the Buffer Chaining Pro- 
cess can be found in the section on DMA program- 
ming. 


Three Data Transfer modes are available in the 
82370 DMA Controller. They are the Single Transfer, 
Block 
Transfer, 
and 
Demand Transfer 
Modes. 
These transfer modes can be used in conjunction 
with anyone of three Buffer Transfer modes: Single 
Buffer, Auto-Initialized Buffer and Buffer Chaining. 
Any Data Transfer Mode can be used under any of 
the Buffer Transfer Modes. These modes are inde- 
pendently available for all DMA channels. 


Different devices being serviced by the DMA Con- 
troller require different handshaking sequences for 
data transfers to take place. Three handshaking 
modes are available on the 82370, giving the de- 
signer the opportunity to use the DMA Controller as 
efficiently as possible. The speed at which data can 


be presented or read by a device can affect the way 
a DMA Controller uses the host's bus, thereby af- 
fecting not only data throughput during the DMA pro- 
cess, but also affecting the host's performance by 
limiting its access to the bus. 


HOLD-HLDA-DACK handshake cycle. Figure 3-5 
shows the timing of the Single Transfer Mode cycle. 


In the Single Transfer Mode, one data transfer to or 
from the Requester is performed by the DMA Con- 
troller at a time. The DREQn input is arbitrated and 
the HOLD/HLDA sequence is executed for each 
transfer. Transfers continue in this manner until the 
Byte Count expires, or until EOP# is sampled active. 
If the DREQn input is held active continuously, the 
entire DREQ-HOLD-HLDA-DACK sequence is re- 
peated over and over until the programmed number 
of bytes has been transferred. Bus control is re- 
leased to the host between each transfer. Figure 3-4 
shows the logical flow of events which make up a 
buffer transfer using the Single Transfer Mode. Re- 
fer to section 3.4 for an explanation of the bus con- 
trol arbitration procedure. 


The Single Transfer Mode is used for devices which 
require complete handshake cycles with each data 
access. Data is transferred to or from the Requester 
only when the Requester is ready to perform the 
transfer. Each transfer requires the entire DREQ- 


Figure 3·4. Buffer Transfer 
In Single Transfer Mode 
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NOTE: 
The 
Single 
Transfer 
Mode 
is more 
efficient 
(15%-20%) 
in the case 
where 
the 
source 
is the Target. 
Because 
of the 
internal 
pipeline 
of the 82370 
DMA Controller, 
two idle states 
are added 
at the end of a transfer 
in the case where 
the 
source 
is the Requester. 


In the Block Transfer 
Mode, the DMA process 
is ini· 
tiated by a DMA request 
and continues 
unti the Byte 
Count expires, 
or until EOP II is activated 
by the Re· 
quester. 
The DREQn signal need only be held active 
until the first Requester 
access. 
Only a refresh cycle 
will interrupt 
the block transfer 
process. 


Figure 3-6 illustrates 
the operation 
of the DMA dur- 
ing the Block 
Transfer 
Mode. 
Figure 3-7 shows 
the 
timing 
of the handshake 
signals 
during 
Block 
Mode 
Transfers. 
FIgure 3-6. Buffer Transfer 
In Block Transfer Mode 
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The Demand Transfer Mode provides the most flex- 
ible handshaking procedures during the DMA pro- 
cess. A Demand Transfer is initiated by a DMA re- 
quest. The process continues until the Byte -Count 
expires, or an external EOP# is encountered. If the 
device being serviced (Requester) desires, it can in- 
terrupt 
the 
DMA 
process 
by 
de-activating 
the 
DREQn line. Action is taken on the condition of 
DREQn during Requester accesses only. The ac- 
cess during which DREQn is sampled inactive is the 
last Requester access which will be performed dur- 
ing the current transfer. Figure 3-8 shows the flow of 
events during the transfer of a buffer in the Demand 
Mode. 


When the DREQn line goes inactive, the DMA Con- 
troller will complete the current transfer, including 
any necessary accesses to the Target, and relin- 
quish control of the bus to the host. The current pro- 
cess information is saved (byte count, Requester 
and Target addresses, and Temporary Register). 


The Requester can restart the transfer process by 
reasserting DREQn. The 82370 will arbitrate the re- 
quest with other pending requests and begin the 
process where it left off. Figure 3-9 shows the timing 
of handshake signals during Demand Transfer Mode 
operation. 
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Figure 3·8. Buffer Transfer 
In Demand 
Transfer 
Mode • 


Using the Demand Transfer Mode allows peripherals 
to access memory in small, irregular bursts without 
wasting bus control time. The 82370 is designed to 
give the best possible bus control latency in the De- 
mand Transfer Mode. Bus control latency is defined 
here as the time form the last active bus cycle of the 
previous bus master to the first active bus cycle of 
the new bus master. The 82370 DMA Controller will 
perform its first bus access cycle two bus states af- 
ter HLDA goes active. In the typical configuration, 
bus control is returned to the host one bus state 
after the DREQn goes inactive. 


There are two cases where there may be more than 
one bus state of bus control latency at the end of a 
transfer. The first is at the end of an Auto-Initialize 
process, and the second is at the end of a process 
where the source is the Requester and Two-Cycle 
transfers are used. 


When a Buffer Auto-Initialize Porcess is complete, 
the 82370 requires seven bus states to reload the 
Current Registers from the Base Registers of the 
Auto-Initialized channel. The reloading is done while 
the 82370 is still the bus master so that it is prepared 
to service the channel immediately after relinquish- 
ing the bus, if necessary. 
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In the case where the Requester is the source, and 
Two-Cycle transfers are being used, there are two 
extra idle states at the end of the transfer process. 
This occurs due to the housekeeping in the DMA's 
internal pipeline. These two idle states are present 
only after the very last Requester access, before the 
DMA Controller de-activates the HOLD signal. 


DMA channel priority can be programmed into one 
of two arbitration methods: Fixed or Rotating. The 
four lower DMA channels and the four upper DMA 
channels operate as if they were two separate DMA 
controllers operating in cascade. The lower group of 
four channels (0-3) is always prioritized between 
channels 7 and 4 of the upper group of channels (4- 
7). Figure 3-10 shows a pictorial representation of 
the priority grouping. 


The priority can thus be set up as rotating for one 
group of channels and fixed for the other, or any 
other combination. While in Fixed Priority, the pro- 
grammer can also specify which channel has the 
lowest priority. 
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The 82370 DMA Controller defaults to Fixed Priority. 
Channel 0 has the highest priority, then 1, 2, 3, 4, 5, 
6,7. Channel 7 has the lowest priority. Any time the 
DMA Controller arbitrates DMA requests, the re- 
questing channel with the highest priority will be 
serviced next. 


Fixed Priority can be entered into at any time by a 
software command. The priority levels in effect after 
the mode switch are determined by the current set- 
ting of the Programmable Priority. 


Programmable Priority is available for fixing the prior- 
ity of the DMA channels within a group to levels oth- 
er than the default. Through a software command, 
the channel to have the lowest priority in a group 
can be specified. Each of the two groups of four 
channels can have the priority fixed in this way. The 
other channels in the group will follow the natural 
Fixed Priority sequence. This mode affects only the 
priority levels while operating with Fixed Priority. 


For example, if channel 2 is programmed to have the 
lowest priority in its group, channel 3 has the highest 
priority. In descending order, the other channels 
would have the following priority: (3,0,1,2),4,5,6,7 
(channel 2 lowest, channel 3 highest). If the upper 
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group were programmed to have channel 5 as the 
lowest priority channel, the priority would be (again, 
highest to lowest): 6,7, (3,0,1,2), 4,5. Figure 3-11 
shows this example pictorially. The lower group is 
always prioritized as a fifth channel of the upper 
group (between channels 4 and 7). 


The DMA Controller will only accept Programmable 
Priority commands while the addressed group is op- 
erating in Fixed Priority. SWitchingfrom Fixed to Ro- 
tating Priority preserves the current priority levels. 
Switching from Rotating to Fixed Priority returns the 
priority levels to those which were last programmed 
by use of Programmable Priority. 


Rotating Priority allows the devices using DMA to 
share the system bus more evenly. An individual 
channel does not retain highest priority after being 
serviced, priority is passed to the next highest priori- 
ty channel in the group. The channel which was 
most recently serviced inherits the lowest priority. 
This rotation occurs each time a channel is serviced. 
Figure 3-12 shows the sequence of events as priori- 
ty is passed between channels. Note that the lower 
group rotates within the upper group, and that serv- 
icing a channel within the lower group causes rota- 
tion within the group as well as rotation of the upper 
group. 
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~ 
~ 
- 
default (highest to low- 
est) 
DREQ2 and DREQ6-process 
channel 2 


~ 
~ 
- 
channel 2 drops to low- 
est priority within group. 
Lower group 
drops 
to 
lowest priority within up- 
per group. (Double Rota- 
tion) 
DREQ6 (still) and DREQ7-process 
channel 6 
o~ 
~ - channel 6 drops to low- 
est priority within group 
DREQ7 (still) and DREQQ-process channel 7 


~ 
~ 
- 
channel 7 drops to low- 
est priority within group 
DREQO(still) and DREQ1-process 
channel 0 


~ 
~ 
- 
channel 0 drops to low- 
est priority within group. 
(Double Rotation) 
DREQ1 (still)-process 
channel 1 


~ 
~ 
- 
channel 1 drops to low- 
est priority within group 


Figure 3-12. Rotating Channel Priority. 
Lower and upper groups are programmed 
for the Rotating Priority Mode. 


Since the DMA Controller operates as two four- 
channel controllers in cascade, the overall priority 
scheme of all eight channels can take on a variety of 
forms. There are four possible combinations of prior- 
ity modes between the two groups of channels: 
Fixed Priority only (default), Fixed Priority upper 
group/Rotating Priority lower group, Rotating Priority 
upper group/Fixed Priority lower group, and Rotating 
Priority only. Figure 3-13 illustrates the operation of 
the two combined priority methods. 


Case 1- 
0-3 Fixed Priority, 4-7 Rotating Priority 
High 
Low 


Default priority 
~ 
~ 


After servicing channel 2 
~ 
~ 


After servicing channel 6 0~ 
~ 


After servicing channel 1 
~ 
~ 


Case 2- 
0-3 Rotating Priority, 4-7 Fixed Priority 
High 
Low 


Default priority 
~ 
~ 


After servicing channel 2 
~ 
~ 


After servicing channel 6 
~ 
~ 


After servicing channel 1 
~ 
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Data may be transferred by the DMA Controller us- 
ing two different bus cycle operations: Fly-By (one- 
cycle) and Two-Cycle. These bus handshake meth- 
ods are selectable independently for each channel 
through a command register. Device data path 
widths are independently programmable for both 
Target and Requester. Also selectable through soft- 
ware is the direction of data transfer. All of these 
parameters affect the operation of the 82370 on a 
bus-cycle by bus-cycle basis. 


3.3.6.1 Fly-By Transfers 


The Fly-By Transfer Mode is the fastest and most 
efficient way to use the 82370 DMA Controller to 
transfer data. In this method of transfer, the data is 
written to the destination device at the same time it 
is read from the source. Only one bus cycle is used 
to accomplish the transfer. 


In the Fly-By Mode, the DMA acknowledge signal is 
used to select the Requester. The DMA Controller 
simultaneously places the address of the Target on 
the address bus. The state of M/IO# 
and W/R# 
during the Fly-By transfer cycle indicate the type of 
Target and whether the Target is being written to or 
read from. The Target's Bus Size is used as an in- 
crementer for the Byte Count. The Requester ad- 
dress registers are ignored during Fly-By transfers. 


Note that memory-to-memory transfers cannot be 
done using the Fly-By Mode. Only one memory of 
I/O address is generated by the DMA Controller at a 
time during Fly-By transfers. Only one of the devices 
being accessed can be selected by an address. 
Also, the Fly-By method of data transfer limits the 
hardware to accesses of devices with the same data 
bus width. The Temporary Registers are not affect- 
ed in the Fly-By Mode. 


Fly-By transfers also require that the data paths of 
the Target and Requester be directly connected. 
This requires that successive Fly-By access be to 
word boundaries, or that the Requester be capable 
of switching its connections to the data bus. 


3.3.6.2 
Two-Cycle 
Transfers 


Two-Cycle transfers can also be performed by the 
82370 DMA Controller. These transfers require at 
least two bus cycles to execute. The data being 
transferred is read into the DMA Controller's Tempo- 
rary Register during the first bus cycle(s). The sec- 
ond bus cycle is used to write the data from the 
Temporary Register to the destination. 


If the addresses of the data being transferred are 
not word aligned, the 82370 will recognize the situa- 
tion and read and write the data in groups of bytes, 
placing them always at the proper destination. This 
process of collecting the desired bytes and putting 
them together is called "byte assembly". The re- 
verse process (reading from aligned locations and 
writing to non-aligned locations) is called "byte dis- 
assembly". 


The assembly/disassembly 
process takes place 
transparent to the software, but can only be done 
while using the Two-Cycle transfer method. The 
82370 will always perform the assembly/disassem- 
bly process as necessary for the current data trans- 
fer. Any data path widths for either the Requester or 
Target can be used in the Two-Cycle Mode. This is 
very convenient for interfacing existing 8- and 16-bit 
peripherals to the 80376's 16-bit bus. 


The 82370 DMA Controller always reads and write 
data within the word boundaries; Le. if a word to be 


read is crossing a word boundary, the DMA Control- 
ler will perform two read operations, each reading 
one byte, to read the 16-bit word into the Temporary 
Register. Also, the 82370 DMA Controller always at- 
tempts to fill the Temporary Register from the 
source before writing any data to the destination. If 
the process is terminated before the Temporary 
Register is filled (TC or EOP#), the 82370 will write 
the partial data to the destination. If a process is 
temporarily suspended (such as when DREQn is de- 
activated during a demand transfer), the contents of 
a partially filled Temporary Register will be stored 
within the 82370 until the process is restarted. 


For example, if the source is specified as an 8-bit 
device and the destination as a 32-bit device, there 
will be four reads as necessary from the 8-bit source 
to fill the Temporary Register. Then the 82370 will 
write the 32-bit contents to the destination in two 
cycles of 16-bit each. This cycle will repeat until the 
process is terminated or suspended. 


With Two-Cycle transfers, the devices that the 
82370 accesses can reside at any address within 
I/O or memory space. The device must be able to 
decode the byte-enables (BLE#, BHE#). Also, if the 
device cannot accept data in byte quantities, the 
programmer must take care not to allow the DMA 
Controller to access the device on any address oth- 
er than the device boundary. 


3.3.6.3 Data Path Width and Data Transfer 
Rate 
Considerations 


The number of bus cycles used to transfer a single 
"word" of data is affected by whether the Two-Cycle 
or the Fly-By (Single-Cycle)transfer method is used. 


The number of bus cycles used to transfer data di- 
rectly affects the data transfer rate. Inefficient use of 
bus cycles will decrease the effective data transfer 
rate that can be obtained. Generally, the data trans- 
fer rate is halved by using Two-Cycle transfers in- 
stead of Fly-By transfers. 


The choice of data path widths of both Target and 
Requester affects the data transfer rate also. During 
each bus cycle, the largest pieces of data possible 
should be transferred. 


The.data path width of the devices to be accessed 
must be programmed into the DMA controller. The 
82370 defaults after reset to 8-bit-to-8-bit data trans- 
fers, but the Target and Requester can have differ- 
ent data path widths, independent of each other and 
independent of the other channels. Since this is a 
software programmable function, more discussion of 
the uses of this feature are found in the section on 
programming. 


3.3.6.4 Read, Write and Verify 
Cycles 


Three different bus cycles types may be used in a 
data transfer. They are the Read, Write and Verify 
cycles. These cycle types dictate the way in which 
the 82370 operates on the data to be transferred. 


A Read Cycle transfers data from the Target to the 
Requester. A Write Cycle transfers data from the 
Requester to the target. In a Fly-By transfer, the ad- 
dress and bus status signals indicate the access 
(read of write) to the Target; the access to the Re- 
quester is assumed to be the opposite. 


The Verify Cycle is used to perform a data read only. 
No write access is indicated or assumed in a Verify 
Cycle. The Verify Cycle is useful for validating block 
fill operations. An external comparator must be pro- 
vided to do any comparisons on the data read. 


3.4 
Bus Arbitration 
and Handshaking 


Figure 3-14 shows the flow of events in the DMA 
request 
arbitration 
process. 
The 
arbitration 
se- 
quence starts when the Requester asserts a DREQn 
(or DMA service is requested by software). Figure 
3-15 shows the timing of the sequence of events 
following a DMA request. This sequence is executed 
for each channel that is activated. The DREQn sig- 
nal can be replaced by a software DMA channel re- 
quest with no change in the sequence. 


After the Requester asserts the service request, the 
82370 will request control of the bus via the HOLD 
signal. The 82370 will always assert the HOLD sig- 
nal one bus state after the service request is assert- 
ed. The 80376 responds by asserting the HLDA sig- 
nal, thus releasing control of the bus to the 82370 
DMA Controller. 


Priority of pending DMA service requests is arbitrat- 
ed during the first state after HLDA is asserted by 
the 80376. The next state will be the beginning of 
the first transfer access of the highest priority pro- 
cess. 


When the 82370 DMA Controller is finished with its 
current bus activity, it returns control of the bus to 
the host processor. This is done by driving the 
HOLD signal inactive. The 82370 does not drive any 
address or data bus signals after HOLD goes low. It 
enters the Slave Mode until another DMA process is 
requested. The processor acknowledges that it has 
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regained control of the bus by forcing the HLDA sig- 
nal inactive. Note that the 82370's DMA Controller 
will not re-request control of the bus until the entire 
HOLD/HLDA handshake sequence is complete. 


The 82370 DMA Controller will terminate a current 
DMA process for one of three reasons: expired byte 
count, end-of-process command (EOP# activated) 
from a peripheral, or deactivated DMA request sig- 
nal. In each case, the controller will de-assert HOLD 
immediately after completing the data transfer in 
progress. These three methods of process termina- 
tion are illustrated in Figures 3-16, 3-19 and 3·18, 
respectively. 


An expired byte count indicates that the current pro- 
cess is complete as programmed and the channel 
has no further transfers to process. The channel 
must be restarted according to the currently pro- 
grammed Buffer Transfer Mode, or reprogrammed 
completely, including a new Buffer Transfer Mode. 
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Channel priority resolution takes place during the bus state before HOLDA is asserted, allowing the DMA Controller to 
respond to HLDA without extra idle bus states. 


If the peripheral activates the EOP# signal, it is indi- 
cating that it will not accept or deliver any more data 
for the current buffer. The 82370 DMA Controller 
considers this as a completion of the channel's cur- 
rent process and interprets the condition the same 
way as if the byte count expired. 


The action taken by the 82370 DMA Controller in 
response to a de-activated DREQn signal depends 
on the Data Transfer Mode of the channel. In the 
Demand Mode, data transfers will take place as long 
as the DREQn is active and the byte count has not 
expired. In the Block Mode, the controller will com- 
plete the entire block transfer without relinquishing 
the bus, even if DREQn goes inactive before the 


transfer is complete. In the Single Mode, the control- 
ler will execute single data transfers, relinquishing 
the bus between each transfer, as long as DREQn is 
active. 


Normal termination of a DMA process due to expira- 
tion of the byte count (Terminal Count- TC) is 
shown if Figure 3-16. The condition of DREQn is 
ignored until after the process is terminated. If the 
channel is programmed to auto-initialize, HOLD will 
be held active for an additional seven clock cycles 
while the auto-initialization takes place. 


Table 3-3 shows the DMA channel activity due to 
EOP# or Byte Count expiring (Terminal Count). 


Single or 
Auto- 
Chaining-Base 
Buffer Process 
Chaining-Base 
Initialize 
Loaded 
Empty 


EVENT 


Terminal Count 
True 
X 
True 
X 
True 
X 
EOP# 
X 
0 
X 
0 
X 
0 


RESULTS 


Current Registers 
Load 
Load 
Load 
Load 
Channel Mask 
Set 
Set 
EOP# Output 
0 
X 
0 
X 
1 
X 
Terminal Count Status 
Set 
Set 
Set 
Set 
Software Request 
CLR 
CLR 
CLR 
CLR 
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The 82370 always relinquishes control of the bus 
between channel services. This allows the hardware 
designer the flexibility to externally arbitrate bus hold 
requests, if desired. If another DMA request is pend- 
ing when a higher priority channel service is com- 
pleted, the 82370 will relinquish the bus until the 
hold acknowledge is inactive. One bus state after 
the HLDA signal goes inactive, the 82370 will assert 
HOLD again. This is illustrated in Figure 3-17. 


3.4.1 SYNCHRONOUS 
AND ASYNCHRONOUS 
SAMPLING 
OF DREQn 
AND EOP# 


As an indicator that a DMA service is to be started, 
DREQn is always sampled asynchronous. It is sam- 


pled at the beginning of a bus state and acted upon 
at the end of the state. Figure 3-15 illustrates the 
start of a DMA process due to a DREQn input. 


The DREQn and EOP# inputs can be programmed 
to be sampled either synchronously or asynchro- 
nously to signal the end of a transfer. 


The synchronous mode affords the Requester one 
bus state of extra time to react to an access. This 
means the Requester can terminate a process on 
the current access, without losing any data. The 
asynchronous mode requires that the input signal be 
presented prior to the beginning of the last state of 
the Requester access. 
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The timing relationships of the DREQn and EOP# 
signals to the termination of a DMA transfer are 
shown in Figures 3-18 and 3-19. Figure 3-18 shows 
the termination of a DMA transfer due to inactive 
DREQn. Figure 3-19 shows the termination of a 
DMA process due to an active EOP# input. 


In the Synchronous Mode, DREQn and EOP# are 
sampled at the end of the last state of every Re- 
quester data transfer cycle. If EOP# is active or 
DREQn is inactive at this time, the 82370 recognizes 
this access to the Requester as the last transfer. At 
this point, the 82370 completes the transfer in prog- 
ress, if necessary, and returns bus control to the 
host. 
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In the asynchronous mode, the inputs are sampled 
at the beginning of every state of a Requester ac- 
cess. The 82370 waits until the end of the state to 
act on the input. 


DREQn and EOP# are sampled at the latest possi- 
ble time when the 82370 can determine if another 
transfer 
is required. In the Synchronous Mode, 


DREQn and EOP# are sampled on the trailing edge 
of the last bus state before another data access cy- 
cle begins. The Asynchronous Mode requires that 
the signals be valid one clock cycle earlier. 
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While in the Pipeline Mode, if the NAI< signal is sam- 
pled active during a transfer, the end of the state 
where NAI< was sampled active is when the 82370 
decides whether to commit to another transfer. The 
device must de-assert DREQn or assert EOPI< be- 
fore NAI< is asserted, otherwise the 82370 will com- 
mit to another, possibly undesired, transfer. 


Synchronous DREQn and EOPI< sampling allows 
the peripheral to prevent the next transfer from oc- 
curring by de-activating DREQn or asserting EOPI< 
during the current Requester access, before the 
82370 DMA Controller commits itself to another 
transfer. The DMA Controller will not perform the 
next transfer if it has not already begun the bus cy- 
cle. Asynchronous sampling allows less stringent 
timing requirements than the Synchronous Mode, 
but requires that the DREQn signal be valid at the 
beginning of the next to last bus state of the current 
Requester access. 


Using the Asynchronous Mode with zero wait states 
can be very difficult. Since the addresses and con- 
trol signals are driven by the 82370 near half-way 
through the first bus state of a transfer, and the 
Asynchronous Mode requires that DREQn be inac- 
tive before the end of the state, the peripheral being 
accessed is required to present DREQn only a few 
nanoseconds after the control information is avail- 
able. This means that the peripheral's control logic 
must be extremely fast (practically non-causal). An 
alternative is the Synchronous Mode. 
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3.4.2 ARBITRATION 
OF CASCADED 
MASTER 
REQUESTS 


The Cascade Mode allows another DMA-type de- 
vice to share the bus by arbitrating its bus accesses 
with the 82370's. Seven of the eight DMA channels 
(0-3 and 5-7) can be connected to a cascaded de- 
vice. The cascaded device requests bus control 
through the DREQn line of the channel which is pro- 
grammed to operate in Cascade Mode. Bus hold ac- 
knowledge is signalled to the cascaded device 
through the EDACK lines. When the EDACK lines 
are active with the code for the requested cascade 
channel, the bus is available to the cascaded master 
device. 


A cascade cycle begins the same way a regular 
DMA cycle begins. The requesting bus master as- 
serts the DREQn line on the 82370. This bus control 
request is arbitrated as any other DMA request 
would be. If any channel receives a DMA request, 
the 82370 requests control of the bus. When the 
host acknowledges that it has released bus control, 
the 82370 acknowledges to the requesting master 
that it may access the bus. The 82370 enters an idle 
state until the new master relinquishes control. 


A cascade cycle will be terminated by one of two 
events: DREQn going inactive, or HLDA going inac- 
tive. The normal way to terminate the cascade cycle 
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is for the cascaded master to drop the DREQn sig- 
nal. Figure 3-21 shows the two cascade cycle termi- 
nation sequences. 


The Refresh Controller may interrupt the cascaded 
master to perform a refresh cycle. If this occurs, the 
82370 DMA Controller will de-assert the EDACK sig- 
nal (hold acknowledge to cascaded master) and wait 
for the cascaded master to remove its hold request. 
When the 82370 regains bus control, it will perform 
the refresh cycle in its normal fashion. After the re- 
fresh cycle has been completed, and if the cascad- 
ed device has re-asserted its request, the 82370 will 
return control to the cascaded master which was in- 
terrupted. 


The 82370 assumes that it is the only device moni- 
toring the HLDA signal. If the system designer 
wishes to place other devices on the bus as bus 
masters, the HLDA from the processor must be in- 
tercepted before presenting it to the 82370. Using 
the Cascade capabililty of the 82370 DMA Controller 
offers a much better solution. 


The arbitration of refresh requests by the DRAM Re- 
fresh Controller is slightly different from normal DMA 


channel request arbitration. The 82370 DRAM Re- 
fresh Controller always has the highest priority of 
any DMA process. It also can interrupt a process in 
progress. Two types of processes in progress may 
be encountered: normal DMA, and bus master cas- 
cade. 


In the event of a refresh request during a normal 
DMA process, the DMA Controller will complete the 
data transfer in progress and then execute the re- 
fresh cycle before continuing with the current DMA 
process. The priority of the interrupted process is 
not lost. If the data transfer cycle interrupted by the • 
Refresh Controller is the last of a DMA process, the 
refresh cycle will always be executed before control 
of the bus is transferred back to the host. 


When the Refresh Controller request occurs during 
a cascade cycle, the Refresh Controller must be as- 
sured that the cascaded master device has relin- 
quished control of the bus before it can execute the 
refresh cycle. To do this, the DMA Controller drops 
the EDACK signal to the cascaded master and waits 
for the corresponding DREQn input to go inactive. 
By dropping the DREQn signal, the cascaded mas- 
ter relinquishes the bus. The Refresh Controller then 
performs the refresh cycle. Control of the bus is re- 
turned to the cascaded master if DREQn returns to 
an active state before the end of the refresh cycle, 
otherwise control is passed to the processor and the 
cascaded master loses its priority. 


3.5 
DMA Controller 
Register Overview 


The 82370 DMA Controller contains 44 registers 
which are accessable to the host processor. Twen- 
ty-four of these registers contain the device ad- 
dresses and data counts for the individual DMA 
channels (three per channel). The remaining regis- 
ters are control and status registers for initiating and 
monitoring the operation of the 82370 DMA Control- 
ler. Table 3-4 lists the DMA Controller's registers 
and their accessability. 


Table 3-4. DMA Controller Registers 


Register Name 
Ace••• 


Control/Status Reglsters-on. 
each per group 
Command Register I 
write only 
Command Register II 
write only 
Mode Register I 
write only 
Mode Register II 
write only 
Software Request Register 
read/write 
Mask Set-Reset Register 
write only 
Mask Read-Write Register 
read/write 
Status Register 
read only 
Bus Size Register 
write only 
Chaining Register 
read/write 
Channel Reglsters-one 
each per channel 
Base Target Address 
write only 
Current Target Address 
read only 
Base Requester Address 
write only 
Current Requester Address 
read only 
Base Byte Count 
write only 
Current Byte Count 
read only 


The following registers are available to the host 
processor for programming the 82370 DMA Control- 
ler into its various modes and for checking the oper- 
ating status of the DMA processes. Each set of four 
DMA channels has one of each of these registers 
associated with it. 


Enables or disables the DMA channel as a group. 
Sets the Priority Mode (Fixed or Rotating) of the 
group. This write-only register is cleared by a hard- 
ware reset, defaulting to all channels enabled and 
Fixed Priority Mode. 


Command Register II 


Sets the sampling mode of the DREQn and EOP# 
inputs. Also sets the lowest priority channel for the 
group in the Fixed Priority Mode. The functions pro- 
grammed through Command Register II default after 
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a hardware reset to: asynchronous DREQn and 
EOP#, and channels 3 and 7 lowest priority. 


Mode Registers I 


Mode Register I is identical in function to the Mode 
register of the 8237A. It programs the following func- 
tions for an individually selected channel: 
Type of Transfer-read, 
write, verify 
Auto-Initialize-enable 
or disable 
Target Address Count-increment 
or decrement 
Data Transfer Mode-demand, 
single, block, 
cascade 


Mode Register I functions default to the following 
after reset: verify transfer, Auto-Initialize disabled, In- 
crement Target address, Demand Mode. 


Programs the following functions for an individually 
selected channel: 
Target Address Hold-enable 
or disable 
Requester Address Count-increment 
or 
decrement 
Requester Address Hold-enable 
or disable 
Target Device Type-I/O 
or Memory 
Requester Device Type-I/O 
or Memory 
Transfer Cycles- Two-Cycle or Fly-By 


Mode Register II functions are defined as follows 
after a hardware reset: Disable Target Address Hold, 
Increment Requester Address, Target (and Re- 
quester) in memory, Fly-By Transfer Cycles. Note: 
Requester Device Type ignored in Fly-By Transfers. 


Software Request Register 


The DMA Controller can respond to service requests 
which are initiated by software. Each channel has an 
internal request status bit associated with it. The 
host processor can write to this register to set or 
reset the request bit of a selected channel. 


The status of a group's software DMA service re- 
quests can be read from this register as well. Each 
status bit is cleared upon Terminal Count or external 
EOP#. 


The software DMA requests are non-maskable and 
subject to priority arbitration with all other software 
and 
hardware 
requests. 
The 
entire 
register 
is 
cleared by a hardware reset. 


Mask Registers 


Each .channel has associated with it a mask bit 
which can be set/reset to disable/enable that chan- 
nel. Two methods are available for setting and clear- 
ing the mask bits. The Mask Set/Reset Register is a 


write-only register which allows the host to select an 
individual channel and either set or reset the mask 
bit for that channel only. The Mask Read/Write Reg- 
ister is available for reading the mask bit status and 
for writing mask bits in groups of four. 


The mask bits of a group may be cleared in one step 
by executing the Clear Mask Command. See the 
DMA Programming section for details. A hardware 
reset sets all of the channel mask bits, disabling all 
channels. 


The Status register is a read-only register which con- 
tains the Terminal Count (TC) and Service Request 
status for a group. Four bits indicate the TC status 
and four bits indicate the hardware request status 
for the four channels in the group. The TC bits are 
set when the Byte Count expires, or when and exter- 
nal EOP# is asserted. These bits are cleared by 
reading from the Status Register. The Service Re- 
quest bit for a channel indicates when there is a 
hardware DMA request (DREQn) asserted for that 
channel. When the request has been removed, the 
bit is cleared. 


This write-only register is used to define the bus size 
of the Target and Requester of a selected channel. 
The bus sizes programmed will be used to dictate 
the sizes of the data paths accessed when the DMA 
channel is active. The values programmed into this 
register affect the operation of the Temporary Regis- 
ter. When 32-bit bus width is programmed, the 
82370 DMA Controller will access the device twice 
through its 16-bit external Data Bus to perform a 
32-bit data transfer. Any byte-assembly required to 
make the transfers using the specified data path 
widths will be done in the Temporary Register. The 
Bus Size register of the Target is used as an incre- 
ment/decrement 
value for the Byte Counter and 
Target Address when in the Fly-By Mode. Upon re- 
set, all channels default to 8-bit Targets and 8-bit 
Requesters. 


As a command or write register, the Chaining regis- 
ter is used to enable or disable the Chaining Mode 
for a selected channel. Chaining can either be dis- 
abled or enabled for an individual channel, indepen- 
dently of the Chaining Mode status of other chan- 
nels. After a hardware reset, all channels default to 
Chaining disabled. 


When read by the host, the Chaining Register pro- 
vides the status of the Chaining Interrupt of each of, 
the channels. These interrupt status bits are cleared 
when the new buffer information has been loaded. 


Each channel has three individually programmable 
registers necessary for the DMA process; they are 
the Base Byte Count, Base Target Address, and 
Base Requester Address registers. The 24-bit Base 
Byte Count register contains the number of bytes to 
be transferred by the channel. The 24-bit Base Tar- 
get Address Register contains the beginning ad- 
dress (memory or I/O) of the Target device. The 
24-bit Base Requester Address register contains the 
base address (memory or I/O) of the device which is 
to request DMA service. 


Three more registers for each DMA channel exist 
within the DMA Controller which are directly related 
to the registers mentioned above. These registers 
contain the current status of the DMA process. They 
are the Current Byte Count register, the Current Tar- 
get Address, and the Current Requester Address. It 
is these registers which are manipulated (increment- 
ed, decremented, or held constant) by the 82370 
DMA Controller during the DMA process. The Cur- 
rent registers are loaded from the Base registers at 
the beginning of a DMA process. 


The Base registers are loaded when the host proc- 
essor writes to the respective channel register ad- 
dresses. Depending on the mode in which the chan- 
nel is operating, the Current registers are typically 
loaded in the same operation. Reading from the 
channel register addresses yields the contents of 
the corresponding Current register. 


To maintain compatibility with software which ac- 
cesses an 8237A, a Byte Pointer Flip-Flop is used to 
control access to the upper and lower bytes of some 
words of the Channel Registers. These words are 
accessed as byte pairs at single port addresses. The 
Byte Pointer Flip-Flop acts as a one-bit pointer 
which is toggled each time a qualifying Channel 
Register byte is accessed. 


It always points to the next logical byte to be ac- 
cessed of a pair of bytes. 


The Channel registers are arranged as pairs of 
words, each pair with its own port address. Address- 
ing the port with the Byte Pointer Flip-Flop reset ac- 
cesses the least significant byte of the pair. The 
most significant byte is accessed when the Byte 
Pointer is set. 


For compatibility with existing 8237A designs, there 
is one exception to the above statements about the 
Byte Pointer Flip-Flop. The third byte (bits 16-23) of 
the Target Address is accessed through its own port 
address. The Byte Pointer Flip-Flop is not affected 
by any accesses to this byte. 


•• 


The upper eight bits of the Byte Count Register are 
cleared when the least significant byte of the regis- 
ter is loaded. This provides compatibility with soft- 
ware which accesses an 8237A. The 8237A has 
16-bit Byte Count Registers. 


NOTE: 
The 82370 is a subset of the Intel 82380 32-bit 
DMA Controller with Integrated System Peripherals. 


Although the 82370 has 24 address bits externally, 
the programming model is actually a full 32 bits wide. 
For this reason, there are some "hidden" DMA reg- 
isters in the 82370 register set. These hidden regis- 
ters correspond to what would be A24-A31 
in a 
32-bit system. 


Think of the 82370 addresses as though they were 
32 bits wide, with only the lower 24 bits available 
externally. 


1. Understanding the Byte Pointer Flip Flop 
2. Removing the IRQ1 Chaining Interrupt 


The byte pointer flip flop will behave as though the 
hidden upper address bits were accessible. 


The IRQ1 Chaining Interrupt will be removed only 
when the 
hidden 
upper address bits are 
pro- 
grammed. You will note that since the hidden upper 
address bits are not available externally, the value 
you program into the registers is not important. The 
act of programming the hidden register is critical in 
removing the IRQ1 Chaining interrupt for a DMA 
channel. 


The port assignments for these hidden upper ad- 
dress bits come directly from the port assignments 
of the Intel 82380. For your convenience, those port 
definitions have been included in this data sheet in 
section 3.7. 


Each channel has a 32-bit Temporary Register used 
for temporary data storage during two-cycle DMA 
transfers. It is this register in which any necessary 
byte assembly and disassembly of non-aligned data 
is performed. Figure 3-22 shows how a block of data 
will be moved between memory locations with differ- 
ent boundaries. Note that the order of the data does 
not change. 


If the destination is the Requester and an early pro- 
cess termination has been indicated by the EOPIf 
signal or DREQn inactive in the Demand Mode, the 
Temporary Register is not affected. If data remains 
in the Temporary Register due to differences in data 
path widths of the Target and Requester, it will not 
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Target = source 
= 00000020H 
Requester 
= destination 
= 00000053H 
Byte Count = 000007H 


Figure 3-22. Transfer 
of data between 
memory 
locations 
with different 
boundaries. 
This will be 
the result, Independent 
of data path width. 


be transferred or otherwise lost, but will be stored for 
later transfer. 


If the destination is the Target and the EOPIF signal 
is sensed active during the Requester access of a 
transfer, the DMA Controller will complete the trans- 
fer by sending to the Target whatever information is 
in the Temporary Register at the time of process 
termination. This implies that the Target could be 
accessed with partial data in two accesses. For this 
reason it is advisable to have an I/O device desig- 
nated as a Requester, unless it is capable of han- 
dling partial data transfers. 


3.6 
DMA Controller 
Programming 


Programming a DMA Channel to perform a needed 
DMA function is in general a four step process. First 
the global attributes of the DMA Controller are pro- 
grammed via the two Command Registers. These 
global attributes include: priority levels, channel 
group enables, priority mode, and DREQn/EOPIF in- 
put sampling. 


The second step involves setting the operating 
modes of the particular channel. The Mode Regis- 
ters are used to define the type of transfer and the 
handshaking modes. The Bus Size Register and 
Chaining Register may also need to be programmed 
in this step. 


The third step in setting up the channel is to load the 
Base Registers in accordance with the needs of the 
operating modes chosen in step two. The Current 
Registers are automatically loaded from the Base 
Registers, if required by the Buffer Transfer Mode in 
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effect. The information loaded and the order in 
which it is loaded depends on the operating mode. A 
channel used for cascading, for example, needs no 
buffer information and this step can be skipped en- 
tirely. 


The last step is to enable the newly programmed 
channel using one of the Mask Registers. The chan- 
nel is then available to perform the desired data 
transfer. The status of the channel can be observed 
at any time through the Status Register, Mask Reg- 
ister, Chaining Register, and Software Request reg- 
ister. 


Once the channel is programmed and enabled, the 
DMA process may be initiated in one of two ways, 
either by a hardware DMA request (DREQn) or a 
software request (Software Request Register). 


Once programmed to a particular Process/Mode 
configuration, the channel will operate in that config- 
uration until programmed otherwise. For this reason, 
restarting a channel after the current buffer expires 
does not require complete reprogramming of the 
channel. 
Only 
those 
parameters 
which 
have 
changed need to be reprogrammed. The Byte Count 
Register is always changed and must be repro- 
grammed. A Target or Requester Address Register 
which is incremented or decremented should be re- 
programmed also. 


The Buffer Process is determined by the Auto-Initial- 
ize bit of Mode Register I and the Chaining Register. 
If Auto-Initialize is enabled, Chaining should not be 
used. 


3.6.1.1 Single Buffer Process 


The Single Buffer Process is programmed by dis- 
abling Chaining via the Chaining Register and pro- 
gramming Mode Register I for non-Auto-Initialize. 


3.6.1.2 Buffer Auto-Initialize 
Process 


Setting the Auto-Initialize bit in Mode Register I is all 
that is necessary to place the channel in this mode. 
Buffer Auto-Initialize must not be enabled simulta- 
neous to enabling the Buffer Chaining Mode as this 
will have unpredictable results. 


Once the Base Registers are loaded, the channel is 
ready to be enabled. The channel will reload its Cur- 
rent Registers from the Base Registers each time 
the Current Buffer expires, either by an expired Byte 
Count or an external EOP"'. 


(IRQl 
WILL NEED SERVICE- 
LOAD BASE REGISTERS) 


F'ROIolTHIS POINT, THE HOST CAN PERF'ORIol 
ANOTHER TASK. THE INTERRUPT SERVICE ROUTINE 
LEfT 
BEHIND WILL IolAINTAIN THE CHANNEL. 


• 


3.6.1.3 Buffer 
Chaining 
Process 


The Buffer Chaining Process is entered into from the 
Single Buffer Process. The Mode Registers should 
be programmed first, with all of the Transfer Modes 
defined as if the channel were to operate in the Sin- 
gle Buffer Process. The channel's Base Registers 
are then loaded. When the channel has been set up 
in this way, and the chaining interrupt service routine 
is in place, the Chaining Process can be entered by 
programming the Chaining Register. Figure 3-23 il- 
lustrates the Buffer Chaining Process. 


An interrupt (IRQ1) will be generated immediately af- 
ter the Chaining Process is entered, as the channel 
then perceives the Base Registers as empty and in 
need of reloading. It is important to have the inter- 
rupt service routine in place at the time the Chaining 
Process is entered into. The interrupt request is re- 
moved when the most significant byte of the Base 
Target Address is loaded. 


The interrupt will occur again when the first buffer 
expires and the Current Registers are loaded from 
the Base Registers. The cycle continues until' the 
Chaining Process is disabled, or the host fails to re- 
spond to IRQ1 before the Current Buffer expires. 


Exiting the Chaining Process can be done by reset- 
ting the Chaining Mode Register. If an interrupt is 
pending for the channel when the Chaining Register 
is reset, the interrupt request will be removed. The 
Chaining Process can be temporarily disabled by 
setting the channel's Mask bit in the Mask Register. 


The interrupt service routine for IRQ1 has the re- 
sponsibility of reloading the Base Registers as nec- 
essary. It should check the status of the channel to 
determine the cause of channel expiration, etc. It 
should also have access to operating system infor- 
mation regarding the channel, if any exists. The 
IRQ1 service routine should be capable of determin- 
ing whether the chain should be continued or termi· 
nated and act on that information. 


The Data Transfer Modes are selected via Mode 
Register I. The Demand, Single, and Block Modes 
are selected by bits 06 and 07. The individual trans- 
fer type (Fly-By vs Two-Cycle, Read-Write-Verify, 
and I/O vs Memory) is programmed through b9th of 
the Mode registers. 


The Cascade Mode is set by writing ones to 07 and 
06 of Mode Register I. When a channel is pro- 
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grammed to operate in the Cascade Mode, all of the 
other modes associated with Mode Registers I and II 
are ignored. The priority and OREQn/EOP# defini- 
tions of the Command Registers will have the same 
effect on the channel's operation as any other 
mode. 


There are five port addresses which, when written 
to, command certain operations to be performed by 
the 82370 OMA Controller. The data written to these 
locations is not of consequence, writing to the loca- 
tion is all that is necessary to command the 82370 to 
perform the indicated function. Following are de- 
scriptions of the command functions. 


Clear Byte Pointer 
Flip-Flop-Location 
OOOCH 


Resets the Byte Pointer Flip-Flop. This command 
should be performed at the beginning of any access 
to the channel registers in order to be assured of 
beginning at a predictable place in the register pro- 
gramming sequence. 


All OMA functions are set to their default states. This 
command is the equivalent of a hardware reset to 
the OMA Controller. Functions other than those in 
the OMA Controller section of the 82370 are not af- 
fected by this command. 
Clear Mask Register-Channels 
0-3 
- 
Location OOOEH 
Channels 4-7 
- 
Location OOCEH 


This command simultaneously clears the Mask Bits 
of all channels in the addressed group, enabling all 
of the channels in the group. 


This command resets the Terminal Count Interrupt 
Request Flip-Flop. It is provided to allow the pro- 
gram which made a software OMA request to ac- 
knowledge that it has responded to the expiration of 
the requested channel(s). 


The following diagrams outline the bit definitions and 
functions of the 82370 OMA Controller's Status and 
Control Registers. The function and programming of 
the registers is covered in the previous section on 
OMA Controller Programming. An entry of "X" as a 
bit value indicates "don't care." 


Channel 
Register 
Name 
Address 
Byte 
Bits 


(hex) 
Pointer 
Accessed 


Channel 0 
Target Address 
00 
0 
0-7 
1 
8-15 


87 
x 
16-23 


10 
0 
24-31(°) 


Byte Count 
01 
0 
0-7 


1 
8-15 


11 
0 
16-23 


Requester Address 
90 
0 
0-7 
1 
8-15 


91 
0 
16-23 


1 
24-31 (0) 


Channel 1 
Target Address 
02 
0 
0-7 
1 
8-15 


83 
x 
16-23 


12 
0 
24-31(°) 


Byte Count 
03 
0 
0-7 


1 
8-15 


13 
0 
16-23 


Requester Address 
92 
0 
0-7 
1 
8-15 


93 
0 
16-23 
1 
24-31(°) 


Channel 2 
Target Address 
04 
0 
0-7 
1 
8-15 


81 
x 
16-23 


14 
0 
24-31(°) 


Byte Count 
05 
0 
0-7 
1 
8-15 


15 
0 
16-23 


Requester Address 
94 
0 
0-7 
1 
8-15 


95 
0 
16-23 
1 
24-31(°) 


Channel 3 
Target Address 
06 
0 
0-7 
1 
8-15 


82 
x 
16-23 


16 
0 
24-31(°) 


Byte Count 
07 
0 
0-7 


1 
8-15 
17 
0 
16-23 


Requester Address 
96 
0 
0-7 
1 
8-15 


97 
0 
16-23 


1 
24-31(°) 
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Channel 
Register 
Name 
Address 
Byte 
Bits 
(hex) 
Pointer 
Accessed 


Channel 4 
Target Address 
CO 
0 
0-7 
1 
8-15 
8F 
x 
16-23 
00 
0 
24-31 (*) 
Byte Count 
C1 
0 
0-7 
1 
8-15 
01 
0 
16-23 
Requester Address 
98 
0 
0-7 
1 
8-15 
99 
0 
16-23 
1 
24-31(*) 


Channel 5 
Target Address 
C2 
0 
0-7 
1 
8-15 
8B 
x 
16-23 
02 
0 
24-31(*) 


Byte Count 
C3 
0 
0-7 
1 
8-15 
03 
0 
16-23 
Requester Address 
9A 
0 
0-7 
1 
8-15 
9B 
0 
16-23 
1 
24-31(*) 


Channel 6 
Target Address 
C4 
0 
0-7 
1 
8-15 
89 
x 
16-23 
04 
0 
24-31(*) 
Byte Count 
C5 
0 
0-7 


1 
8-15 
05 
0 
16-23 
Requester Address 
9C 
0 
0-7 


1 
8-15 
90 
0 
16-23 
1 
24-31(*) 
- 


Channel 7 
Target Address 
C6 
0 
0-7 


1 
8-15 
8A 
x 
16-23 
06 
0 
24-31(*) 
Byte Count 
C7 
0 
0-7 


1 
8-15 
07 
0 
16-23 
Requester Address 
9E 
0 
0-7 


1 
8-15 
9F 
0 
16-23 
1 
24-31(*) 


NOTE: 
(O)Thesebits are not available externally. You need to be aware of their existence for chaining and Byte Pointer Flip-Flop 
operations. Please see section 3.5.2 for further details. 


Command 
Register 
I (write only) 


PortAddresses- ChannelsO-~008H 
Channels4-7-QOC8H 


07 
D6 
os 
04 
03 
02 
01 
DO 
"I'I'ILI'I>! 


Command 
Register 
II (write 
only) 


PortAddresses- ChannelsO-~01 
AH 
Channels4-7-QODAH 


PortAddresses- ChannelsO-~OOBH 
Channels4-7-QOCBH 


GROUP WASK 
o = ENABLE CHANNELS 
1 = DiSABLE CHANNELS 


PRIORITY 
o = FIXED PRIORITY 
1 = ROTATING PRIORITY 


DREQN SAWPLING 


EOP, 
S••••••PLlNG 
o = ASYNCHRONOUS 
1 = SYNCHRONOUS 


LOW PRIORITY LEVEL SET 
00 = CHANNEL 0(4) 
LOWEST 
01 = 
I(S) 
10 = 
2(6) 
11 = 
3(7) 


CHANNEL SELECT 
00 = CHANNEL 0(4) 
01 = 
I(S) 
10 = 
2(6) 
11 = 
3(7) 


TRANSFER TYPE 
00 = VERIFY 
01 = WRITE 
10 = READ 
11 = ILLEGAL 
XX IF IN CASCADE WODE 


AUTD-INITIALIZE 
o = DISABLE. 
1 = ENABLE 


TARGET INCREWENT/DECREWENT 
o = INCREWENT TARGET 
1 = DECREWENT TARGET • 
X IF TARGET HOLD ENABLED 


DATA TRANSFER WODE 
00 = DEWAND WODE 
01 = SINGLE TRANSFER WODE 
10 = BLOCK WODE 
11 = CASCADE WODE 


Mode Register II (write only) 


Port Addresses- 
Channels 0-3-{)01 
BH 
Channels 4-7-{)ODBH 


lal~lrol~I~I~I~I~1 
I 
I 


TARGET HOLD 
o = INCREMENT/DECREMENT 
1 = HOLD 


REQUESTER 
INCREMENT 
o = INCREMENT 
1 = DECREMENT • 
X IF REQUESTER 
HOLD ENABLED 


REQUESTER 
HOLD 
o = INCREMENT/DECREMENT 
1 = HOLD 


TARGET DEVICE TYPE 


REQUESTER 
DEVICE TYPE 
0= 
MEMORY 
1 = INPUT/OUTPUT 


TRANSFER 
CYCLES 
o = ONE-CYCLE 
(FLY-BY) 
1 = lWO-CYCLE 


Port Addresses- 
Channels 0-3-{)009H 
Channels 4-7-{)OC9H 


REQUEST SERVICE 
o = REMOVE REQUEST 
1 = ASSERT 
REQUEST 
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Port Addresses- 
Channels 0-3-000AH 
Channels 4-7-QOCAH 


Port Addresses- 
Channels 0-3-QOOFH 
Channels 4-7-QOCFH 


CHANNEL 
0(4) 
REQUEST 


CHANNEL 
1(5) 
REQUEST 


CHANNEL 
2(6) 
REQUEST 


CHANNEL 
3(7) 
REQUEST 


MASK 
SET BIT 
o = CLEAR 
MASK 
1 = SET MASK 


CHANNEL 
0(4) 
MASK 
BIT 


CHANNEL 
1(5) 
MASK 
BIT 


CHANNEL 
2(6) 
MASK 
BIT 


CHANNEL 
3(7) 
MASK 
BIT 
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Port Addresses- 
Channels 0-3-0008H 
Channels 4-7-QOC8H 


CHANNEL 0(4) 
EXPIRED 


CHANNEL 
1(5) 
EXPIRED 


CHANNEL 2(6) 
EXPIRED 


CHANNEL 3(7) 
EXPIRED 
1 = EXPIRED 


CHANNEL 0(4) 
REQUEST 


CHANNEL 
1(5) 
REQUEST 


CHANNEL 2(6) 
REQUEST 


CHANNEL 3(7) 
REQUEST 
1 = REQUEST PENDING 


Port Addresses- 
Channels 0-3-0018H 
Channels 4-7-QOD8H 


TARGET BUS SIZE 


REQUESTER BUS SIZE 


Bus Size Encoding: 


00 = Reserved 
by Intel 10 = 16-bit Bus 
01 = 32-bit 
Bus· 
11 = 8-bit Bus 


·If programmed 
as 32-bit 
bus width. the corresponding 
device 
will be accessed 
in two 16-bit cycles 
provided 
that the data is 


aligned 
within 
word boundary. 


Port Addresses- 
Channels 0-3-Q019H 
Channels 4-7-QOD9H 


CHAINING ENABLE BIT 
o = DISABLE CHAINING MODE 
1 = ENABLE CHAINING MODE 
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3.8 8237 A Compatibility 


The register arrangement of the 82370 DMA Con- 
troller is a superset of the 8237A DMA Controller. 
Functionally the 82370 DMA Controller is very differ- 
ent from the 8237A. Most of the functions of the 
8237A are performed also by the 82370. The follow- 
ing discussion points out the differences between 
the 8237A and the 82370. 


The 8237A is limited to transfers between I/O and 
memory only (except in one special case, where two 
channels can be used to perform memory-to-memo- 
ry transfers). The 82370 DMA Controller can transfer 
between any combination of memory and I/O. Sev- 
eral other features of the 8237A are enhanced or 
expanded in the 82370 and other features are add- 
ed. 


The 8237A is an 8-bit only DMA device. For pro- 
gramming compatibility, all of the 8-bit registers are 
preserved in the 82370. The 82370 is programmed 
via 8-bit registers. The address registers in the 
82370 are 24-bit registers in order to support the 
80376's 24-bit bus. The Byte Count Registers are 
24-bit registers, allowing support of larger data 
blocks than possible with the 8237A. 


All of the 8237A's operating modes are supported 
by the 82370 (except the cumbersome two-channel 
memory-to-memory transfer). The 82370 performs 
memory-to-memory transfers using only one chan- 
nel. The 82370 has the added features of buffer 
pipelining (Buffer Chaining Process) and program- 
mable priority levels. 


The 82370 also adds the feature of address regis- 
ters for both destination and source. These address- 
es may be incremented, decremented, or held con- 
stant, as required by the application of the individual 
channel. This allows any combination of destination 
and source device. 


CHANNEL 
0(4) 
BASE 
EMPTY 


CHANNEL 
1(5) 
BASE 
EMPTY 


CHANNEL 
2(6) 
BASE 
EMPTY 


CHANNEL 
3(7) 
BASE 
EMPTY 


Each DMA channel has associated with it a Target. 
and a Requester. In the 8237A, the Target is the 
device which can be accessed by the address regis- 
ter, the Requester is the device which is accessed 
by the DMA Acknowledge signals and must be an 
I/O device. 


4.0 
PROGRAMMABLE 
INTERRUPT 
CONTROLLER 
(PIC) 


4.1 
Functional Description 


The 82370 Programmable Interrupt Controller (PIC) 
consists of three enhanced 82C59A Interrupt Con- 
trollers. These three controllers together provide 15 
external and 5 internal interrupt request inputs. Each 
external request input can be cascaded with an ad- 
ditional 82C59A slave controller. This scheme al- 
lows the 82370 to support a maximum of 120 
(15 x 8) external interrupt re51uestinputs. 


Following one or more interrupt requests, the 82370 
PIC issues an interrupt signal to the 80376. When 
the 80376 host processor responds with an interrupt 
acknowledge signal, the PIC will arbitrate between 
the pending interrupt requests and place the inter- 
rupt vector associated with the highest priority pend- 
ing request on the data bus. 


The major enhancement in the 82370 PIC over the 
82C59A is that each of the interrupt request inputs 
can be individually programmed with its own inter- 
rupt vector, allowing more flexibility in interrupt vec- 
tor mapping. 


4.1.1 INTERNAL 
BLOCK 
DIAGRAM 


The block diagram of the 82370 Programmable In- 
terrupt Controller is shown in Figure 4-1. Internally, 


the PICconsists of three 82C59A banks: A, Band C. 
The three banks are cascaded to one another: C is 
cascaded to B, B is cascaded to A. The INT output 
of Bank A is used externally to interrupt the 80376. 


Bank A has nine interrupt request inputs (two are 
unused), and Banks Band 
C have eight interrupt 
request inputs. Of the fifteen external interrupt re- 
quest inputs, two are shared by other functions. Spe- 
cifically, the Interrupt Request 3 input (IRQ3#) can 
be used as the Timer 2 output (TOUT2#). This pin 
can be used in three different ways: IRQ3# input 
only, TOUT2# 
output only, or using TOUT2# 
to 
generate an IRQ3# interrupt request. Also, the in- 
terrupt Request 9 input (IRQ9#) can be used as 
DMA Request 4 input (DREQ 4). Typically, only 
IRQ9# or DREQ4 can be used at a time. 
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All three banks are identical, with the exception of 
the IRQ1.5 on Bank A. Therefore, only one bank will 
be discussed. In the 82370 PIC, all external requests 
can be cascaded into and each interrupt controller 
bank behaves like a master. As compared to the 
82C59A, the enhancements in the banks are: 
- 
All interrupt vectors are individually programma- 
ble. (In the 82C59A, the vectors must be pro- 
grammed in eight consecutive interrupt vector lo- 
cations.) 
- 
The cascade address is provided on the Data 
Bus (DO-D7). (In the 82C59A, three dedicated 
control signals (CASO,CAS1, CAS2) are used for 
master/slave cascading.) 
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The block diagram of a bank is shown in Figure 4-2. 
As can be seen from this figure, the bank consists of 
six major blocks: the Interrupt Request Register 
(IRR), the In-Service Register (ISR), the Interrupt 
Mask Register (IMR), the Priority Resolver (PR), the 
Vector Registers (VR), and the Control Logic. The 
functional description of each block is included be- 
low. 


INTERRUPT 
REQUEST 
(IRR) AND 
IN·SERVICE 
REGISTER 
(ISR) 


The interrupts at the Interrupt Request (IRQ) input 
lines are handled by two registers in cascade, the 
Interrupt Request Register (IRR) and the In-Service 
Register (ISR). The IRR is used to store all interrupt 
levels which are requesting service; and the ISR is 
used to store all interrupt levels which are being 
serviced. 


This logic block determines the priorities of the bits 
set in the IRR. The highest priority is selected and 
strobed into the corresponding bit of the ISR during 
an Interrupt Acknowledge cycle. 


IROOJll 
IRO'JlI 
IR02# 
IR03Jl1 
IRO.# 
IROS# 
IR06Jl1 
IR07Jl1 


The IMR stores the bits which mask the interrupt 
lines to be masked (disabled). The IMR operates on 
the IRR. Masking of a higher priority input will not 
affect the interrupt request lines of lower priority. 


This block contains a set of Vector Registers, one 
for each interrupt request line, to store the pre-pro- 
grammed interrupt vector number. The correspond- 
ing vector number will be driven onto the Data Bus 
of the 82370 during the Interrupt Acknowledge cy- 
cle. 


The Control Logic coordinates the overall operations 
of the other internal blocks within the same bank. 
This logic will drive the Interrupt Output signal (INT) 
HIGH when one or more unmasked interrupt inputs 
are active (LOW). The INT output signal goes direct- 
ly to the 80376 (in bank A) or to another bank to 
which this bank is cascaded (see Figure 4-1). Also, 


IN- 
SERVICE 
REG. 


this logic will recognize an Interrupt Acknowledge 
cycle (via MIIO#, D/C# and W/R# 
signals). During 


this bus cycle, the Control Logic will enable the cor- 
responding Vector Register to drive the interrupt 
vector onto the Data Bus. 


In bank A, the Control Logic is also responsible for 
handling the special ICW2 interrupt request input 
(IRQ1.5). 


There are 15 external Interrupt Request inputs and 5 
internal Interrupt Requests. The external request in- 
puts are: IRQ3#, IRQ9#, IRQ11# to IRQ23#. They 
are shown in bold arrows in Figure 4-1. All IRQ in- 
puts are active LOW and they can be programmed 
(via a control bit in the Initialization Command Word 
1 (ICW1)) to be either edge-triggered or level-trig- 
gered. In order to be recognized as a valid interrupt 
request, the interrupt input must be active (LOW) un- 
til the first INTA cycle (see Bus Functional Descrip- 
tion). Note that all 15 external Interrupt Request in- 
puts have weak internal pull-up resistors. 


As mentioned earlier, an 82C59A can be cascaded 
to each external interrupt input to expand the inter- 
rupt capacity to a maximum of 120 levels. Also, two 
of the interrupt inputs are dual functions: IRQ3# can 
be used as Timer 2 output (TOUT2#) and IRQ9# 
can be used as DREQ4 input. IRQ3# is a bidirec- 
tional dual function pin. This interrupt request input is 
wired-OR with the output of Timer 2 (TOUT2#). If 
only IRQ3# function is to be used, Timer 2 should 
be programmed so that OUT2 is LOW. Note that 
TOUT2# can also be used to generate an interrupt 
request to IRQ3# input. 


The five internal interrupt requests serve special 
system functions. They are shown in Table 4-1. The 
following paragraphs describe these interrupts. 


Interrupt Request 
Interrupt Source 


IRQO# 
Timer 3 Output (TOUT3) 


IRQ8# 
Timer 0 Output (TOUTO) 


IRQ1# 
DMA Chaining Request 


LRQ4# 
DMA Terminal Count 


IRQ1.5# 
ICW2Written 


IRQ8# and IRQO# interrupt requests are initiated 
by the output of Timers 0 and 3, respectively. Each 
of these requests is generated by an edge-detector 
flip-flop. 


1-658 
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The flip-flops are activated by the following condi- 
tions: 
Set 
- 
Rising edge of timer output (TOUT); 


Clear - 
Interrupt acknowledge for this request; OR 
Request is masked (disabled); OR Hard- 
ware Reset. 


These interrupt requests are generated by the 
82370 
DMA 
Controller. 
The 
chaining 
request 


(IRQ1#) indicates that the DMA Base Register is 
not loaded. The Terminal Count request (IRQ4#) in- 
dicates that a software DMA request was cleared. 


Whenever an Initialization Control Word 2 (ICW2) is 
written to a Bank, a special ICW2 interrupt request is 
generated. The interrupt will be cleared when the 
newly programmed ICW2 Register is read. This in- 
terrupt request is in Bank A at level 1.5. This inter- 
rupt request is internally ORed with the Cascaded 
Request from Bank B and is always assigned a high- 
er priority than the Cascaded Request. 


This special interrupt is provided to support compati- 
bility with the original 82C59A. A detailed description 
of this interrupt is discussed in the Programming 
section. 


During an Interrupt Acknowledge cycle, if there is no 
active pending request, the PIC will automatically 
generate a default vector. This vector corresponds 
to the IRQ7# vector in bank A. 


4.2.2 INTERRUPT 
OUTPUT 
(INT) 


The INT output pin is taken directly from bank A. 
This signal should be tied to the Maskable Interrupt 
Request (INTR) of the 80376. When this signal is 
active (HIGH), it indicates that one or more internal! 
external interrupt requests are pending. The 80376 
is expected to respond with an interrupt acknowl- 
edge cycle. 


4.3 Bus Functional Description 


The INT output of bank A will be activated as a result 
of any unmasked interrupt request. This may be a 
non-cascaded or cascaded request. After the PIC 
has driven the INT signal HIGH, the 80376 will re- 
spond by performing two interrupt acknowledge cy- 
cles. The timing diagram in Figure 4-3 shows a typi- 
cal interrupt acknowledge process between the 
82370 and the 80376 CPU. 
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NOTE: 
What is actually driven on the Data Bus depends on if the current interrupt request is a Slave Request. 


INTA Cycle 1 
INTA Cycle 2 
OOH 
Vector 
Slave Address 
High Impedence" 
NON-SLAVE REQUEST 
SLAVE REQUEST 
"Slave will place a vector at this time. 


After activating the INT signal, the 82370 monitors 
the status lines (M/IO#, 
D/C#, 
W/R#) 
and waits 
for the 80376 to initiate the first interrupt acknowl- 
edge cycle. In the 80376 environment, two succes- 
sive interrupt acknowledge cycles (INTA) marked by 
M/IO#=LOW, 
D/C# 
= LOW, and W/R#=LOW 
are performed. During the first INTA cycle, the PIC 
will determine the highest priority request. Assuming 
this interrupt input has no external Slave Controller 
cascaded to it, the 82370 will drive the Data Bus 
with OOH in the first INTA cycle. During the second 
INTA cycle, the 82370 PIC will drive the Data Bus 
with the corresponding pre-programmed interrupt 
vector. 


If the PIC determines (from the ICW3)that this inter- 
rupt input has an external Slave Controller cascaded 
to it, it will drive the Data Bus with the specific Slave 
Cascade Adoress (instead of OOH) during the first 
INTA cycle. This Slave Cascade Address is the pre- 
programmed content in the corresponding Vector 
Register. This means that no Slave Address should 
be chosen to be OOH. Note that the Slave Address 
and Interrupt Vector are different interpretations of 
the same thing. They are both the contents of the 
programmable Vector Register. During the second 
INTA cycle, the Data Bus will be floated so that the 
external Slave Controller can drive its interrupt vec- 
tor on the bus. Since the Slave Interrupt Controller 
resides on the system bus, bus transceiver enable 
and direction control logic must take this into consid- 
eration. 


In order to have a successful interrupt service, the 
interrupt request input must be held valid (LOW) until 
the beginning of the first interrupt acknowledge cy- 
cle. If there is no pending interrupt request when the 
first INTA cycle is generated, the PIC will generate a 
default vector, which is the IRQ7 vector (Bank A, 
level 7). 


According to the Bus Cycle definition of the 80376, 
there will be four Bus Idle States between the two 
interrupt acknowledge cycles. These idle bus cycles 
will be initiated by the 80376. Also, during each inter- 
rupt acknowledge cycle, the internal Wait State Gen- 
erator of the 82370 will automatically generate the 
required number of wait states for internal delays. 


A variety of modes and commands are available for 
controlling the 82370 PIC. All of them are program- 
mable; that is, they may be changed dynamically un- 
der software control. In fact, each bank can be pro- 
grammed individually to operate in different modes. 
With these modes and commands, many possible 
configurations 
are conceivable, 
giving the 
user 
enough versatility for almost any interrupt controlled 
application. 


This section is not intended to show how the 82370 
PIC can be programmed. Rather, it describes the 
operation in different modes. 


• 


Upon completion of an interrupt service routine, the 
interrupted bank needs to be notified so its ISR can 
be updated. This allows the PIC to keep track of 
which interrupt levels are in the process of being 
serviced and their relative priorities. Three different 
End-Of-Interrupt (EOI) formats are available. They 
are: Non-Specific EOI Command, Specific EOI Com- 
mand, and Automatic EOI Mode. Selection of which 
EOI to use is dependent upon the interrupt opera- 
tions the user wishes to perform. 


If the 82370 is NOT programmed in the Automatic 
EOI Mode, an EOI command must be issued by the 
80376 to the specific 82370 PIC Controller Bank. 
Also, if this controller bank is cascaded to another 
internal bank, an EOI command must also be sent to 
the bank to which this bank is cascaded. For exam- 
ple, if an interrupt request of Bank C in the 82370 
PIC is serviced, an EOI should be written into Bank 
C, Bank B and Bank A. If the request comes from an 
external interrupt controller cascaded to Bank C, 
then an EOI should be written into the external con- 
troller as well. 


A Non-Specific EOI command sent from the 80376 
lets the 82370 PIC bank know when a service rou- 
tine has been completed, without specification of its 
exact interrupt level. The respective interrupt bank 
automatically determines the interrupt level and re- 
sets the correct bit in the ISR. 


To take advantage of the Non-Specific EOI, the in- 
terrupt bank must be in a mode of operation in which 
it can predetermine its in-service routine levels. For 
this reason, the Non-Specific EOI command should 
only be used when the most recent level acknowl- 
edged and serviced is always the highest priority lev- 
el (Le. in the Fully Nested Mode structure to be de- 
scribed below). When the interrupt bank receives a 
Non-Specific EOI command, it simply resets the 
highest priority ISR bit to indicate that the highest 
priority routine in service is finished. 


Special consideration should be taken when decid- 
ing to use the Non-Specific EOI command. Here are 
two operating conditions in which it is best NOT 
used since the Fully Nested Mode structure will be 
destroyed: 
- 
Using the Set Priority command within an inter- 
rupt service routine. 


- 
Using a Special Mask Mode. 


These conditions are covered in more detail in their 
own sections, but are listed here for reference. 
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Unlike a Non-Specific EOI command which automat- 
ically resets the highest priority ISR bit, a Specific 
EOI command specifies an exact ISR bit to be reset. 
Anyone of the IRQ levels of an interrupt bank can 
be specified in the command. 


The Specific EOI command is needed to reset the 
ISR bit of a completed service routine whenever the 
interrupt bank is not able to automatically determine 
it. The Specific EOI command can be used in all 
conditions of operation, including those that prohibit 
Non-Specific 
EOI ,command 
usage 
mentioned 
above. 


When programmed in the Automatic EOI Mode, the 
80376 no longer needs to issue a command to notify 
the interrupt bank it has completed an interrupt rou- 
tine. The interrupt bank accomplishes this by per- 
forming a Non-Specific EOI automatically at the end 
of the second INTA cycle. 


Special consideration should be taken when decid- 
ing to use the Automatic EOI Mode because it may 
disturb the Fully Nested Mode structure. In the Auto- 
matic EOI Mode, the ISR bit of a routine in service is 
reset right after it is acknowledged, thus leaving no 
designation in the ISR that a service routine is being 
executed. If any interrupt request within the same 
bank occurs during this time and interrupts are en- 
abled, it will get serviced regardless of its priority. 
Therefore, when using this mode, the 80376 should 
keep its interrupt request input disabled during exe- 
cution of a service routine. By doing this, higher pri- 
ority interrupt levels will be serviced only after the 
completion of a routine in service. This guideline re- 
stores the Fully Nested Mode structure. However, in 
this scheme, a routine in service cannot be interrupt- 
ed since the host's interrupt request input is dis- 
abled. 


The 82370 PIC provides various methods for arrang- 
ing the interrupt priorities of the interrupt request in- 
puts to suit different applications. The following sub- 
sections explain these methods in detail. 


4.4.2.1 
Fully Nested 
Mode 


The Fully Nested Mode of operation is a general pur- 
pose priority mode. This mode supports a multi-level 
interrupt structure in which all of the Interrupt' Re- 
quest (IRQ) inputs within one bank are arranged 
from highest to lowest. 
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Unless otherwise programmed, the Fully Nested 
Mode is entered by default upon initialization. At this 
time, IROO# is assigned the highest priority (priori- 
ty=O) and IRQ7# the lowest (priority=7). This de- 
fault priority can be changed, as will be explained 
later in the Rotating Priority Mode. 


When an interrupt is acknowledged, the highest pri- 
ority request is determined from the Interrupt Re- 
quest Register (IRR) and its vector is placed on the 
bus. In addition, the corresponding bit in the In-Serv- 
ice Register (ISR) is set to designate the routine in 
service. This ISR bit will remain set until the 80376 
issues an End Of Interrupt (EOI) command immedi- 
ately before returning from the service routine; or 
alternately, if the Automatic End Of Interrupt (AEOI) 
bit is set, the ISR bit will be reset at the end of the 
second INTA cycle. 


While the ISR bit is set, all further interrupts of the 
same or lower priority are inhibited. Higher level in- 
terrupts can still generate an interrupt, which will be 
acknowledged only if the 80376 internal interrupt en- 
able flip-flop has been reenabled (through software 
inside the current service routine). 


4.4.2.2 Automatic Ro~tlon-Equal Priority 
Devices 


Automatic rotation of priorities serves in applications 
where the interrupting devices are of equal priority 


within an interrupt bank. In this kind of environment, 
once a device is serviced, all other equal priority pe- 
ripherals should be given a chance to be serviced 
before the original device is serviced again. This is 
accomplished by automatically assigning a device 
the lowest priority after being serviced. Thus, in the 
worst case, the device would have to wait until all 
other peripherals connected to the same bank are 
serviced before it is serviced again. 


There are two methods of accomplishing automatic 
rotation. One is used in conjunction with the Non- 
Specific EOI command and the other is used with 
the Automatic EOI mode. These two methods are 
discussed below. 


When the Rotate On Non-Specific EOI command is 
issued, the highest ISR bit is reset as in a normal 
Non-Specific EOI command. However, after it is re- 
set, the corresponding Interrupt Request (IRQ) level 
is assigned the lowest priority. Other IRQ priorities 
rotate to conform to the Fully Nested Mode based 
on the newly assigned low priority. 


Figure 4-4 shows how the Rotate On Non-Specific 
EOI command affects the interrupt priorities. As- 
sume the IRQ priorities were assigned with IRQOthe 
highest and IRQ7 the lowest. IRQ6 and IRQ4 are 


ISR STATUS 


PRIORITY 
(BEFORE 
COMMAND) 


ISR STATUS 


PRIORITY 
(AFTER 
COMMAND) 


already 
in service 
but neither 
is completed. 
Being 
the 
higher 
priority 
routine, 
IRQ4 
is necessarily 
the 
routine 
being 
executed. 
During the IRQ4 routine, 
a 
rotate 
on Non-Specific 
EOI command 
is executed. 
When 
this happens, 
Bit 4 in the ISR is reset. 
IRQ4 
then becomes 
the lowest priority and IRQ5 becomes 
the highest. 


The 
Rotate 
On Automatic 
EOI Mode 
works 
much 
like the Rotate On Non-Specific 
EOI Command. 
The 
main difference 
is that priority rotation 
is done auto- 
matically 
after the second 
INT A cycle of an interrupt 
request. 
To enter or exit this mode, a Rotate-On-Au- 
tomatic-EOI 
Set Command 
and Rotate-On-Automat- 
ic-EOI Clear Command 
is provided. 
After this mode 
is entered, 
no other commands 
are needed as in the 
normal 
Automatic 
EOI Mode. 
However, 
it must 
be 
noted 
again that when 
using any form of the Auto- 
matic 
EOI 
Mode, 
special 
consideration 
should 
be 
taken. The guideline 
presented 
in the Automatic 
EOI 
Mode also applies 
here. 


4.4.2.3 
Specific 
Rotation-Specific 
Priority 


Specific 
rotation 
gives the user versatile 
capabilities 


in interrupt 
controlled 
operations. 
It serves 
in those 
applications 
in which a specific 
device's 
interrupt 
pri- 
ority must be altered. 
As opposed 
to Automatic 
Ro- 
tation 
which 
will 
automatically 
set 
priorities 
after 
each interrupt 
request is serviced, 
specific 
rotation 
is 
completely 
user controlled. 
That is, the user selects 
which 
interrupt 
level is to receive 
the lowest 
or the 
highest 
priority. 
This can be done 
during 
the main 
program 
or within interrupt 
routines. 
Two specific 
ro- 


tation commands 
are available 
to the user: Set Prior- 
ity Command 
and 
Rotate 
On 
Specific 
EOI 
Com- 
mand. 


The Set Priority Command 
allows the programmer 
to 
assign 
an IRQ level the lowest 
priority. 
All other 
in- 


terrupt 
levels will conform 
to the Fully Nested 
Mode 
based on the newly assigned 
low priority. 


The Rotate 
On Specific 
EOI Command 
is literally 
a 


combination 
of the 
Set Priority 
Command 
and the 
Specific 
EOI Command. 
Like the Set Priority 
Com- 
mand, a specified 
IRQ level is assigned 
lowest priori- 
ty. Like the Specific 
EOI Command, 
a specified 
level 
will be reset in the ISA. Thus, this command 
accom- 


plishes both tasks in one single command. 


4.4.2.4 
Interrupt 
Priority 
Mode Summary 


In order to simplify 
understanding 
the many modes 


of interrupt 
priority, Table 4-2 is provided 
to bring out 


their summary 
of operations. 


4.4.3 INTERRUPT 
MASKING 


VIA INTERRUPT 
MASK REGISTER 


Each bank in the 82370 
PIC has an Interrupt 
Mask 
Register 
(IMR) which enhances 
interrupt 
control 
ca- 


Interrupt 
Operation 
Effect On Priority After EOI 
Priority 
. 


Summary 
Mode 
Non-Speclflcl 
Automatic 
Specific 


Fully-Nested 
Mode 
IRQO# - Highest Priority 
No change in priority. 
Not Applicable. 
IRQ7 # - Lowest Priority 
Highest ISR bit is reset. 


Automatic 
Rotation 
Interrupt 
level just 
Highest ISR bit is reset 
Not Applicable. 


(Equal Priority Devices) 
serviced 
is the lowest 
and the corresponding 
priority. 
level becomes 
the lowest 


Other priorities 
rotate to 
priority. 


conform 
to Fully-Nested 
Mode. 


Specific 
Rotation 
User specifies 
the 
Not Applicable. 
As described 
under 
(Specific 
Priority Devices) 
lowest priority level. 
"Operation 
Summary". 


Other priorities 
rotate to 
conform 
to Fully-Nested 
Mode. 


intel~ 


pabilities. This IMR allows individual IRQ masking. 
When an IRQ is masked, its interrupt request is dis- 
abled until it is unmasked. Each bit in the 8-bit IMR 
disables one interrupt channel if it is set (HIGH). Bit 
o masks IROO, Bit 1 masks IRQ1 and so forth. 
Masking an IRQ channel will only disable the corre- 
sponding channel and does not affect the others' 
operations. 


The IMR acts only on the output of the IRR. That is, 
if an interrupt occurs while its IMR bit is set, this 
request is not "forgotten". Even with an IRQ input 
masked, it is still possible to set the IRR. Therefore, 
when the IMR bit is reset, an interrupt request to the 
80376 will then be generated, providing that the IRQ 
request remains active. If the IRQ request is re- 
moved before the IMR is reset, the Default Interrupt 
Vector (Bank A, level 7) will be generated during the 
interrupt acknowledge cycle. 


In the Fully Nested Mode, all IRQ levels of lower 
priority than the routine in service are inhibited. How- 
ever, in some applications, it may be desirable to let 
a lower priority interrupt request to interrupt the rou- 
tine in service. One method to achieve this is by 
using the Special Mask Mode. Working in conjunc- 
tion with the IMR, the Special Mask Mode enables 
interrupts from all levels except the level in service. 
This is usually done inside an interrupt service rou- 
tine by masking the level that is in service and then 
issuing the Special Mask Mode Command. Once the 
Special Mask Mode is enabled, it remains in effect 
until it is disabled. 


4.4.4 EDGE OR LEVEL 
INTERRUPT 
TRIGGERING 


Each bank in the 82370 PIC can be programmed 
Independently for either edge or level sensing for the 


DATA BUS 
INTA, 
(fROW BUS CONTROLLER) 


interrupt request signals. Recall that all IRQ inputs 
are active LOW. Therefore, in the edge triggered 
mode, an active edge is defined as an input tran- 
sition from an inactive (HIGH) to active (LOW) state. 
The interrupt input may remain active without gener- 
ating another interrupt. During level triggered mode, 
an interrupt request will be recognized by an active 
(LOW) input, and there is no need for edge detec- 
tion. However, the interrupt request must be re- 
moved before the EOI Command is issued, or the 
80376 must be disabled to prevent a second false 
interrupt from occurring. 


In either modes, the interrupt request input must be 
active (LOW) during the first INTA cycle in order to 
be recognized. Otherwise, the Default Interrupt Vec- 
tor will be generated at level 7 of Bank A. 


As mentioned previously, the 82370 allows for exter- 
nal Slave interrupt controllers to be cascaded to any 
of its external interrupt request pins. The 82370 PIC 
indicates that an external Slave Controller is to be 
serviced by putting the contents of the Vector Regis- 
ter associated with the particular request on the 
80376 Data Bus during the first INTA cycle (instead 
of OOHduring a non-slave service). The external log- 
ic should latch the vector on the Data Bus using the 
INTA status signals and use it to select the external 
Slave Controller to be serviced (see Figure 4-5). The 
selected Slave will then respond to the second INTA 
cycle and place its vector on the Data Bus. This 
method requires that if external Slave Controllers 
are used in the system, no vector should be pro- 
grammed to OOH. 


Since the external Slave Cascade Address is provid- 
ed on the Data Bus during INTA cycle 1, an external 
latch is required to capture this address for the Slave 
Controller. A simple scheme is depicted in Figure 
4-5 below. 


POSmvE 
EDGE 
WASTER/SLAVE 
fliP-fLOP 
IN 
OUT 


CLK 


CAS(0-7) 
TO SLAVE 
8259'. 


~ 
LATCH HERE 
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4.4.5.1 Special 
Fully Nested 
Mode 


This mode will be used where cascading is em- 
ployed and the priority is to be conserved within 
each Slave Controller. The Special Fully Nested 
Mode is similar to the "regular" Fully Nested Mode 
with the following exceptions: 


- 
When an interrupt request from a Slave Control- 
ler is in service, this Slave Controller is not 
locked out from the Master's priority logic. Fur- 
ther interrupt requests from the higher priority 
logic within the Slave Controller will be recog- 
nized by the 82370 PIC and will initiate interrupts 
to the 80376. In comparing to the "regular" Fully 
Nested Mode, the Slave Controller is masked out 
when its request is in service and no higher re- 
quests from the same Slave Controller can be 
serviced. 
- 
Before exiting the interrupt service routine, the 
software has to check whether the interrupt serv- 
iced was the only request from the Slave Con- 
troller. This is done by sending a Non-Specific 
EOI Command to the Slave Controller and then 
reading its In Service Register. If there are no 
requests in the Slave Controller, a Non-Specific 
EOI can be sent to the corresponding 82370 PIC 
bank also. Otherwise, no EOI should be sent. 


The 82370 PIC provides several ways to read differ- 
ent status of each interrupt bank for more flexible 
interrupt control operations. These include polling 
the highest priority pending interrupt request and 
reading the contents of different interrupt status reg- 
isters. 


4.4.6.1 Poll Command 


The 82370 PIC supports status polling operations 
with the Poll Command. In a Poll Command, the 
pending interrupt request with the highest priority 
can be determined. To use this command, the INT 
output is not used, or the 80376 interrupt is disabled. 
Service to devices is achieved by software using the 
Poll Command. 
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This mode is useful if there is a routine command 
common to several levels so that the INTA se- 
quence is not needed. Another application is to use 
the Poll Command to expand the number of priority 
levels. 


Notice that the ICW2 mechanism is not supported 
for the Poll Command. However, if the Poll Com- 
mand is used, the programmable Vector Registers 
are of no concern since no INTA cycle will be gener- 
ated. 


4.4.6.2 Reading 
Interrupt 
Registers 


The contents of each interrupt register (IRR, ISR, 
and IMR) can be read to update the user's program 
on the present status of the 82370 PIC. This can be 
a versatile tool in the decision making process of a 
service routine, giving the user more control over 
interrupt operations. 


The reading of the IRR and ISR contents can be 
performed via the Operation Control Word 3 by us- 
ing a Read Status Register Command and the con- 
tent of IMR can be read via a simple read operation 
of the register itself. 


4.5 
Register Set Overview 


Each bank of the 82370 PICconsists of a set of 8-bit 
registers to control its operations. The address map 
of all the registers is shown in Table 4-3 below. 
Since all three register sets are identical in functions, 
only one set will be described. 


Functionally, each register set can be divided into 
five groups. They are: the four Initialization Com- 
mand Words (ICW's), the three Operation Control 
Words (OCW's), the Poll/Interrupt Request/In-Serv- 
ice Register, the Interrupt Mask Register, and the 
Vector Registers. A description of each group fol- 
lows. 


Port 
Access 
Register 
Description 
Address 


20H 
Write 
Bank B ICW1, OCW2, or OCW3 
Read 
Bank B Poll, Request 
or In-Service 
Status Register 
21H 
Write 
Bank B ICW2, ICW3, ICW4, OCW1 
Read 
Bank B Mask Register 
22H 
Read 
Bank B ICW2 
28H 
Read/Write 
IRQ8 Vector 
Register 
29H 
Read/Write 
IRQ9 Vector 
Register 
2AH 
Read/Write 
Reserved 
2BH 
Read/Write 
IRQ11 Vector Register 
2CH 
Read/Write 
IRQ12 Vector Register 
2DH 
Read/Write 
IRQ13 Vector Register 
2EH 
Read/Write 
IRQ14 Vector Register 
2FH 
Read/Write 
IRQ15 Vector 
Register 


AOH 
Write 
Bank C ICW1, OCW2, or OCW3 
Read 
Bank C Poll, Request 
or In-Service 
Status Register 
A1H 
Write 
Bank C ICW2, ICW3, ICW4, OCW1 
Read 
Bank C Mask Register 
A2H 
Read 
BankC 
ICW2 
A8H 
Read/Write 
IRQ16 Vector 
Register 
A9H 
Read/Write 
IRQ17 Vector 
Register 
AAH 
Read/Write 
IRQ18 Vector 
Register 
ABH 
Read/Write 
IRQ19 Vector Register 
ACH 
Read/Write 
IRQ20 Vector 
Register 
ADH 
Read/Write 
IRQ21 Vector 
Register 
AEH 
Read/Write 
IRQ22 Vector Register 
AFH 
Read/Write 
IRQ23 Vector Register 


30H 
Write 
Bank A ICW1, OCW2, or OCW3 
Read 
Bank A Poll, Request or In-Service 
Status Register 
31H 
Write 
Bank A ICW2, ICW3, ICW4, OCW1 
Read 
Bank A Mask Register 
32H 
Read 
BanklCW2 
38H 
Read/Write 
IRQO Vector 
Register 
39H 
Read/Write 
IRQ1 Vector 
Register 
3AH 
Read/Write 
IRQ1.5 Vector Register 
3BH 
Read/Write 
IRQ3 Vector Register 
3CH 
Read/Write 
IRQ4 Vector Register 
3DH 
Read/Write 
Reserved 
3EH 
Read/Write 
Reserved 
3FH 
Read/Write 
IRQ7 Vector Register 


Before normal operation can begin, the 82370 PIC 
must be brought to a known state. There are four 
8-bit Initialization Command Words in each interrupt 
bank to setup the necessary conditions and modes 
for proper operation. Except for the second com- 
mand word (ICW2)which is a read/write register, the 
other three are write-only registers. Without going 
into detail of the bit definitions of the command 
words, the following subsections give a brief de- 
scription of what functions each command word 
controls. 


The ICW1 has three major functions. They are: 
- 
To select between the two IRQ input triggering 
modes (edge- or level-triggered); 
- 
To designate whether or not the interrupt bank is 
to be used alone or in the cascade mode. If the 
cascade mode is desired, the interrupt bank will 
accept ICW3 for further cascade mode program- 
ming. Otherwise, no ICW3 will be accepted; 
- 
To determine whether or not ICW4will be issued; 
that is, if any of the ICW4 operations are to be 
used. 


ICW2 is provided for compatibility with the 82C59A 
only. Its contents do not affect the operation of the 
interrupt bank in any way. Whenever the ICW2 of 
any of the three banks is written into, an interrupt is 
generated from bank A at level 1.5. The interrupt 
request will be cleared after the ICW2 register has 
been read by the 80376. The user is expected to 
program the corresponding vector register or to use 
it as an indicator that an attempt was made to alter 
the contents. Note that each ICW2 register has dif- 
ferent addresses for read and write operations. 


The interrupt bank will only accept an ICW3 if pro- 
grammed in the external cascade mode (as indicat- 
ed in ICW1). ICW3 is used for specific programming 
within the cascade mode. The bits in ICW3 indicate 
which interrupt request inputs have a Slave cascad- 
ed to them. This will subsequently affect the inter- 
rupt vector generation dUringthe interrupt acknowl- 
edge cycles as described previously. 
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The ICW4 is accepted only if it was selected in 
ICW1.This command word register serves two func- 
tions: 
- 
To select either the Automatic EOI mode or soft- 
ware EOI mode; 


- 
To select if the Special Nested mode is to be 
used in conjunction with the cascade mode. 


4.5.2 OPERATION 
CONTROL 
WORDS 
(OCW) 


Once initialized by the ICW's, the interrupt banks will 
be operating in the Fully Nested Mode by default 
and they are ready to accept interrupt requests. 
However, the operations of each interrupt bank can 
be further controlled or modified by the use of 
OCW's. Three OCW's are available for programming 
various modes and commands. Note that all OCW's 
are 8-bit write-only registers. 


The modes and operations controlled by the ocW's 
are: 
- 
Fully Nested Mode; 
- 
Rotating Priority Mode; 
- 
Special Mask Mode; 
- 
Poll Mode; 
- 
EOI Commands; 
- 
Read Status Commands. 


OCW1 is used solely for masking operations. It pro- 
vides a direct link to the Internal Mask Register 
(IMR). The 80376 can write to this OCW register to 
enable or disable the interrupt inputs. Reading the 
pre-programmed mask can be done via the Interrupt 
Mask Register which will be discussed shortly. 


OCW2 is used to select End-Of-Interrupt, Automatic 
Priority Rotation, and Specific Priority Rotation oper- 
ations. Associated commands and modes of these 
operations are selected using the different combina- 
tions of bits in OCW2. 


Specifically, the OCW2 is used to: 
- 
Designate an interrupt level (0-7) to be used to 
reset a specific ISR bit or to set a specific priori- 
ty. This function can be enabled or disabled; 
- 
Select which software EOI command (if any) is to 
be executed (Le. Non-Specific or Specific EOI); 


- 
Enable one of the priority rotation operations (Le. 
Rotate On Non-Specific EOI, Rotate On Auto- 
matic EOI, or Rotate On Specific EOI). 


There are three main categories of operation that 
OCW3 controls. They are summarized as follows: 
- 
To select and execute the Read Status Register 
Commands, either reading the Interrupt Request 
Register (IRR) or the In-Service Register (ISR); 


- 
To issue the Poll Command. The Poll Command 
will override a Read Register Command if both 
functions are enabled simultaneously; 
- 
To set or reset the Special Mask Mode. 


4.5.3 POLLIINTERRUPT 
REQUEST IIN-SERVICE 
STATUS 
REGISTER 


As the name implies, this 8-bit read-only register has 
multiple functions. Depending on the command is- 
sued in the OCW3, the. content of this register re- 
flects the result of the command executed. For a 
Poll Command, the register read contains the binary 
code of the highest priority level requesting service 
(if any). For a Read IRR Command, the register con- 
tent will show the current pending interrupt re- 
quest(s). Finally, for a Read ISR Command, this reg- 
ister will specify all interrupt levels which are being 
serviced. 


4.5.4 INTERRUPT 
MASK 
REGISTER 
(IMR) 


This is a read-only 8-bit register which, when read, 
will specify all interrupt levels within the same bank 
that are masked. 


Each interrupt request input has an 8-bit read/write 
programmable vector register associated with it. The 
registers should be programmed to contain the inter- 
rupt vector for the corresponding request. The con- 
tents of the Vector Register will be placed on the 
Data Bus during the INTA cycles as described previ- 
ously. 


4.6 
Programming 


Programming the 82370 PIC is accomplished by us- 
ing two 
types of command words: 
ICW's and 


OCW's. All modes and commands explained in the 
previous sections 
are 
programmable 
using the 


ICW's and OCW's. The ICW's are issued from the 
80376 in a sequential format and are used to setup 
the banks in the 82370 PIC in an initial state of oper- 
ation. The OCW's are issued as needed to vary and 
control the 82370 PIC's operations. 


Both ICW's and OCW's are sent by the 80376 to theII 
interrupt banks via the Data Bus. Each bank distin- 
gUishes between the different ICW's and OCW's by 
the I/O address map, the sequence they are issued 
(ICW's only), and by some dedicated bits among the 
ICW'sand OCW's. 


An example of programming the 82370 interrupt 
controllers is given in Appendix C (Programming the 
82370 Interrupt Controllers). 


All three interrupt banks are programmed in a similar 
way. Therefore, only a single bank will be described 
in the following sections. 


Before normal operation can begin, each bank must 
be initialized by programming a sequence of two to 
four bytes written into the ICW's. 


Figure 4-6 shows the initialization flow for an inter- 
rupt bank. Both ICW1 and ICW2 must be issued for 
any form of operation. However, ICW3and ICW4 are 
used only if designated in ICW1. Once initialized, if 
any programming changes within the ICW's are to 
be made, the entire ICW sequence must be repro- 
grammed, not just an individuallCW. 


Note that although the ICW2's in the 82370 PIC do 
not effect the Bank's operation, they still must be 
programmed in order to preserve the compatibility 
with the 82C59A. The contents programmed are not 
relevant to the overall operations of the interrupt 
banks. Also, whenever one of the three ICW2's is 
programmed, an interrupt level 1.5 in Bank A will be 
generated. This interrupt request will be cleared 
upon reading of the ICW2 registers. Since the three 
ICW2's share the same interrupt level and the sys- 
tem may not know the origin of the interrupt, all three 
ICW2's must be read. 


'ICW2 
vector 
address 
must be programmed 
now. 
Other 
vector 
addresses 
may be programmed 
via ICW2 interrupt 
service 
routine. 


Certain internal setup conditions occur automatically 
within the interrupt bank after the first ICW (ICW1) 
has been issued. These are: 
- 
The edge sensitive circuit is reset, which means 
that following initialization, an interrupt request 
input must make a HIGH-to-LOW transition to 
generate an interrupt; 


- 
The Interrupt Mask Register (IMR) is cleared; 
that is, all interrupt inputs are enabled; 
- 
IRQ7 input of each bank is assigned priority 7 
(lowest); 
- 
Special Mask Mode is cleared and Status Read 
is set to IRR; 


- 
If no ICW4 is needed, then no Automatic-EOI is 
selected. 


Each interrupt request input has a separate Vector 
Register. These Vector Registers are used to store 
the pre-programmed vector number corresponding 
to their interrupt sources. In order to guarantee prop- 
er interrupt handling, all Vector Registers must be 
programmed with the predefined vector numbers. 
Since an interrupt request will be generated whenev- 
er an ICW2 is written during the initialization se- 
quence, it is important that the Vector Register of 
IRQ1.5 in Bank A should be initialized and the inter- 
rupt service routine of this vector is set up before the 
ICW's are written. 


4.6.3 OPERATION 
CONTROL 
WORDS 
(OCW) 


After 
the ICW's are programmed, 
the operations 
of 
each 
interrupt 
controller 
bank 
can be changed 
by 
writing into the OCW's as explained 
before. There is 
no special 
programming 
sequence 
required 
for the 
OCW's. 
Any OCW may be written 
at any time in or- 
der to change 
the mode of or to perform 
certain 
op- 
erations 
on the interrupt 
banks. 


4.8.3.1 
Read Status 
and Poll Commands 
(OCW3) 


Since the reading 
of IRR and ISR status as well as 
the result 
of a Poll Command 
are available 
on the 
same 
read-only 
Status 
Register, 
a special 
Read 
Status/Poll 
Command 
must 
be issued 
before 
the 
Poll/Interrupt 
Request/In-Service 
Status 
Register 
is 
read. This command 
can be specified 
by writing the 
required control 
word into OCW3. As mentioned 
ear- 
lier, if both the Poll Command 
and the Status 
Read 
Command 
are 
enabled 
simultaneously, 
the 
Poll 
Command 
will override 
the Status 
Read. That is, af- 
ter the command 
execution, 
the Status Register 
will 
contain 
the result of the Poll Command. 


4.7 Register Bit Definition 


INITIALIZATION 
COMMAND 
WORD 
1 (ICW1) 


Note that for reading 
IRR and ISR, there is no need 
to issue a Read Status Command 
to the OCW3 ev- 


ery time the IRR or ISR is to be read. Once a Read 
Status Command 
is received 
by the interrupt 
bank, it 
"remembers" 
which 
register 
is selected. 
However, 
this is not true when the Poll Command 
is used. 


In the Poll Command, 
after the OCW3 is written, 
the 
82370 
PIC treats the next read to the Status 
Regis- 
ter as an interrupt 
acknowledge. 
This will set the ap- 
propriate 
IS bit if there 
is a request 
and 
read the 
priority 
level. Interrupt 
Request 
input status remains 
unchanged 
from 
the 
Poll Command 
to the 
Status 
Read. 


In addition 
to the above 
read commands, 
the Inter- 
rupt Mask 
Register 
(IMR) can also 
be read. When 
read, this register 
reflects 
the contents 
of the pre- 
programmed 
OCW1 
which 
contains 
information 
on 
which interrupt 
request(s) 
is(are) currently 
disabled. 


o - 
EXTERNAL 
CASCADE 
(ICW3 
NEEDED) 
1 - 
NO EXTERNAL 
CASCADE 
(ICW3 
NOT NEEDED) 


CONTENT IS NOT RELEVANT 
TO THE ACTUAL 
OPERATION 
OF" THE BANK 
BUT CAN BE READ 
BY THE INTERRUPT 
SERVICE ROUTINE TO 
DETERIo4INE WHERE THE INTERRUPT VECTORS 
OF" EACH BANK 
START. 


o - 
NO CASCADED REQUEST TO IRQN 
1 - 
THERE IS A CASCADED REQUEST 
CONNECTED TO IRON (I.E. 
THE 
CORRESPONDING INTERRUPT 
REQUEST INPUTS) 


o - NO CASCADED REQUEST TO IRQN 
1 - 
THERE IS A CASCADED REOUEST 
CONNECTED TO IRON 
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loll= 1 MASK SET (INTERRUPT DISABLED) 
loll= 0 MASK RESET (INTERRUPT ENABLED) 


0 
0 
1 
NON-SPECIFIC 
EOI COMMAND 
0 
1 
1 
SPECIFIC EOI COMMAND 
1 
0 
1 
ROTATE ON NON-SPECIFIC 
EOI 
1 
0 
0 
ROTATE ON AUTO-EOI 
MODE ~SET) 
0 
0 
0 
ROTATE ON AUTO-EOI 
MODE 
CLEAR) 
1 
1 
1 
ROTATE ON SPECIFIC EOI (l2-l0 
USED) 
1 
1 
0 
SET PRIORITY (l2-l0 
USED) 
0 
1 
0 
NO OPERATION 


ESIolIolSIolIol 
o 
0 
NO ACTION 
o 
1 
NO ACTION 
1 - 
POLL COMMAND 
1 
0 
RESET SPECIAL MASK 
0 - 
NO POLL COMMAND 
1 
1 
SET SPECIAL MASK 


RIS 
o 
NO ACTION 
1 
NO ACTION 
o 
READ IR REG. 


1 
READ IS REG. 


ESMM - 
Enable 
Special 
Mask Mode. 
When 
this bit is set to 1, it enables 
the SMM bit to set or reset the 


Special 
Mask Mode. When this bit is set to 0, SMM bit becomes 
don't 
care. 


SMM 
- 
Special 
Mask Mode. If ESMM = 1 and SMM = 1, the interrupt 
controller 
bank will enter Special 
Mask 


Mode. If ESMM = 1 and SMM = 0, the bank will revert to normal mask mode. When ESMM = 0, SMM 
has no effect. 
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BINARY 
CODE 01' 
THE HIGHEST 
PRIORITY 
LEVEL 
REOUESTING 


NOTE: 
Although all Interrupt Request inputs are active LOW, the internal logical will invert the state of the pins so that when there 
is a pending interrupt request at the input, the corresponding IRQ bit will be set to HIGH in the Interrupt Request Status 
register. 
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Operational 
Command 
Bits 
Description 
Words 


Fully Nested Mode 
OCW-Default 
Non-specific 
EOI Command 
OCW2 
EOI 


Specific 
EOI Command 
OCW2 
SL, EOI, LO-L2 


Automatic 
EOI Mode 
ICW1,ICW4 
IC4,AEOI 
Rotate On Non-Specific 
OCW2 
EOI 
EOICommand 
Rotate On Automatic 
OCW2 
R, SL, EOI 
EOI Mode 
Set Priority Command 
OCW2 
LO-L2 
Rotate On Specific 
OCW2 
R, SL, EOI 
EOICommand 
Interrupt 
Mask Register 
OCW1 
MO-M7 
Special 
Mask Mode 
OCW3 
ESMM,SMM 
Level Triggered 
Mode 
ICW1 
LTIM 
Edge Triggered 
Mode 
ICW1 
LTIM 
Read Register Command, 
IRR 
OCW3 
RR,RIS 
Read Register Command, 
ISR 
OCW3 
RR,RIS 
Read IMR 
IMR 
MO-M7 
Poll Command 
OCW3 
P 
Special 
Fully Nested Mode 
ICW1,ICW4 
1C4, SFNM 


4.8 
Register Operational 
Summary 


For ease of reference, 
Table 4-4 gives a summary 
of 
the different 
operating 
modes 
and commands 
with 
their corresponding 
registers. 


5.0 
PROGRAMMABLE 
INTERVAL 
TIMER 


5.1 
Functional 
Description 


The 82370 contains 
four independently 
Programma- 
ble Interval 
Timers: 
Timer 
0-3. 
All four timers 
are 
functionally 
compatible 
to the Intel 82C54. 
The first 
three 
timers 
(Timer 
0-2) 
have 
specific 
functions. 
The fourth timer, Timer 3, is a general purpose 
timer. 
Table 5-1 depicts 
the functions 
of each timer. A brief 
description 
of each timer's 
function 
follows. 


Table 5-1. Programmable 
Interval Timer Functions 


I11mel 
Output 
Function 


0 
IR08 
Event Based IR08 
Generato 
1 
TOUT1/REF# 
Gen. Purpose/DRAM 
Refresh 
Req. 
2 
TOUT2/IR03# 
Gen. Purpose/Speaker 
Out/IR03# 
3 
TOUT3# 
Gen. Purpose/I 
ROO 
Generator 


TIMER o-Event 
Based Interrupt 
Request 
8 
Generator 


Timer 0 is intended 
to be used as an Event Counter. 
The 
output 
of this timer 
will generate 
an Interrupt 
Request 
8 (IR08) 
upon 
a rising edge 
of the timer 
output 
(TOUTO). Normally, 
this timer is used to im- 
plement 
a time-of-day 
clock or system tick. The Tim- 
er 0 output 
is not available 
as an external 
signal. 


TIMER 
1-General 
Purpose/DRAM 
Refresh 
Request 


The output 
of Timer 
1, TOUT1, 
can be used as a 
general 
purpose 
timer 
or as a DRAM 
Refresh 
Re- 
quest signal. The rising edge of this output creates 
a 
DRAM refresh 
request 
to the 82370 
DRAM Refresh 
Controller. 
Upon 
reset, 
the 
Refresh 
Request 
func- 
tion 
is disabled, 
and the output 
pin is the Timer 
1 
output. 


The Timer 2 output, TOUT2 #, could be used to sup- 
port tone generation 
to an external 
speaker. 
This pin 
is a bidirectional 
signal. 
When 
used as an input, 
a 
logic LOW asserted 
at this pin will generate 
an Inter- 
rupt Request 
3 (IR03#) 
(see Programmable 
Inter- 
rupt Controller). 


8- 
BIT 
• 
INTERNAL BUS 


DATA BUFFER 
.Ie 
LOGIC 


CONTROL 
WORD 
REGISTER I 


CONTROL 
WORD 
REGISTERII 


REF ENABLE 
(INTERNAL) 


TOUT2#/IRQ3# 


TIMER 3-General 
Purposellnterrupt 
Request 0 
Generator 


The output of Timer 3 is fed to an edge detector and 
generates an Interrupt Request 0 (IROO) in the 
82370. The inverted output of this timer (TOUT3#) 
is also available as an external signal for general 
purpose use. 


The functional block diagram of the Programmable 
Interval Timer section is shown in Figure 5-1. Follow- 
ing is a description of each block. 


This part of the Programmable Interval Timer is used 
to interface the four timers to the 82370 internal bus. 
The Data Buffer is for transferring commands and 
data between the 8-bit internal bus and the timers. 


The Read/Write Logic accepts inputs from the inter- 
nal bus and generates signals to control other func- 
tional blocks within the timer section. 


The Control Word Registers are write-only registers. 
They are used to control the operating modes of the 
timers. Control Word Register I controls Timers 0, 1 
and 2, and Control Word Register II controls Timer 
3. Detailed description of the Control Word Regis- 
ters will be included in the Register Set Overview 
section. 


COUNTER 
0, COUNTER 
1, COUNTER 
2, 
COUNTER 
3 


Counters 0, 1, 2, and 3 are the major parts of Timers 
0, 1, 2, and 3, respectively. These four functional 
blocks are identical in operation, so only a single 
counter will be described. The internal block dia- 
gram of one counter is shown in Figure 5-2. 
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The four counters share a common clock input 
(CLKIN), but otherwise are fully independent. Each 
counter is programmable to operate in a different 
mode. 


Although the Control Word Register is shown in the 
figure, it is not part of the counter itself. Its pro- 
grammed contents are used to control the opera- 
tions of the counters. 


The Status Register, when latched, contains the cur- 
rent contents of the Control Word Register and 
status of the output and Null Count Flag (see Read 
Back Command). 


The Counting Element (CE) is the actual counter. It 
is a 16-bit presettable synchronous down counter. 


The Output Latches (OL) contain two 8-bit latches 
(OLM and OLL). Normally, these latches "follow" 
the content of the CEoOLM contains the most signif- 
icant byte of the counter and OLL contains the least 
significant byte. If the Counter Latch Command is 
sent to the counter, OL will latch the present count 
until read by the 80376 and then return to follow the 
CEoOne latch at a time is enabled by the timer's 
Control Logic to drive the internal bus. This is how 
the 16-bit Counter communicates over the 8-bit in- 
ternal bus. Note that CE cannot be read. Whenever 
the count is read, it is one of the OL's that is being 
read. 


When a new count is written into the counter, the 
value will be stored in the Count Registers (CR), and 
transferred to CEoThe transferring of the contents 
from CR's to CE is defined as "loading" of the coun- 
ter. The Count Register contains two 8-bit registers: 
CRM (which contains the most significant byte) and 
CRL (which contains the least significant byte). Simi- 
lar to the OL's, the Control Logic allows one register 
at a time to be loaded from the 8-bit internal bus. 
However, both bytes are transferred from the CR's 
to the CE simultaneously. Both CR's are cleared 
when the Counter is programmed. This way, if the 
Counter has been programmed for one byte count 
(either the most significant or the least significant 
byte only), the other byte will be zero. Note that CE 
cannot be written into directly. Whenever a count is 
written, it is the CR that is being written. 


As shown in the diagram, the Control Logic consists 
of three signals: CLKIN, GATE, and OUT. CLKIN 
and GATE will be discussed in detail in the section 
that follows. OUT is the internal output of the coun- 
ter. The external outputs of some timers (TOUT) are 
the inverted version of OUT (see TOUT1, TOUT2#, 
TOUT3#). The state of OUT depends on the mode 
of operation of the timer. 


5.2.1 CLKIN 


CLKIN is an input signal used by all four timers for 
internal timing reference. This signal can be inde- 
pendent of the 82370 system clock, ~~~2. In.the 
following discussion, each "CLK Pulse 
IS defined 
as the time period between a rising edge and a fail- 
ing edge, in that order, of CLKIN. 


During the rising edge of CLKIN, the state of GATE 
is sampled. All new counts are loaded and counters 
are decremented on the falling edge of CLKIN. 


5.2.2 TOUT1, TOUT2#, TOUTU 


TOUT1, TOUT2# 
and TOUT3# 
are the external 
output signals of Timer 1, Timer 2 and Timer 3, re- 
spectively. TOUT2# and TOUT3# are the inverted 
signals of their respective counter outputs, OUT. 
There is no external output for Timer O. 


If Timer 2 is to be used as a tone generator of a 
speaker, external buffering must be used to provide 
sufficient drive capability. 


The Outputs of Timer 2 and 3 are dual function pins. 
The output pin of Timer 2 (TOUT2#/IR03#), 
which 
is a bidirectional open-collector signal, can also be 
used as interrupt request input. When the interrupt 
function is enabled (through the Programmable In- 
terrupt Controller), a LOW on this input will generate 
an Interrupt Request 3# to the 82370 Programma- 
ble Interrupt Controller. This pin has a weak internal 
pull-up resistor. To use the IR03# function, Timer 2 
should be programmed so that OUT2 is LOW. Addi- 
tionally, OUT3 of Timer 3 is connected to an edge 
detector which will generate an Interrupt Request 0 
(IROO)to the 82370 after the rising edge of OUT3 
(see Figure 5-1). 


5.2.3 GATE 


GATE is not an externally controllable signal. Rath- 
er, it can be software controlled with the Internal 
Control Port. The state of GATE is always sampled 
on the rising edge of CLKIN. Depending on the 
mode of operation, GATE is used to enable/disable 
counting or trigger the start of an operation. 


For Timer 0 and 1, GATE is always enabled (HIGH). 
For Timer 2 and 3, GATE is connected to Bit 0 and 
6, respectively, of an Internal Control Port (at ad- 
dress 61H) of the 82370. After a hardware reset, the 
state of GATE of Timer 2 and 3 is disabled (LOW). 


5.3 Modes of Operation 


Each timer can be independently programmed to 
operate in one of six different modes. Timers are 
programmed by writing a Control Word into the Con- 
trol Word Register followed by an Initial Count (see 
Programming). 


The following are defined for use in describing the 
different modes of operation. 


CLK PulsEr- A rising edge, then a falling edge, in 


that order, of CLKIN. 
Trigger- 
A rising edge of a timer's GATE input. 


TImer/Counter Loading- 
The transfer of a count 
from 
Count 
Register 
(CR) to Count Element 
(CE). 


5.3.1 MODE O-INTERRUPT ON TERMINAL 
COUNT 


Mode 0 is typically used for event counting. After the 
Control Word is written, OUT is initially LOW, and will 
remain LOW until the counter reaches zero. OUT 
then goes HIGH and remains HIGH until a new 
count or a new Mode 0 Control Word is written into 
the counter. 


In this 
mode, 
GATE=HIGH 
enables 
counting; 
GATE = LOW disables counting. However, GATE 
has no effect on OUT. 


After the Control Word and initial count are written to 
a timer, the initial count will be loaded on the next 
CLK pulse. This CLK pulse does not decrement the 
count, so for an initial count of N, OUT does not go 
HIGH until N+ 1 CLK pulses after the initial count is 
written. 


If a new count is written to the timer, it will be loaded 
on the next CLK pulse and counting will continue 
from the new count. If a twO-byte count is written, 
the following happens: 


1. Writing the first byte disables counting, OUT is set 
LOW immediately (i.e. no CLK pulse required). 


2. Writing the second byte allows the new count to 
be loaded on the next CLK pulse. 


This allows the counting sequence to be synchroniz- 
ed by software. Again, OUT does not go HIGH until 
N+ 1 CLK pulses after the new count of N is written. 
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NOTES: 
The following 
conventions 
apply to all mode timing 
diagrams. 


1. Counters 
are programmed 
for binary 
(not BCD) counting 
and for reading/writing 
least significant 
byte (LSB) only. 


2. The counter 
is always 
selected 
(CS# 
always 
low). 
3. CW stands 
for "Control 
Word"; 
CW = 10 means 
a control 
word of 10, Hex is written 
to the counter. 
4. LSB stands 
for "Least 
significant 
byte" 
of count. 


5. Numbers 
below 
diagrams 
are count 
values. 
The lower 
number 
is the least significant 
byte. 
. 


The 
upper 
number 
is the 
most 
significant 
byte. 
Since 
the 
counter 
is programmed 
to read/write 
LSB only, 
the 
most 
significant 
byte cannot 
be read. 
N stands 
for an undefined 
count. 


Vertical 
lines show transitions 
between 
count 
values. 


If an initial count 
is written 
while GATE is lOW, 
the 
counter 
will be loaded 
on the next ClK 
pulse. When 
GATE goes HIGH, OUT will go HIGH N ClK 
pulses 
later; no ClK 
pulse is needed 
to load the counter 
as 
this has already 
been done. 


one-shot 
operation. 
The OUT signal will then remain 
lOW 
until the timer reaches 
zero. At this point, OUT 
will stay HIGH until the next trigger 
comes 
in. Since 
the state of GATE signals of Timer 0 and 1 are inter- 
nally set to HIGH. 


5.3.2 MODE 
1-GATE 
RETRIGGERABLE 
ONE·SHOT 


After writing 
the Control 
Word and initial count, 
the 
timer 
is considered 
"armed". 
A trigger 
results 
in 


loading the timer and setting OUT lOW 
on the next 
ClK 
pulse. Therefore, 
an initial count of N will result 


in a one-shot 
pulse 
width 
of N ClK 
cycles. 
Note 
In this mode. OUT will be initially HIGH. OUT will go 
lOW 
on the ClK 
pulse following 
a trigger to start the 
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that this one-shot 
operation 
is retriggerable; 
Le. OUT 
will remain lOW 
for N ClK 
pulses after every trigger. 


The one-shot 
operation 
can be repeated 
without 
re- 
writing the same count 
into the timer. 


If a new count 
is written 
to the timer during a one- 
shot operation, 
the current 
one-shot 
pulse width will 
not be affected 
until the timer is retriggered. 
This is 
because 
loading 
of the new count 
to CE will occur 
only when the one-shot 
is triggered. 


This 
mode 
is a divide-by-N 
counter. 
It is typically 
used to generate 
a Real Time Clock interrupt. 
OUT 
will initially be HIGH. When the initial count has dec- 


remented 
to 1, OUT goes 
lOW 
for one ClK 
pulse, 


then OUT goes HIGH again. Then the timer reloads 
the initial count and the process 
is repeated. 
In other 
words, 
this 
mode 
is periodic 
since 
the 
same 
se· 


quence 
is repeated 
itself 
indefinitely. 
For an initial 
count 
of N, the sequence 
repeats 
every N ClK 
cy- 


cles. 


Similar to Mode 0, GATE = HIGH enables 
counting, 
where 
GATE = lOW 
disables 
counting. 
If 
GATE 
goes lOW 
during an output pulse (lOW), 
OUT is set 


HIGH immediately. 
A trigger 
(rising edge on GATE) 
will reload the timer with the initial count on the next 
ClK 
pulse. 
Then, 
OUT will go lOW 
(for one 
ClK 
pulse) 
N ClK 
pulses 
after 
the 
new 
trigger. 
Thus, 
GATE can be used to synchronize 
the timer. 
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NOTE: 
A GATE transition 
should 
not occur 
one clock 
prior to terminal 
count. 


Figure 5-5. Mode 2 


After writing a Control Word and initial count, the 
timer will be loaded on the next ClK 
pulse. OUT 
goes lOW (for one ClK pulse) N ClK pulses after 
the initial count is written. This is another way the 
timer may be synchronized by software. 


new count but before the end of the current period, 
the timer will be loaded with the new count on the 
next ClK pulse after the trigger, and counting will 
continue with the new count. 


Writing a new count while counting does not affect 
the current counting sequence because the new 
count will not be loaded until the end of the current 
counting cycle. If a trigger is received after writing a 


Mode 3 is typically used for Baud Rate generation. 
Functionally, this mode is similar to Mode 2 except 


• 


for the duty cycle of OUT. In this mode, OUT will be 
initially HIGH. When half of the initial count has ex- 
pired, OUT goes low for the remainder of the count. 
The counting sequence will be ":)peated, thus this 
mode is also periodic. Note that an initial count of N 
results in a square wave with a period of N ClK 
pulses. 


The GATE input can be used to synchronize the tim- 
er. GATE=HIGH 
enables counting; GATE=lOW 
disables counting. If GATE goes lOW while OUT is 
lOW, OUT is set HIGH immediately (Le. no ClK 
pulse is required). A trigger reloads the timer with the 
initial count on the next ClK pulse. 


After writing a Control Word and initial count, the 
timer will be loaded on the next ClK pulse. This al- 
lows the timer to be synchronized by software. 


Writing a new count while counting does not affect 
the current counting sequence. If a trigger is re- 
ceived after writing a new count but before the end 
of the current half-cycle of the square wave, the tim- 
er will be loaded with the new count on the next ClK 
pulse and counting will continue from the new count. 
Otherwise, the new count will be loaded at the end 
of the current half-cycle. 


There is a slight difference in operation depending 
on whether the initial count is EVEN or ODD. The 
following description is to show exactly how this 
mode is implemented. 


OUT is initially HIGH. The initial count is loaded on 
one ClK pulse and is decremented by two on suc- 
ceeding ClK pulses. When the count expires (decre- 
mented to 2), OUT changes to lOW and the timer is 
reloaded with the initial count. The above process is 
repeated indefinitely. 


OUT is initially HIGH. The initial count minus one 
(which is an even number) is loaded on one ClK 
pulse and is decremented by two on succeeding 
ClK pulses. One ClK pulse after the count expires 
(decremented to 2), OUT goes lOW and the timer is 
loaded with the initial count minus one again. Suc- 
ceeding ClK pulses decrement the count by two. 
When the count expires, OUT goes HIGH immedi- 
ately and the timer is reloaded with the initial count 
minus one. The above process is repeated indefi- 
nitely. So for ODD counts, OUT will 
HIGH or 
(N+ 1)/2 counts and lOW for (N-1 )/2 counts. 
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NOTE: 
A GATE transition 
should 
not occur 
one clock 
prior to terminal 
count. 


5.3.5 MODE 
4-INITIAL 
COUNT 
TRIGGERED 
STROBE 
After writing the Control Word and initial count, the 
timer will be loaded on the next ClK pulse. This ClK 
pulse does not decrement the count, so for an initial 
count of N, OUT does not strobe lOW until N+ 1 
ClK pulses after initial count is written. 
This mode allows a strobe pulse to be generated by 
writing an initial count to the timer. Initially, OUT will 
be HIGH. When a new initial count is written into the 
timer, the counting sequence will begin. When the 
initial count expires (decremented to 1), OUT will go 
lOW for one ClK pulse and then go HIGH again. 


If a new count is written during counting, it will be 
loaded in the next ClK pulse and counting will con- 
tinue from the new count. 


Again, 
GATE= HIGH 
enables 
counting 
while 
GATE = lOW disables counting. GATE has no ef- 
fect on OUT. 
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Figure 5·7. Mode 4 


2. Writing the second byte allows the new count to 
be loaded on the next ClK pulse. 


OUT will strobe lOW 
N+ 1 ClK 
pulses after the 
new count of N is written. Therefore, when the 
strobe pulse will occur after a trigger depends on the 
value of the initial count loaded. 


5.3.6 MODE 5-GATE RETRIGGERABLE 
STROBE 


Mode 5 is very similar to Mode 4 except the count 
sequence is triggered by the gate signal instead of 


by writing an initial count. Initially, OUT will be HIGH. 
Counting is triggered by a rising edge of GATE. 
When the initial count has expired (decremented to 
1), OUT will go lOW for one ClK pulse and then go 
HIGH again. 


After loading the Control Word and initial count, the 
Count Element will not be loaded until the ClK pulse 
after a trigger. This ClK pulse does not decrement 
the count. Therefore, for an initial count of N, OUT 
does not strobe lOW until N+ 1 ClK pulses after a 
trigger. 
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The counting 
sequence 
is retriggerable. 
Every trig- 
ger will result in the timer being loaded with the initial 
count on the next CLK pulse. 
5.3.7.1 GATE 


The 
GATE 
input 
is always 
sampled 
on the 
rising 
edge of CLKIN. 
In Modes 
0, 2, 3 and 4, the GATE 
input is level sensitive. 
The logic level is sampled 
on 
the rising edge of CLKIN. In Modes 
1, 2, 3 and 5, the 
GATE input is rising edge sensitive. 
In these modes, 


If the new count 
is written 
during counting, 
the cur- 
rent counting 
sequence 
will not be affected. 
If a trig- 
ger occurs 
after the new count 
is written 
but before 
the current 
count 
expires, 
the timer 
will be loaded 
with the new count on the next CLK pulse and a new 
count 
sequence 
will start from there. 


• 
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Mode 
GATE LOW or Going LOW 
GATE Rising 
HIGH 


0 
Disable count 
No Effect 
Enable count 
1 
No Effect 
1. Initiate count 
No Effect 
2. Reset output 
after next clock 
2 
1. Disable count 
Initiate count 
Enable count 
2. Sets output HIGH 
immediately 
3 
1. Disable count 
Initiate count 
Enable count 
2. Sets output HIGH 
immediately 
4 
Disable count 
No Effect 
Enable count 
5 
No Effect 
Initiate count 
No Effect 


a rising edge of GATE (trigger) sets an edge sensi- 
tive flip-flop in the timer. The flip-flop is reset imme- 
diately after it is sampled. This way, a trigger will be 
detected no matter when it occurs; i.e. a HIGH logic 
level does not have to be maintained until the next 
rising edge of CLKIN. Note that in Modes 2 and 3, 
the GATE input is both edge and level sensitive. 


New counts are loaded and counters are decre- 
mented on the falling edge of CLKIN. The largest 
possible initial count is o. This is equivalent to 2"16 
for binary counting and 10""4 for BCD counting. 


Note that the counter does not stop when it reaches 
zero. In Modes 0, 1, 4 and 5, the counter 'wraps 
around' to the highest count: either FFFF Hex for 
binary counting or 9999 for BCD counting, and con- 
tinues counting. Modes 2 and 3 are periodic. The 
counter reloads itself with the initial count and con- 
tinues counting from there. 


The minimum and maximum initial count in each 
counter depends on the mode of operation. They 
are summarized below. 


Mode 
Mln 
Max 


0 
1 
0 
1 
1 
0 
2 
2 
0 
3 
2 
0 
4 
1 
0 
5 
1 
0 


5.4 
Register Set Overview 


The Programmable Interval Timer module of the 
82370 contains a set of six registers. The port ad- 
dress map of these registers is shown in Table 5-2. 


Port Address 
Description 


40H 
Counter 0 Register (read/write) 
41H 
Counter 1 Register (read/write) 
42H 
Counter 2 Register (read/write) 
43H 
Control Word Register I 
(Counter 0, 1 & 2) (write-only) 


44H 
Counter 3 Register (read/write) 
45H 
Reserved 
46H 
Reserved 
47H 
Control Word Register II 
(Counter 3) (write-only) 


These four 8-bit registers are functionally identical. 
They are used to write the initial count value into the 
respective timer. Also, they can be used to read the 
latched count value of a timer. Since they are 8-bit 
registers, reading and writing of the 16-bit initial 
count must follow the count format specified in the 
Control Word Registers; i.e. least significant byte 
only, most significant byte only, or least significant 
byte then most significant byte (see Programming). 


There are two Control Word Registers associated 
with the Timer section. One of the two registers 
(Control Word Register I) is used to control the oper- 
ations of Counters 0, 1 and 2 and the other (Control 
Word Register II) is for Counter 3. The major func- 
tions of both Control Word Registers are listed be- 
low: 


intel~ 


- 
Select the timer to be programmed. 
- 
Define which mode the selected timer is to oper- 
ate in. 
- 
Define the count sequence; Le. if the selected 
timer is to count as a Binary Counter or a Binary 
Coded Decimal (BCD) Counter. 
- 
Select the byte access sequence during timer 
read/write operations; Le. least significant byte 
only, most significant only, or least significant 
byte first, then most significant byte. 


Also, the 
Control Word Registers can be pro- 
grammed to perform a Counter Latch Command or a 
Read Back Command which will be described later. 


Upon power-up or reset, the state of all timers is 
undefined. The mode, count value, and output of all 
timers are random. From this point on, how each 
timer operates is determined solely by how it is pro- 
grammed. Each timer must be programmed before it 
can be used. Since the outputs of some timers can 
generate interrupt signals to the 82370, all timers 
should be initialized to a known state. 


Counters are programmed by writing a Control Word 
into their respective Control Word Registers. Then, 
an Initial Count can be written into the correspond- 
ing Count Register. In general, the programming pro- 
cedure is very flexible. Only two conventions need to 
be remembered: 


1. For each timer, the Control Word must be written 
before the initial count is written. 


2. The 16-bit initial count must follow the count for- 
mat specified in the Control Word (least significant 
byte only, most significant byte only, or least signifi- 
cant byte first, followed by most significant byte). 


Since the two Control Word Registers and the four 
Counter Registers have separate addresses, and 
each timer can be individually selected by the appro- 
priate Control Word Register, no special instruction 
sequence is required. Any programming sequence 
that follows the conventions above is acceptable. 


A new initial count may be written to a timer at any 
time without affecting the timer's programmed mode 
in any way. Count sequence will be affected as de- 
scribed in the Modes of Operation section. Note that 
the new count must follow the programmed count 
format. 


If a timer is previously programmed to read/write 
two-byte counts, the following precaution applies. A 
program must not transfer control between writing 
the first and second byte to another 'routine which 
also writes into the same timer. Otherwise, the read/ 
write will result in incorrect count. 


Whenever a Control Word is written to a timer, all 
control logic for that timer(s) is immediately reset 
(Le. no CLK pulse is required). Also, the correspond- 
ing output in, TOUT#, goes to a known initial state. 


Three methods are available to read the current 
count as well as the status of each timer. They are: 
Read Counter Registers, Counter Latch Command 
and Read Back Command. Below is a description of 
these methods. 


The current count of a timer can be read by perform- 
ing a read operation on the corresponding Counter 
Register. The only restriction of this read operation 
is that the CLKIN of the timers must be inhibited by 
using external logic. Otherwise, the count may be in 
the process of changing when it is read, giving an 
undefined result. Note that since all four timers are 
sharing the same CLKIN signal, inhibiting CLKIN to 
read a timer will unavoidably disable the other timers 
also. This may prove to be impractical. Therefore, it 
is suggested that either the Counter Latch Com- 
mand or the Read Back Command can be used to 
read the current count of a timer. 


Another alternative is to temporarily disable a timer 
before reading its Counter Register by using the 
GATE input. Depending on the mode of operation, 


. GATE= LOW will disable the counting operation. 
However, this option is available on Timer 2 and 3 
only, since the GATE signals of the other two timers 
are internally enabled all the time. 


A Counter Latch Command will be executed when- 
ever a special Control Word is written into a Control 
Word Register. Two bits written into the Control 
Word Register distinguish this command from a 'reg- 
ular' Control Word (see Register Bit Definition). Also, 
two other bits in the Control Word will select which 
counter is to be latched. 


Upon execution of this command, the selected 
counter's Output Latch (OL) latches the count at the 
time the Counter Latch Command is received. This 


or until the timer is reprogrammed. The count is then 
unlatched automatically and the OL returns to "fol- 
lowing" the Counting Element (CE). This allows 
reading the contents of the counters "on the fly" 
without 
affecting 
counting 
in progress. 
Multiple 
Counter Latch Commands may be used to latch 
more than one counter. Each latched count is held 
until it is read. Counter Latch Commands do not af- 
fect the programmed mode of the timer in any way. 


If a counter is latched, and at some time later, it is 
latched again before the prior latched count is read, 
the second Counter Latch Command is ignored. The 
count read will then be the count at the time the first 
command was issued. 


In any event, the latched count must be read ac- 
cording to the programmed format. Specifically, if 
the timer is programmed for two-byte counts, two 
bytes must be read. However, the two bytes do not 
have to be read right after the other. Read/write or 
programming operations of other timers may be per- 
formed between them. 


Another feature of this Counter Latch Command is 
that read and write operations of the same timer 
may be interleaved. For example, if the timer is pro- 
grammed for two-byte counts, the following se- 
quence is valid. 


1. Read least significant byte. 
2. Write new least significant byte. 
3. Read most significant byte. 
4. Write new most significant byte. 


If a timer is programmed to read/write two-byte 
counts, the following precaution applies. A program 
must not transfer control between reading the first 
and second byte to another routine which also reads 
from that same timer. Otherwise, an incorrect count 
will be read. 


The Read Back Command is another special Com- 
mand Word operation which allows the user to read 
the current count value and/or the status of the se- 
lected timer(s). Like the Counter Latch Command, 
two bits in the Command Word identify this as a 
Read Back Command (see Register Bit Definition). 


The Read Back Command may be used to latch 
multiple counter Output Latches (OL's) by selecting 
more than one timer within a Command Word. This 
single command is functionally equivalent to several 
Counter Latch Commands, one for each counter to 


held until it is read by the 80376 or until the timer is 
reprogrammed. The counter is automatically un- 
latched when 
read, but other 
counters 
remain 
latched until they are read. If multiple Read Back 
commands are issued to the same timer without 
reading the count, all but the first are ignored; Le.the 
count read will correspond to the very first Read 
Back Command issued. 


As mentioned previously, the Read Back Command 
may also be used to latch status information of the 
selected timer(s). When this function is enabled, the 
status of a timer can be read from the Counter Reg- 
ister after the Read Back Command is issued. The 
status information of a timer includes the following: 
1. Mode of timer: 
This allows the user to check the mode of opera- 
tion of the timer last programmed. 
2. State of TOUT pin of the timer: 
This allows the user to monitor the counter's out- 
put pin via software, possibly eliminating some 
hardware from a system. 


3. Null Count/Count available: 
The Null Count Bit in the status byte indicates if 
the last count written to the Count Register (CR) 
has been loaded into the Counting Element (CE). 
The exact time this happens depends on the 
mode of the timer and is described in the Pro- 
gramming section. Until the count is loaded into 
the Counting Element (CE), it cannot be read from 
the timer. If the count is latched or read before 
this occurs, the count value will not reflect the 
new count just written. 


If multiple status latch operations of the timer(s) are 
performed without reading the status, all but the first 
command are ignored; Le. the status read in will cor- 
respond to the first Read Back Command issued. 


Both the current count and status of the selected 
timer(s) may be latched simultaneously by enabling 
both functions in a single Read Back Command. 
This is functionally the same as issuing two separate 
Read Back Commands at once. Once again, if multi- 
ple read commands are issued to latch both the 
count and status of a timer, all but the first command 
will be ignored. 


If both count and status of a timer are latched, the 
first read operation of that timer will return the 
latched status, regardless of which was latched first. 
The next one or two (if two count bytes are to be 
read) read operations return the latched count. Note 
that subsequent read operations on the Counter 
Register will return the unlatched count (like the first 
read method discussed). 


Port Address 
Description 


40H 
Counter 0 Register 
(read/write) 
41H 
Counter 
1 Register 
(read/write) 
42H 
Counter 2 Register 
(read/write) 
44H 
Counter 3 Register 
(read/write) 
45H 
Reserved 
46H 
Reserved 
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reading 
of one byte of the 16-bit count value, either 


the most significant 
or the least significant 
byte. 


CONTROL WORD REGISTER I 
& 
II (WRITE- 
ONLY) 


Port Address 
Description 


43H 
Control Word Register 
I 


(Counter 
0, 1, 2 (write-only) 
47H 
Control Word Register 
II 


(Counter 
3) (write-only) 
r==- 


LSB 
OF COUNT 
BYTE 


"'SB 
OF COUNT 
BYTE 


SELECT 
COUNTER: 


00 
SELECT 
COUNTER 
0 
01 
SELECT 
COUNTER 
1 
10 SELECT 
COUNTER 
2 
11 
READ BACK 
CO••••••AND 
FOR COUNTER 
0- 2 


0- 
16-BIT 
BINARY 
COUNTER 


1 - BCD COUNTER 
(4 
DECADES) 


READ/WRITE: 


00 
COUNTER 
LATCH 
CO••••••AND 
01 
READ/WRITE 
LSB 
BYTE ONLY 
10 
READ/WRITE 
"'SB 
BYTE ONLY 
11 
READ/WRITE 
LSB, 
THEN 
"'SB 
BYTE 


"'ODE: 


000 
"'ODE 
0 
001 
"'ODE 
1 
Xl0 
"'ODE 
2 
Xl1 
MODE 3 
100 
MODE 4 
101 
MODE 5 
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SELECT 
COUNTER: 


00 
SELECT 
COUNTER 
3 
01 
RESERVED 
10 
RESERVED 
11 
READ BACK COMMAND 
FOR COUNTER 
3 


0- 
16-BIT 
BINARY 
COUNTER 


1 - BCD COUNTER 


(4 
DECADES) 


READ/WRITE: 


00 
COUNTER 
LATCH 
CO"'MAND 
01 
READ/WRITE 
LSB 
BYTE ONLY 
10 
READ/WRITE 
MSB BYTE ONLY 
11 
READ/WRITE 
LSB, 
THEN 
MSB BYTE 


MODE: 


000 
MODE 0 
001 
MODE 
1 


Xl0 
MODE 2 


Xll 
"'ODE 
3 
100 
MODE 4 


101 
MODE 5 
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00 
COUNTER 
0 (OR 
3) 
01 
COUNTER 
1 


10 
COUNTER 
2 
11 
READ BACK 
COt.4t.4AND 


0- 
LATCH 
COUNT 


1 - 
DO NOT LATCH 
COUNT 


0- 
LATCH 
STATUS 
1 - 
DO NOT LATCH 
STATUS 


0- 
COUNTER 
NOT 
SELECTED 


1 - 
COUNTER 
IS 
SELECTED 


0- 
COUNT 
AVAILABLE 
fOR 
READING 
1 - 
NULL 
COUNT 
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6.1 
Functional 
Description 


The 82370 contains a programmable Wait State 
Generator which can generate a pre-programmed 
number of wait states during both CPU and DMA 
initiated bus cycles. This Wait State Generator is ca- 
pable of generating 1 to 16 wait states in ne"'-pipe- 
lined mode, and 0 to 15 wait states in pipelined 
mode. Depending on the bus cycle type and the two 
Wait State Control inputs rNSC 0-1), 
a pre-pro- 
grammed number of wait states in the selected Wait 
State Register will be generated. 


The Wait State Generator can also be disabled to 
allow the use of devices capable.of generating their 
own READY# signals. Figure 6-1 is a block diagram 
of the Wait State Generator. 


The following describes the interface signals which 
affect the operation of the Wait State Generator. 
The READY#, WSCOand WSC1 signals are inputs. 
READYO# is the ready output signal to the host 
processor. 


READY# is an active LOW input signal which indi- 
cates to the 82370 the completion of a bus cycle. In 
the Master mode (e.g. 82370 initiated DMA transfer), 
this signal is monitored to determine whether a pe- 
ripheral or memory needs wait states inserted in the 
current bus cycle. In the Slave mode, it is used (to- 
gether with the ADS# signal) to trace CPU bus cy- 
cles to determine if the current cycle is pipelined. 


READYO# (Ready Out#) is an active LOW output 
signal and is the output of the Wait State Generator. 
The number of wait states generated depends on 
the WSC(0-1) inputs. Note that special cases are 
handled for access to the 82370 internal registers 
and for the Refresh cycles. For 82370 internal regis- 
ter access, READYO# will be delayed to take into 
the command recovery time of the register. One or 
more wait states will be generated in a pipelined cy- 
cle. During refresh, the number of wait states will be 
determined by the preprogrammed value in the Re- 
fresh Wait State Register. 


In the simplest configuration, READYO# 
can be 
connected to the READY# input of the 82370 and 
the 80376 CPU. This is, however, not always the 
case. If external circuitry is to control the READY# 
inputs as well, additional logic will be required (see 
Application Issues). 


These two Wait State Control inputs, together with 
the M/IO# 
input, select one of the three pre-pro- 
grammed 8-bit Wait State Registers which deter- 
mines the number of wait states to be generated. 
The most significant half of the three Wait State 
Registers corresponds to memory accesses, the 
least significant half to I/O accesses. The combina- 
tion WSC(0-1) = 11 disables the Wait State Gener- 
ator. 


WSCO 


WSCI 


M/IOI 


REGISTER 
SELECT 
LOGIC 


D7 
D4 
D3 
DO 


MEMORY 0 
I/O 
0 


MEMORY 1 
I/O 
1 


MEMORY 2 
I/o 
2 


(RESERVED) 
REfRESH 
ADSI, 
READYI 


PROGRAMMABLE 
WAIT STATE 
REGISTERS 


The timing diagram of two typical non-pipelined cy- 
cles with 82370 generated wait states is shown in 
Figure 6-2. In this diagram, it is assumed that the 
internal registers of the 82370 are not addressed. 
During the first T2 state of each bus cycle, the Wait 
State Control and the M/IO# 
inputs are sampled to 
determine which Wait State Register (if any) is se- 
lected. If the WSC inputs are active (Le.not both are 
driven HIGH), the pre-programmed number of wait 
states corresponding to the selected Wait State 
Register will be requested. This is done by driving 
the READYO# output HIGH during the end of each 
T2 state. 


The WSC (0-1) inputs need only be valid during the 
very first T2 state of each non-pipelined cycle. As a 
general rule, the WSC inputs are sampled on the 
rising edge of the next clock (82384 ClK) after the 
last state when ADS# (Address Status) is asserted. 


The number of wait states generated depends on 
the type of bus cycle, and the number of wait states 
requested. The various combinations are discussed 
below. 


1. Access the 82370 internal registers: 2 to 5 wait 
states, depending upon the specific register ad- 
dressed. Some back-to-back sequences to the Inter- 
rupt Controller will require 7 wait states. 


T1 
T2 
T2 


CLK2 


CLK 


A(l 
- 23) 
tot/ION 
BLEN,BHEN 


WSC(O-l) 


ADSN 


READYN 


READYON 


ONE WAIT STATE 


3. Refresh: As programmed in the Refresh Wait 
State Register (see Register Set Overview). Note 
that if WCS (0-1) = 11, READYO# will stay inac- 
tive. 


4. Other bus cycles: Depending on WCS (0-1) and 
M/IO# inputs, these inputs select a Wait State Reg- 
ister in which the number of wait states will be equal 
to the pre-programmed wait state count in the regis- 
ter plus 1. The Wait State Register selection is de- 
fined as follows (Table 6-1). 


Table 6-1. Walt Stat. 
Register 
selection 


M/IO# 
WSC(O-1) 
Register 
selected 


0 
00 
WAIT REG 0 (I/O half) 
0 
01 
WAIT REG 1 (I/O half) 
0 
10 
WAIT REG 2 (I/O half) 
1 
00 
WAIT REG 0 (MEM half) 
1 
01 
WAIT REG 1 (MEM half) 
1 
10 
WAIT REG 2 (MEM half) 
X 
11 
Wait State Gen. Disabled 


The Wait State Control signals, WSC (0-1), can be 
generated with the address decode and the Read/ 
Write control signals as shown in Figure 6-3. 


Addre •• 
Decode 
~ 
• 
W/RI/~WSC(O-l) 
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Figure 
6-3. WSC (O-1) Generation 


Note that during 
HALT and SHUTDOWN, 
the num- 
ber of wait 
states 
will 
depend 
on the 
WSC 
(0-1) 
inputs, 
which 
will select 
the memory 
half of one of 
the Wait State Registers 
(see CPU Reset and Shut- 
down Detect). 


The timing 
diagram 
of two typical 
pipelined 
cycles 
with 82370 generated 
wait states is shown in Figure 
6-4. Again, 
in this diagram, 
it is assumed 
that 
the 
82370 
internal 
registers 
are not addressed. 
As de- 
fined 
in the timing 
of the 80376 
processor, 
the Ad- 
dress 
(A1-23), 
Byte 
Enable 
(BHE#, 
BLE#), 
and 
other 
control 
signals 
(M/IO#, 
ADS#) 
are asserted 
one T-state 
earlier than in a non-pipelined 
cycle; Le. 
they 
are asserted 
at T2P. Similar 
to the 
non-pipe- 
lined case, the Wait State Control 
(WSC) inputs are 
sampled 
in the middle of the state after the last state 
the ADS # 
signal 
is asserted. 
Therefore, 
the WSC 
inputs 
should 
be asserted 
during 
the T1 P state 
of 
each 
pipelined 
cycle 
(which 
is one 
T-state 
earlier 
than in the non-pipe lined cycle). 


Tlp 
T2 
T2p 
Tlp 


ClK2 


ClK 


1.(1 - 23) 
t.l/101I 
BlEI/.BHEII 
WSC(O-l) 


1.051/ 


REAOYI/ 


READYO/l 


ONE WAITSTATE 


The number 
of wait states 
generated 
in a pipelined 
cycle is selected 
in a similar 
manner 
as in the non- 


pipelined 
case 
discussed 
in the 
previous 
section. 


The only difference 
here is that the actual number of 


wait states 
generated 
will be one less than that of 
the non-pipelined 
cycle. 
This is done 
automatically 
by the Wait State Generator. 


6.3.3 EXTENDING 
AND 
EARLY 
TERMINATING 
BUS CYCLE 


The 82370 
allows 
external 
logic to either 
add wait 


states 
or cause 
early termination 
of a bus cycle 
by 
controlling 
the READY # input to the 82370 and the 
host processor. 
A possible 
configuration 
is shown in 
Figure 6-5. 
• 


The EXT. RDY# (External Ready) signal of Figure 6- 
5 allows external devices to cause early termination 
of a bus cycle. When this signal is asserted LOW, 
the output of the circuit will also go LOW (even 
though the READYO# of the 82370 may still be 
HIGH). This output is fed to the READY# input of 
the 80376 and the 82370 to indicate the completion 
of the current bus cycle. 


Similarly, the 
EXT. NOT READY (External Not 
Ready) signal is used to delay the READY# input of 
the processor and the 82370. As long as this signal 
is driven HIGH, the output of the circuit will drive the 
READY# input HIGH. This will effectively extend the 
duration of a bus cycle. However, it is important to 


ClK 


A(l - 23) 
t.4/IO# 
BlE#,BHE# 


ADS# 


note that if the two-level logic is not fast enough to 
satisfy the READY# setup time, the OR gate should 
be eliminated. Instead, the 82370 Wait State Gener- 
ator can be disabled by driving both WSC (0-1) 
HIGH. In this case, the addressed memory or 1/0 
device should activate the external READY# input 
whenever it is ready to terminate the current bus 
cycle. 


Figures 6-6 and 6-7 show the timing relationships of 
the ready signals for the early termination and exten- 
sion of the bus cycles. section 6-7, Application Is- 
sues, contains a detailed timing analysis of the ex- 
ternal circuit. 


elK 


A(l - 23) 
t.4/IO# 
BlE#, BHE# 


ADS# 
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Due to the following implications, it should be noted 
that early termination of bus cycles in which 82370 
internal registers are accessed is not recommended. 


1. Erroneous data may be read from or written into 
the addressed register. 


2. The 82370 must be allowed to recover either be- 
fore HLDA (Hold Acknowledge) is asserted or before 
another bus cycle into an 82370 internal register is 
initiated. 


The recovery time, in clock periods, equals the re- 
maining wait states that were avoided plus 4. 


Altogether, there are four 8-bit internal registers as- 
sociated with the Wait State Genertor. The port ad- 
dress map of these registers is shown below in Ta- 
ble 6-2. A detailed description of each follows. 
Table 6-2. Register 
Address 
Map 


Port Address 
Description 


72H 
Wait State Reg 0 (read/write) 
73H 
Wait State Reg 1 (read/write) 
74H 
Wait State Reg 2 (read/write) 
75H 
Ref. Wait State Reg (read/write) 


These three 8-bit read/write registers are functional- 
ly identical. They are used to store the pre-pro- 
grammed wait state count. One half of each register 
contains the wait state count for I/O accesses while 
the other half contains the count for memory ac- 
cesses. The total number of wait states generated 
will depend on the type of bus cycle. For a non-pipe- 
lined cycle, the actual number of wait states request- 
ed is equal to the wait state count plus 1. For a 
pipelined cycle, the number of wait states will be 
equal to the wait state count in the selected register. 
Therefore, the Wait State Generator is capable of 
generating 1 to 
16 wait states in non-pipelined 
mode, and 0 to 15 wait states in pipelined mode. 


Note that the minimum wait state count in each reg- 
ister is O. This is equivalent to 0 wait states for a 
pipelined cycle and 1 wait state for a non-pipelined 
cycle. 


Similar to the Wait State Registers discussed above, 
this 4-bit register is used to store the number of wait 
states to be generated during a DRAM refresh cycle. 


Note that the Refresh Wait State Register is not se- 
lected by the WSC inputs. It will automatically be 
chosen whenever a DRAM refresh cycle occurs. If 
the Wait State Generator is disabled during the re- 
fresh cycle (WSC (0-1) = 11), READYO# will stay 
inactive and the Refresh Wait State Register is ig- 
nored. 


Using the Wait State Generator is relatively straight- 
forward. No special programming sequence is re- • 
quired. In order to ensure the expected number of 
wait states will be generated when a register is se- 
lected, the registers to be used must be pro- 
grammed after power-up by writing the appropriate 
wait state count into each register. Note that upon 
hardware reset, all Wait State Registers are initial- 
ized with the value FFH, giving the maximum num- 
ber of wait states possible. Also, each register can 
be read to check the wait state count previously 
stored in the register. 


6.6 
Register Bit Definition 


WAIT 
STATE 
REGISTER 
0, 1, 2 


Port Address 
Description 


72H 
Wait State Register 0 (read/write) 
73H 
Wait State Register 1 (read/write) 
74H 
Wait State Register 2 (read/write) 


I/o WAIT 
STATE 
COUNT 


lo4E1040RYWAIT 
STATE 
COUNT 
290164-88 


6.7.1 EXTERNAL 'READY' CONTROL LOGIC 


As mentioned in section 6.3.3, wait state cycles gen- 
erated by the 82370 can be terminated early or e~- 
tended longer by means of additional external logiC 
(see Figure 6-5). In order to 
ensure that the 
READY# input timing requirement of the 80376 and 
the 82370 is satisfied, special care must be taken 
when designing this external control logic. This sec- 
tion addresses the design requirements. 


A simplified block diagram of the external logic along 
with the READY# timing diagram is shown in Figure 
6-8. The purpose is to determine the maximum delay 


time allowed in the external control logic in order to 
satisfy the READY'*' setup time. 


First, it will be assumed that the 80376 is running at 
16 MHz (i.e. CLK2 is 32 MHz). Therefore, one bus 
state (two CLK2 periods) will be equivalent to 
62.5 ns. According to the AC specifications of the 
82370, the maximum delay time for valid READYO,*, 
signal is 31 ns after the rising edge of CLK2 in the 
beginning of T2 (for non-pipelined cycle) or T2P (for 
pipelined cycle). Also, the minimum READY'*' setup 
time of the 80376 and the 82370 should be 19 ns 
before the rising edge of CLK2 at the beginning of 
the next bus state. This limits the total delay time for 
the external READY'*' control logic to be 12.5 ns 
(62.5-31-19) 
in order to meet the READY# setup 
timing requirement. 


A = PHI1 + PH12 = 62.5 ns 
B = Maximum 
READYO# 
Valid Delay = 35 ns 
C = READY # Setup Time = 20 ns 
o = Maximum 
Ready Control 
Logic Delay = A • B • C = 7.5 ns 


Figure 6·8. 'READY' Timing Consideration 


7.1 
Functional Description 


The 82370 DRAM Refresh Controller consists of a 
24-bit Refresh Address Counter and Refresh Re- 
quest logic for DRAM refresh operations (see Figure 
7-1). TIMER 1 can be used as a trigger signal to the 
DRAM Refresh Request logic. The Refresh Bus Size 
can be programmed to be 8- or 16-bit wide. Depend- 
ing on the Refresh Bus Size, the Refresh Address 
Counter will be incremented with the appropriate val- 
ue after every refresh cycle. The internal logic of the 
82370 will give the Refresh operation the highest 
priority in the bus control arbitration process. Bus 
control is not released and re-requested if the 82370 
is already a bus master. 


7.2.1 TOUT1/REF# 


The 
dual 
function 
output 
pin 
of 
TIMER 
1 
(TOUT1/REF #) can be programmed to generate 
DRAM Refresh signal. If this feature is enabled, the 
rising edge of TIMER 1 output (TOUT1#) will trigger 
the DRAM Refresh Request logic. After some delay 
for gaining access of the bus, the 82370 DRAM Con- 
troller will generate a DRAM Refresh signal by driv- 
ing REF# output lOW. This signal is cleared after 
the refresh cycle has taken place, or by a hardware 
reset. 


DRAM 
REfRESH 
CONTROLLER 


If the 
DRAM 
Refresh feature 
is disabled, the 
TOUT1/REF # output pin is simply the TIMER 1 out- 
put. Detailed information of how TIMER 1 operates 
is discussed in section 6-Programmable 
Interval 
Timer, and will not be repeated here. 


In order to ensure data integrity of the DRAMs, the 
82370 gives the DRAM Refresh signal the highest 
priority in the-arbitration logic. It allows DRAM Re- 
fresh to interrupt DMA in progress in order to per- 
form the DRAM Refresh cycle. The DMA service will 
be resumed after the refresh is done. 


In case of a DRAM Refresh during a DMA process, 
the cascaded device will be requested to get off the 
bus. This is done by de-asserting the EDACK signal. 
Once DREQn goes inactive, the 82370 will perform 
the refresh operation. Note that the DMA controller 
does not completely relinquish the system bus dur- 
ing refresh. The Refresh Generator simply "steals" 
a bus cycle between DMA accesses. 


Figure 7-2 shows the timing diagram of a Refresh 
Cycle. Upon expiration of TIMER 1, the 82370 will try 
to take control of the system bus by asserting 
HOLD. As soon as the 82370 see HlDA go active, 
the DRAM Refresh Cycle will be carried out by acti- 
vating the REF# signal as well as the address and 
control signals on the system bus (Note that REF# 
will not be active until two ClK periods HlDA is as- 
serted). The address bus will contain the 24-bit ad- 


INTERNAL- 


DMA 
HANDSHAKE 
DMA 
CONTROLLER 
ARBITRATION 
LOGIC 


2<4- 
BIT 
REfRESH 
ADDRESS 


TO DMA 
CONTROLLER 
(INTERNAL) 


• 


dress currently in the Refresh Address Counter. The 
control signals are driven the same way as in a 
Memory Read cycle. This "read" operation is com- 
plete when the READY# 
signal is driven LOW. 
Then, the 82370 will relinquish the bus by de-assert- 
ing HOLD. Typically, a Refresh Cycle without wait 
states will take five bus states to execute. If "n" wait 
states are added, the Refresh Cycle will last for five 
plus "n" bus states. 


How often the Refresh Generator will initiate a re- 
fresh cycle depends on the frequency of CLKIN as 
will as TIMER 1's programmed mode of operation. 
For this specific application, TIMER 1 should be pro- 
grammed to operate in Mode 2 to generate a con- 
stant clock rate. See section 6-Programmable 
In- 
terv~1Timer for more information on programming 
the timer. One DRAM Refresh Cycle will be generat- 
ed each time TIMER 1 expires (when TOUT1 chang- 
es from LOW to HIGH). 


The Wait State Generator can be used to insert wait 
states during a refresh cycle. The 82370 will auto- 
matically insert the desired number of wait states as 
programmed in the Refresh Wait State Register (see 
Wait State Generator). 
. 


HLDA 


A( 1-23), 
M/IO# 
BLE#,D/C# 
W/R#,BHE# 


TOUTl 


7.4.1 WORD 
SIZE AND REFRESH 
ADDRESS 
COUNTER 


The 82370 supports 8- and 16-bit refresh cycle. The 
bus width during a refresh cycle is programmable 
(see Programming). The bus size can be pro- 
~rammed ~iathe Refresh Control Register (see Reg- 
Ister Overview). If the DRAM bus size is 8- or 16-bits, 
the Refresh Address Counter will be incremented by 
1 or 2, respectively. 


The Refresh Address Counter is cleared by a hard- 
ware reset. 


The Refresh Generator has two internal registers to 
control its operation. They are the Refresh Control 
Register and the Refresh Wait State Register. Their 
port address map is shown in Table 7-1. 


Port Address 
Description 


1CH 
Refresh Control Reg. (read/write) 
75H 
Ref. Wait State Reg. (read/write) 


The Refresh Wait State Register is not part of the 
Refresh Generator. It is only used to program the 
number of wait states to be inserted during a refresh 
cycle. This register is discussed in detailed in section 
7 (Wait State Generator) and will not be repeated 
here. 


This 2-bit register serves two functions. First, it is 
used to enable/disable the DRAM Refresh function 
output. If disabled, the output of TIMER 1 is simply 
used as a general purpose timer. The second func- 
tion of this register is to program the DRAM bus size 
for the refresh operation. The programmed bus size 
also determines how the Refresh Address Counter 
will be incremented after each refresh operation. 


7.6 
Programming 


Upon hardware reset, the DRAM Refresh function is 
disabled (the Refresh Control Register is cleared). 
The following programming steps are needed before 
the Refresh Generator can be used. Since the rate 
of refresh cycles depends on how TIMER 1 is pro- 
grammed, this timer must be initialized with the de- 
sired mode of operation as well as the correct 
refresh interval (see Programming Interval Timer). 
Whether or not wait states are to be generated dur- 
ing a refresh cycle, the Refresh Wait State Register 
must also be programmed with the appropriate val- 
ue. Then, the DRAM Refresh feature must be en- 
abled and the DRAM bus width should be defined. 
These can be done in one step by writing the appro- 
priate control word into the Refresh Control Register 


(see Register Bit Definition). After these steps are 
done, the refresh operation will automatically be in- 
voked by the Refresh Generator upon expiration of 
Timer 1. 


In addition to the above programming steps, it 
should be noted that after reset, although the 
TOUT1/REF 11 becomes the Time 1 output, the 
state of this pin in undefined. This is because the 
Timer module has not been initialized yet. Therefore, 
if this output is used as a DRAM Refresh signal, this 
pin should be disqualified by external logic until the 
Refresh function is enabled. One simple solution is 
to logically AND this output with HLDA, since HLDA 
should not be active after reset. 


7.7 
Register Bit Definition 


REFRESH 
CONTROL 
REGISTER 


8.0 
RELOCATION 
REGISTER, 
ADDRESS 
DECODE, 
AND 
CHIP-SELECT 
(CHPSEL#) 


8.1 
Relocation 
Register 


All the integrated peripheral devices in the 82370 
are controlled by a set of internal registers. These 
registers span a total of 256 consecutive address 
locations (although not all the 256 locations are 
used). The 82370 provides a Relocation Register 
which allows the user to map this set of internal reg- 
isters into either the memory or I/O address space. 
The function of the Relocation Register is to define 
the base address of the internal register set of the 
82370 as well as if the registers are to be memory- 
or I/O-mapped. The format of the Relocation Regis- 
ter is depicted in Figure 8-1. 


00 REf. DISABLED 
01 
INTEL RESERVED 
10 BUS SIZE = 16 
11 BUS SIZE = 8 
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o -I/O 
MAPPED 
1- 
MEMORY 
MAPPED 


Note that the Relocation Register is part of the inter- 
nal register set of the 82370. It has a port address of 
7FH. Therefore, any time the content of the Reloca- 
tion Register is changed, the physical location of this 
register will,also be moved. Upon reset of the 82370, 
the content 
of the 
Relocation Register will be 
cleared. This implies that the 82370 will respond to 
its 1/0 addresses in the range of OOOOHto OOFFH. 


As shown in the figure, Bit 0 of the Relocation Regis- 
ter determines whether the 82370 registers are to be 
memory-mapped or 1/0 mapped. When Bit 0 is set 
to '0', the 82370 will respond to 1/0 Addresses. Ad- 
dress signals BHE#<,BLE#, A1-A7 will be used to 
select one of the internal registers to be accessed. 
Bit 1 to Bit 7 of the Relocation Register will corre- 
spond to A9 to A15 of the Address bus, respectively. 
Together with A8 implied to be '0', A15 to A8 will be 
fully decoded by the 82370. The following shows 
how the 82370 is mapped into the 1/0 
address 
space. 


82370 will respond to 1/0 
address range from 
OCEOOHto OCEFFH. 


Therefore, this I/O mapping mechanism allows the 
82370 internal registers to be located on any even, 
contiguous, 256 byte boundary of the system 1/0 
space. 


When Bit 0 of the Relocation Register is set to '1', 
the 82370 will respond to memory addresses. Again, 


Address signals BHE#, BLE#, A1-A7 will be used 
to select one of the internal registers to be ac- 
cessed. Bit 1 to Bit 7 of the Relocation Register will 
correspond to A17-A23, 
respectively. A16 is as- 
sumed to be '0', and A8-A15 are ignored. Consider 
the following example. 


The 82370 will respond to memory addresses in 
the range of A6XXOOHto A60XXFFH (where 'X' is 
don't care). 


This scheme implies that the internal registers can 
be located in any even, contiguous, 2"16 
byte page 
of the memory space. 


As mentioned previously, the 82370 internal regis- 
ters do not occupy the entire contiguous 256 ad- 
dress locations. Some of the locations are 'unoccu- 
pied'" The 82370 always decodes the lower 8 ad- 
dress signals (BHE#, BLE#, A1-A7) to determine if 
anyone of its registers is being accessed. If the ad- 
dress does not correspond to any of its registers, the 
82370 will not respond. This allows external devices 
to be located within the 'holes' in the 82370 address 
space. Note that there are several unused address- 
es reserved for future Intel peripheral devices. 


8.3 Chip-Select 
(CHPSEL #) 


The Chip-Select signal (CHPSEL#) will go active 
when the 82370 is addressed in a Slave bus 


82370 
NOT ACCESSED 


T1 
T2 


82370 
ACCESSED- 2 WAIT STATES 


T1 
T2 
T2 
T2 


cycle (either read or write), or in an interrupt ac- 
knowledge cycle in which the 82370 will drive the 
Data Bus. For a given bus cycle, CHPSEL# be- 
comes active and valid in the first T2 (in a non-pipe- 
lined cycle) or in T1P (in a pipelined cycle). It will 
stay valid until the cycle is terminated by READY# 
driven active. As CHPSEL# becomes valid well be- 
fore the 82370 drives the Data Bus, it can be used to 
control the transceivers that connect the local CPU 
bus to the system bus. The timing diagram of 
CHPSEL# is shown in Figure 8-2. 


9.0 CPU RESET AND SHUTDOWN 
DETECT 


The 82370 will activate the CPURST signal to reset 
the host processor when one of the following condi- 
tions occurs: 
- 
82370 RESET is active; 
- 
82370 detects a 80376 Shutdown cycle (this fea- 
ture can be disabled); 
- 
CPURST software command is issued to 80376. 


Whenever the CPURST signal is activated, the 
82370 will reset its own internal Slave-Bus state ma- 
chine. 


9.1 Hardware Reset 


Following a hardware reset, the 82370 will assert its 
CPURST output to reset the host processor. This 
output will stay active for as long as the RESETinput 
is active. During a hardware reset, the 82370 internal 
registers will be initialized as defined in the corre- 
sponding functional descriptions. 


9.2 Software Reset 


CPURST can be generated by writing the following 
bit pattern into 82370 register location 64H. 
D7 
DO 
1111XXXO 


The Write operation into this port is considered as 
an 82370 access and the internal Wait State Gener- 
ator will automatically determine the required num- 
ber of wait states. The CPURSTwill be active follow- 
ing the completion of the Write cycle to this port. 
This signal will last for 80 CLK2 periods. The 82370 
should not be accessed until the CPURST is deacti- 
vated. 


This internal port is Write-Only and the 82370 will 
not respond to a Read operation to this location. 
Also, during a software reset command, the 823?0 
will reset its Slave-Bus state machine. However, Its 
internal registers remain unchanged. This allows the 
operating system to distinguish a 'warm' reset by 
reading any 82370 internal register previously pro- 
grammed for a non-default value. The Diagnostic 
registers can be used for this purpose (see Internal 
Control and Diagnostic Ports). 


9.3 Shutdown Detect 


The 82370 is constantly monitoring the Bus Cycle 
Definition signals (M/IO#, 
D/C#, 
W/R#) 
and is 
able to detect when the 80376 is in a Shutdown bus 
cycle. Upon detection of a processor shutdown, the 
82370 will activate the CPURST output for 62 CLK2 
periods to reset the host processor. This signal is 
generated after the Shutdown cycle is terminated by 
the READY# signal. 


• 


Although the 82370 Wait State Generator will not 
automatically respond to a Shutdown (or Halt) cycle, 
the Wait State Control inputs (WSCO,WSC1) can be 
used to determine the number of wait states in the 
same manner as other non-82370 bus cycles. 


This Shutdown Detect feature can be enabled or dis- 
abled by writing a control bit in the Internal Control 
Port at address 61H (see Internal Control and Diag- 
nostic Ports). This feature is disabled upon a hard- 
ware reset of the 82370. As in the case of Software 
Reset, the 82370 will reset its Slave-Bus state ma- 
chine but will not change any of its internal register 
contents. 


10.0 
INTERNAL 
CONTROL 
AND 
DIAGNOSTIC 
PORTS 


The format of the Internal Control Port of the 82370 
is shown in Figure 10-1. This Control Port is used to 
enable/disable 
the 
Processor Shutdown 
Detect 
mechanism as well as controlling the Gate inputs of 
the Timer 2 and 3. Note that this is a Write-Only port. 
Therefore, the 82370 will not respond to a read op- 
eration to this port. Upon hardware reset, this port 
will be cleared; Le., the Shutdown Detect feature 
and the Gate inputs of Timer 2 and 3 are disabled. 


10.2 
Diagnostic 
Ports 


Two 8-bit read/write Diagnostic Ports are provided 
in the 82370. These are two storage registers and 
have no effect on the operation of the 82370. They 
can be used to store checkpoint data or error codes 
in the power-on sequence and in the diagnostic 
service routines. As mentioned in the CPU RESET 
AND SHUTDOWN DETECT section, these Diagnos- 
tic Ports can be used to distinguish between 'cold' 
and 'warm' reset. Upon hardware reset, both Diag- 
nostic Ports are cleared. The address map of these 
Diagnostic Ports is shown in Figure 10-2. 


Port 
Address 


Diagnostic Port 1 
(Read/Write) 
80H 
Diagnostic Port 2 
(Read/Write) 
88H 


There are nineteen I/O ports in the 82370 address 
space which are reserved for Intel future peripheral 
device use only. Their address locations are: 10H, 
12H, 14H, 16H, 2AH, 3DH, 3EH, 45H, 46H, 76H, 
77H, 7DH, 7EH, CCH, CDH, DOH, D2H, D4H, and 
D6H. These addresses should not be used in the 
system since the 82370 will respond to read/write 
operations to these locations and bus contention 
may occur if any peripheral is assigned to the same 
address location. 
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12.0 
PACKAGE 
THERMAL 
SPECIFICATIONS 


calculated from the 9je and 9ja from the following 
equations: 


TJ = Tc + POlljc 


TA = Tj - 
POllja 


Tc = Ta + PO[lIja - 
IIjd 


Values for 9ja and 9jeare given in Table 12.1 for the 
100-lead fine pitch. 9ja is given at various airflows. 
Table 12.2 shows the maximum Ta allowable (with· 
out exceeding Tcl at various airflows. Note that Ta 
can be improved further by attaching "fins" 
or a 
"heat sink" to the package. P is calculated using the 
maximum hot Ice. 


The intel 82370 Integrated System Peripheral is 
specified for operation when case temperature is 
within the range of O·C to 96·C for the ceramic 
132-pin PGA package, and 94·C for the 100-pin 
plastic package. The case temperature may be mea- 
sured in any environment, to determine whether the 
82370 is within specified operating range. The case 
temperature should be measured at the center of 
the top surface opposite the pins. 


The ambient temperature is guaranteed as long as 
Tc is not violated. The ambient temperature can be 


Table 12.1 82370 Package Thermal Characteristics 
Thermal Resistances (*C/Watt) 9Jcand 9Ja 


I 
I 
I 
3 
I 
3 
I 


Package 
9Jc 
9JaVersus Alrflow-ft3/mln 
(m3/sec) 


0 
200 
400 
600 
800 
1000 
(0) (1.01) (2.03) (3.04) (4.06) (5.07) 


1OOLFine Pitch 
7 
33 
27 
24 
21 
18 
17 


132L PGA 
2 
21 
17 
14 
12 
11 
10 


Table 12.282370 Maximum Allowable Ambient 
Temperature at Various Airflows 
I 
I 
I 
3 
I 
3 
I 


Package 
9Jc 
Ta(c) Versus Alrflow-ft3/mln 
(m3/sec) 


0 
200 
400 
600 
800 
1000 
(0) (1.01) (2.03) (3.04) (4.06) (5.07) 


1OOLFine Pitch 
7 
63 
74 
79 
85 
91 
92 


132L PGA 
2 
74 
83 
88 
93 
97 
99 


100L POFP Pkg: 
Te = Ta + P'(8ja - 8jcl 
Te ~ 63 + 1.21(33 - 7) 
Te = 63 + 1.21(26) 
Te = 63 + 31.46 
Te ~ 94'C 


132L PGA Pkg: 
Te ~ Ta + P'(8ja - 8jc) 
Te = 74 + 1.21(21 - 2) 
Te = 74 + 1.21(19) 
Te = 74 + 22.99 
Te = 96'C 


82370 D.C. Specifications 
Functional 
Operating 
Range: 
Vcc = 5.0V 
±10%; 
TCASE = O°C to 96°C for 132-pin 
PGA. O°C to 94°C for 100-pin 
plastic 


Symbol 
Parameter 
Description 
Mln 
Max 
Units 
Notes 


VIL 
Input Low Voltage 
-0.3 
0.8 
V 
(Note 1) 


VIH 
Input High Voltage 
2.0 
VCC + 0.3 
V 


VILC 
CLK2 Input Low Voltage 
-0.3 
0.8 
V 
(Note 1) 


VIHC 
CLK2 Input High Voltage 
Vcc 
- 
0.8 
VCC + 0.3 
V 


VOL 
Output Low Voltage 
IOL = 4mA: 
0.45 
V 
A1-23. 00-15. 
BHE#, 
BLE# 
IOL = 5mA: 
0.45 
V 
All Others 


VOH 
Output High Voltage 


IOH = -1 
mA 
A23-A1, 
015-00, 
BHE#, 
BLE# 
2.4 
V 
(Note 5) 


IOH = -0.2mA 
A23-A1. 
015-00, 
BHE#, 
BLE# 
VCC - 
0.5 
·V 
(Note 5) 


IOH = -0.9 
mA 
All Others 
2.4 
V 
(Note 5) 


IOH = -0.18 
mA 
All Others 
VCC - 
0.5 
V 
(Note 5) 


III 
Input Leakage Current 
±15 
/-LA 
All Inputs Except: 
IRQ11 # -IRQ23 
# 
EOP#. 
TOUT2/IRQ3# 
OREQ4/IRQ9# 


ILl1 
Input Leakage Current 
10 
-300 
/-LA 
0< 
VIN < Vcc 
Inputs: 
(Note 3) 
IRQ11# 
-IRQ23# 
EOP#, 
TOUT2/IRQ3 
OREQ4/IRQ9 


ILO 
Output Leakage Current 
±15 
/-LA 
0< 
VIN < Vcc 


Icc 
Supply Current (CLK2 = 32 MHz) 
220 
mA 
(Note 4) 


CI 
Input Capacitance 
12 
pF 
(Note 2) 


CCLK 
CLK2 Input Capacitance 
20 
pF 
(Note 2) 


NOTES: 
1. Minimum value is not 100% tested. 
2. fc = 1 MHz; sampled only. 
3. These pins have weak internal puliups. They sould not be left floating. 
4. Ice is specified with inputs driven to CMOS levels, and outputs driving CMOS loads. Ice may be higher if inputs are driven 
to TIL levels, or if outputs are driving TIL loads. 
5. Tested at the minimum operating frequency of the part. 


ClK2 
[ 


LEGEND: 
A-Maximum 
output delay specification 
B-Minimum 
output delay specification 
C-Minimum 
input setup specification 
D-Minimum 
input hold specification 


82370 A.C. Specifications 
These A.C. timings are tested at 1.5V thresholds, 
except as noted. 


Functional 
Operating 
Range: Vcc = 5.OV ± 10%; TCASE = O°C to 96°C for 132-pin PGA, O°C to 94°C for 
100-pin plastic 
. 


Symbol 
Parameter 
Description 
Mln 
Max 
Units 
Notes 


Operating 
Frequency 
1I(t1 a x 2) 
4 
16 
MHz 


t1 
ClK2 
Period 
31 
125 
ns 


t2a 
ClK2 
High Time 
9 
ns 
At2.0V 
t2b 
ClK2 
High Time 
5 
ns 
AtVcc 
- 
0.8V 
t3a 
ClK2 
low Time 
9 
ns 
At2.0V 
t3b 
ClK2 
low Time 
7 
ns 
AtO.8V 
t4 
ClK2 
Fall Time 
7 
ns 
Vcc 
- 
0.8V to 0.8V 
t5 
ClK2 
Rise Time 
7 
ns 
0.8V to Vcc 
- 
0.8V 


t6 
A1-A23, 
SHE#, 
SlE# 
4 
36 
ns 
Cl = 120pF 
EDACKO-EDACK2 
Valid Delay 
t7 
A1-A23, 
SHE#, 
SlE# 
4 
40 
ns 
(Note 1) 
EDACKO-EDACK3 
Float Delay 


t8 
A 1-A23, 
SHE #, SlE # Setup Time 
6 
ns 
t9 
A 1-A23, 
SHE #, SlE # Hold Time 
4 
ns 


t10 
W/R#, 
M/IO#, 
D/C# 
Valid Delay 
4 
33 
ns 
Cl = 75 pF 
t11 
W/R#, 
M/IO#, 
D/C# 
Float Delay 
4 
35 
ns 
(Note 1) 
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82370 A.C. Specifications 
These A.C. timings are tested at 1.5V thresholds, 
except as noted. 
Functional 
Operating 
Range: Vcc = 5.0V ± 10%; TCASE = O°C to 96°C for 132-pin PGA, O°C to 94°C for 
100-pin plastic 
(Continued) 


Symbol 
Parameter 
Description 
Mln 
Max 
Units 
Notes 


t12 
W/RII, 
M/lOII, 
D/CII 
Setup Time 
6 
ns 
t13 
W/RII, 
M/IOII, 
D/CII 
Hold Time 
4 
ns 


t14 
ADSII 
Valid Delay 
6 
33 
ns 
CL = 50 pF 
t15 
ADSII 
Float Delay 
4 
35 
ns 
(Note 1) 


t16 
ADSII 
Setup Time 
21 
ns 
t17 
ADS II Hold Time 
4 
ns 


t18 
Slave Mode DO-D15 
Read Valid 
3 
46 
ns 
CL = 120 pF 
t19 
Slave Mode DO-D15 
Read Float 
6 
35 
ns 
(Note 1) 


t20 
Slave Mode DO-D15 
Write Setup 
31 
ns 
t21 
Slave Mode DO-D15 
Write Hold 
26 
ns 


t22 
Master Mode DO-D15 
Write Valid 
4 
40 
ns 
CL = 120 pF 
t23 
Master Mode DO-D15 
Write Float 
4 
35 
ns 
(Note 1) 


t24 
Master Mode DO-D15 
Read Setup 
8 
ns 
t25 
Master Mode DO-D15 
Read Hold 
6 
ns 


t26 
READY II Setup Time 
19 
ns 
t27 
READY II Hold Time 
4 
ns 


t28 
WSCO-WSC1 
Setup Time 
6 
ns 
t29 
WSCO-WSC1 
Hold Time 
21 
ns 


t30 
RESET Setup Time 
13 
ns 
t31 
RESET Hold Time 
4 
ns 


t32 
READYOII 
Valid Delay 
4 
31 
ns 
CL = 25 pF 


t33 
CPURST Valid Delay (Falling Edge Only) 
2 
18 
ns 
CL = 50 pF 


t34 
HOLD Valid Delay 
5 
33 
ns 
CL = 100 pF 


t35 
HLDA Setup Time 
21 
ns 
t36 
HLDA Hold Time 
6 
ns 


t37a 
EOPII 
Setup (Synchronous) 
21 
ns 
t38a 
EOP II Hold (Synchronous) 
6 
ns 


t37b 
EOP II Setup (Asynchronous) 
11 
ns 
t38b 
EOPII 
Hold (Asynchronous) 
11 
ns 


t39 
EOPII 
Valid Delay (Falling Edge Only) 
5 
38 
ns 
CL = 100 pF 
t40 
EOP II Float Delay 
5 
40 
ns 
(Note 1) 


t41a 
DREQ Setup (Synchronous) 
21 
ns 
t42a 
DREQ Hold (Synchronous) 
4 
ns 


t41b 
DREQ Setup (Asynchronous) 
11 
ns 
t42b 
DREQ Hold (Asynchronous) 
11 
ns 


t43 
INT Valid Delay from IRQn 
500 
ns 


t44 
NA II Setup Time 
5 
ns 
t45 
NA II Hold Time 
15 
ns 
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82370 A.C. Specifications 
These A.C. timings are tested at 1.5V thresholds, 
except as noted. 
Functional 
Operating 
Range: Vcc = 5.0V ± 10%; TCASE = O°C to 96°C for 132-pin PGA, O°C to 94°C for 
100-pin plastic (Continued) 


Symbol 
Parameter 
Description 
Mln 
Max 
Units 
Notes 


t46 
CLKIN Frequency 
DC 
10 
MHz 
t47 
CLKIN High Time 
30 
ns 
2.0V 
t48 
CLKIN Low Time 
50 
ns 
0.8V 
t49 
CLKIN Rise Time 
10 
ns 
0.8Vto 
3.7V 
t50 
CLKIN Fall Time 
10 
ns 
3.7VtoO.8V 


TOUT1 # /REF # Valid Delay 
t51 
from CLK2 (Refresh) 
4 
36 
ns 
CL = 120pF 
t52 
from CLKIN (Timer) 
3 
93 
ns 
CL = 120 pF 


t53 
TOUT2# 
Valid Delay 
3 
93 
ns 
CL = 120 pf 
(from CLKIN, Falling Edge Only) 
t54 
TOUT2 # Float Delay 
3 
36 
ns 
(Note 1) 


t55 
TOUT3# 
Valid Delay 
3 
93 
ns 
CL = 120pF 
(from CLKIN) 


t56 
CHPSEL# 
Valid Delay 
1 
35 
ns 
CL = 25 pF 


NOTE: 
1. Float condition 
occurs 
when 
the maximum 
output 
current 
becomes 
less than 
ILO in magnitude. 
Float delay 
is not tested. 


For testing 
purposes, 
the float condition 
occurs 
when the dynamic 
output 
driven 
voltage 
changes 
with current 
loads. 


82370 
OUTPUT~ 


~CL 
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82370 
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INPUT SET- UP AND HOLD TltollNG(CONT.) 


Tx 
PHil 
PHI2 
PHil 
PHI2 
PHil 
PHI2 


CLK2 


NA* 


WSC(O-l) 


PHil 
PHI2 
PHil 
PHI2 
PHil 
PHI2 


ClK2 
T31 
T30 


RESET 


Hold 
Setup 


Tx 


ClK2 
r- T33 WIN. 
CPURST 
. 


I-- T33 WAX. 


2OO164-Al 


A1 - 23. BHE,. BlE, 
EDACK(O- 2) 


• 


eLKIN 


TOUT1 


APPENDIX 
A 
PORTS LISTED BY ADDRESS 


Port Address 
Description 
(HEX) 


00 
Read/Write 
DMA Channel 
0 Target Address, 
AO-A 15 
01 
Read/Write 
DMA Channel 
0 Byte Count, BO-B15 
02 
Read/Write 
DMA Channel 
1 Target Address, 
AO-A 15 
03 
Read/Write 
DMA Channel 
1 Byte Count, BO-B15 
04 
Read/Write 
DMA Channel 
2 Target Address, 
AO-A 15 
05 
Read/Write 
DMA Channel 
2 Byte Count, BO-B15 
06 
Read/Write 
DMA Channel 
3 Target Address, 
AO-A15 
07 
Read/Write 
DMA Channel 
3 Byte Count, BO-B15 
08 
Read/Write 
DMA Channel 
0-3 
Status/Command 
I Register 
09 
Read/Write 
DMA Channel 
0-3 
Software 
Request 
Register 
OA 
Write DMA Channel 
0-3 
Set-Reset 
Mask Register 
OB 
Write DMA Channel 0-3 
Mode Register 
I 
OC 
Write Clear Byte-Pointer 
FF 
OD 
Write DMA Master-Clear 
OE 
Write DMA Channel 
0-3 
Clear Mask Register 
OF 
Read/Write 
DMA Channel 
0-3 
Mask Register 
10 
Intel Reserved 
11 
Read/Write 
DMA Channel 
0 Byte Count, B16-B23 
12 
Intel Reserved 
13 
Read/Write 
DMA Channel 
1 Byte Count, B16-B23 
14 
Intel Reserved 
15 
Read/Write 
DMA Channel 
2 Byte Count, B16-B23 
16 
Intel Reserved 
17 
Read/Write 
DMA Channel 
3 Byte Count, B16-B23 
18 
Write DMA Channei 
0-3 
Bus Size Register 
19 
Read/Write 
DMA Channel 
0-3 
Chaining 
Register 
1A 
Write DMA Channel 
0-3 
Command 
Register 
II 
1B 
Write DMA Channel 
0-3 
Mode Register 
II 
1C 
Read/Write 
Refresh Control Register 
1E 
Reset Software 
Request 
Interrupt 
20 
Write Bank B ICW1, OCW2 or OCW3 
Read Bank B Poll, Interrupt 
Request 
or In-Service 
Status Register 
21 
Write Bank B ICW2, ICW3, ICW4 or OCW1 
Read Bank B Interrupt 
Mask Register 
22 
Read Bank B ICW2 
28 
Read/Write 
IR08 Vector 
Register 
29 
Read/Write 
IR09 Vector Register 
2A 
Reserved 


Port Address 
Description 
(HEX) 


2B 
Read/Write 
IRQ11 Vector Register 
2C 
Read/Write 
IRQ12 Vector 
Register 
2D 
Read/Write 
IRQ13 Vector Register 
2E 
Read/Write 
IRQ14 Vector Register 
2F 
Read/Write 
IRQ15 Vector Register 
30 
Write Bank A ICW1, OCW2 or OCW3 
Read Bank A Poll, Interrupt 
Request 
or In-Service 
Status Register 
31 
Write Bank A ICW2, ICW3, ICW4 or OCW1 
Read Bank A Interrupt 
Mask Register 
32 
Read Bank A ICW2 
38 
Read/Write 
IRQO Vector Register 
39 
Read/Write 
IRQ1 Vector Register 
3A 
Read/Write 
IRQ1.5 Vector Register 
3B 
Read/Write 
IRQ3 Vector 
Register 
3C 
Read/Write 
IRQ4 Vector Register 
3D 
Reserved 
3E 
Reserved 
3F 
Read/Write 
IRQ7 Vector Register 
40 
Read/Write 
Counter 0 Register 
41 
Read/Write 
Counter 
1 Register 
. 
42 
Read/Write 
Counter 2 Register 
43 
Write Control Word Register 
I-Counter 
0, 1, 2 
44 
Read/Write 
Counter 3 Register 
45 
Reserved 
46 
Reserved 
47 
Write Word Register 
II-Counter 
3 
61 
Write Internal Control Port 
64 
Write CPU Reset Register 
(Data-1111 
XXXOH) 
72 
Read/Write 
Wait State Register 0 
73 
Read/Write 
Wait State Register 
1 
74 
Read/Write 
Wait State Register 2 
75 
Read/Write 
Refresh Wait State Register 
76 
Reserved 
77 
Reserved 
7D 
Reserved 
7E 
Reserved 
7F 
Read/Write 
Relocation 
Register 
80 
Read/Write 
Internal Diagnostic 
Port 0 
81 
Read/Write 
DMA Channel 
2 Target Address, 
A 16-A23 
82 
Read/Write 
DMA Channel 
3 Target Address, 
A16-A23 
83 
Read/Write 
DMA Channel 
1 Target Address, 
A 16-A23 
87 
Read/Write 
DMA Channel 
0 Target Address, 
A16-A23 
88 
Read/Write 
Internal Diagnostic 
Port 1 
89 
Read/Write 
DMA Channel 
6 Target Address, 
A 16-A23 
8A 
Read/Write 
DMA Channel 
7 Target Address, 
A 16-A23 
8B 
Read/Write 
DMA Channel 
5 Target Address, 
A16-A23 
8F 
Read/Write 
DMA Channel 
4 Target Address, 
A 16-A23 


• 


Port Addr.ss 
(HEX) 


90 
91 
92 
93 
94 
95 
96 
97 
98 
99 
9A 
9B 
9C 
90 
9E 
9F 
AO 


Read/Write 
OMA Channel 
0 Requester 
Address, 
AO-A 15 
Read/Write 
OMA Channel 
0 Requester 
Address, 
A16-A23 
Read/Write 
OMA Channel 
1 Requester 
Address, 
AO-A 15 
Read/Write 
OMA Channel 
1 Requester 
Address, 
A16-A23 
Read/Write 
OMA Channel 
2 Requester 
Address, 
AO-A 15 
Read/Write 
OMA Channel 2 Requester 
Address, 
A16-A23 
Read/Write 
OMA Channel 
3 Requester 
Address, 
AO-A 15 
Read/Write 
OMA Channel 3 Requester 
Address, 
A16-A23 
Read/Write 
OMA Channel 4 Requester 
Address, 
AO-A 15 
Read/Write 
OMA Channel 4 Requester 
Address, 
A16-A23 
Read/Write 
OMA Channel 
5 Requester 
Address, 
AO-A15 
Read/Write 
OMA Channel 
5 Requester 
Address, 
A16-A23 
Read/Write 
OMA Channel 
6 Requester 
Address, 
AO-A 15 
Read/Write 
OMA Channel 
6 Requester 
Address, 
A 16-A23 
Read/Write 
OMA Channel 
7 Requester 
Address, 
AO-A 15 
Read/Write 
OMA Channel 
7 Requester 
Address, 
A 16-A23 
Write Bank C ICW1, OCW2 or OCW3 
Read Bank C Poll, Interrupt 
Request or In-Service 
Status Register 
Write Bank C ICW2, ICW3, ICW4 or OCW1 
Read Bank C Interrupt 
Mask Register 
Read Bank C ICW2 
Read/Write 
IRQ16 Vector 
Register 
Read/Write 
IRQ17 Vector Register 
Read/Write 
IRQ18 Vector 
Register 
Read/Write 
IRQ19 Vector Register 
Read/Write 
IRQ20 Vector 
Register 
Read/Write 
IRQ21 Vector Register 
Read/Write 
IRQ22 Vector 
Register 
Read/Write 
IRQ23 Vector 
Register 
Read/Write 
OMA Channel 4 Target Address, 
AO-A15 
Read/Write 
OMA Channel 4 Byte Count, BO-B15 
Read/Write 
OMA Channel 
5 Target Address, 
AO-A15 
Read/Write 
OMA Channel 
5 Byte Count, BO-B15 
Read/Write 
OMA Channel 
6 Target Address, 
AO-A15 
Read/Write 
OMA Channel 
6 Byte Count, BO-B15 
Read/Write 
OMA Channel 
7 Target Address, 
AO-A 15 
Read/Write 
OMA Channel 
7 Byte Count, BO-B15 
Read OMA Channel 
4-7 
Status/Command 
I Register 
Read/Write 
DMA Channel 4-7 
Software 
Request 
Register 
Write DMA Channel 
4-7 
Set-Reset 
Mask Register 
Write DMA Channel 
4-7 
Mode Register 
I 
Reserved 
Reserved 
Write DMA Channel 4-7 
Clear Mask Register 
Read/Write 
DMA Channel 4-7 
Mask Register 
Intel Reserved 
Read/Write 
DMA Channel 
4 Byte Count, B16-B23 
Intel Reserved 
Read/Write 
DMA Channel 
5 Byte Count, B16-B23 
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Port Address 
Description 
(HEX) 


04 
Intel Reserved 
05 
Read/Write 
OMA Channel 6 Byte Count, B16-B23 
06 
Intel Reserved 
07 
Read/Write 
OMA Channel 
7 Byte Count, B16-B23 
08 
Write OMA Channel 4-7 
Bus Size Register 
09 
Read/Write 
OMA Channel 
4-7 
Chaining 
Register 
OA 
Write OMA Channel 
4-7 
Command 
Register 
II 
DB 
Write OMA Channel 
4-7 
Mode Register 
II • 
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APPENDIX 
B 
PORTS LISTED BY FUNCTION 


Port Address 
Description 
(HEX) 


DMA CONTROLLER 


OD 
Write DMA Master-Clear 
OC 
Write DMA Clear Byte-Pointer 
FF 


08 
Read/Write 
DMA Channel 
0-3 
Status/Command 
I Register 
C8 
Read/Write 
DMA Channel 4-7 
Status/Command 
I Register 
1A 
Write DMA Channel 
0-3 
Command 
Register 
II 
DA 
Write DMA Channel 4-7 
Command 
Register 
II 


OB 
Write DMA Channel 
0-3 
Mode Register 
I 
CB 
Write DMA Channel 
4-7 
Mode Register 
I 
1B 
Write DMA Channel 
0-3 
Mode Register 
II 
DB 
Write DMA Channel 4-7 
Mode Register 
II 


09 
Read/Write 
DMA Channel 
0-3 
Software 
Request 
Register 
C9 
Read/Write 
DMA Channel 4-7 
Software 
Request 
Register 
1E 
Reset Software 
Request 
Interrupt 


OE 
Write DMA Channel 
0-3 
Clear Mask Register 
CE 
Write DMA Channel 4-7 
Clear Mask Register 
OF 
Read/Write 
DMA Channel 
0-3 
Mask Register 
CF 
Read/Write 
DMA Channel 4-7 
Mask Register 
OA 
Write DMA Channel 
0-3 
Set-Reset 
Mask Register 
CA 
Write DMA Channel 4-7 
Set-Reset 
Mask Register 


18 
Write OMA Channel 
0-3 
Bus Size Register 
D8 
Write DMA Channel 4-7 
Bus Size Register 


19 
Read/Write 
DMA Channel 0-3 
Chaining 
Register 
D9 
Read/Write 
DMA Channel 
4-7 
Chaining 
Register 


00 
Read/Write 
DMA Channel 0 Target Address, 
AO-A 15 
87 
Read/Write 
DMA Channel 
0 Target Address, 
A 16-A23 
01 
Read/Write 
DMA Channel 
0 Byte Count, BO-B15 
11 
Read/Write 
DMA Channel 
0 Byte Count, B16-B23 
90 
Read/Write 
DMA Channel 
0 Requester 
Address, 
AO-A 15 
91 
Read/Write 
DMA Channel 
0 Requester 
Address, 
A 16-A23 
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Port Address 
Description 
(HEX) 


DMA CONTROLLER 
(Continued) 


02 
Read/Write 
DMA Channel 
1 Target Address, 
AO-A15 
83 
Read/Write 
DMA Channel 
1 Target Address, 
A 16-A23 
03 
Read/Write 
DMA Channel 
1 8yte Count, 80-815 
13 
Read/Write 
DMA Channel 
1 8yte Count, 816-823 
92 
Read/Write 
DMA Channel 
1 Requester 
Address, 
AO-A 15 


93 
Read/Write 
DMA Channel 
1 Requester 
Address, 
A 16-A23 


04 
Read/Write 
DMA Channel 
2 Target Address, 
AO-A15 
81 
Read/Write 
DMA Channel 
2 Target Address, 
A16-A23 
05 
Read/Write 
DMA Channel 
2 8yte Count, 80-815 
15 
Read/Write 
DMA Channel 
2 8yte Count, 816-823 
94 
Read/Write 
DMA Channel 
2 Requester 
Address, 
AO-A 15 
95 
Read/Write 
DMA Channel 
2 Requester 
Address, 
A 16-A23 


06 
Read/Write 
DMA Channel 
3 Target Address, 
AO-A 15 
82 
Read/Write 
DMA Channel 
3 Target Address, 
A16-A23 
07 
Read/Write 
DMA Channel 
3 8yte Count, 80- 8 15 
17 
Read/Write 
DMA Channel 
3 8yte Count, 816- 
823 
96 
Read/Write 
DMA Channel 
3 Requester 
Address, 
AO-A 15 


97 
Read/Write 
DMA Channel 
3 Requester 
Address, 
A16-A23 


CO 
Read/Write 
DMA Channel 
4 Target Address, 
AO-A 15 
8F 
Read/Write 
DMA Channel 
4 Target Address, 
A16-A23 
C1 
Read/Write 
DMA Channel 
4 8yte Count, 80-815 
D1 
Read/Write 
DMA Channel 
4 8yte Count, 816-823 
98 
Read/Write 
DMA Channel 
4 Requester 
Address, 
AO-A 15 
99 
Read/Write 
DMA Channel 
4 Requester 
Address, 
A 16-A23 


C2 
Read/Write 
DMA Channel 
5 Target Address, 
AO-A15 
88 
Read/Write 
DMA Channel 
5 Target Address, 
A 16-A23 
C3 
Read/Write 
DMA Channel 
5 8yte Count, 80-815 
D3 
Read/Write 
DMA Channel 
5 8yte Count, 816-823 
9A 
Read/Write 
DMA Channel 
5 Requester 
Address, 
AO-A 15 
98 
Read/Write 
DMA Channel 
5 Requester 
Address, 
A16-A23 


C4 
Read/Write 
DMA Channel 
6 Target Address, 
AO-A 15 
89 
Read/Write 
DMA Channel 6 Target Address, 
A16-A23 
C5 
Read/Write 
DMA Channel 
6 8yte Count, 80-815 
D5 
Read/Write 
DMA Channel 6 8yte Count, 816-823 
9C 
Read/Write 
DMA Channel 
6 Requester 
Address, 
AO- A 15 


9D 
Read/Write 
DMA Channel 
6 Requester 
Address, 
A 16-A23 


C6 
Read/Write 
DMA Channel 
7 Target Address, 
AO-A15 
8A 
Read/Write 
DMA Channel 
7 Target Address, 
A 16-A23 
C7 
Read/Write 
DMA Channel 
7 8yte Count, 80-815 
D7 
Read/Write 
DMA Channel 
7 8yte Count, 816-823 
9E 
Read/Write 
DMA Channel 
7 Requester 
Address, 
AO-A 15 
9F 
Read/Write 
DMA Channel? 
Requester 
Address, 
A16-A23 
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Port Address 
Description 
(HEX) 


INTERRUPT 
CONTROLLER 


20 
Write Bank B ICW1, OCW2 or OCW3 
Read Bank B Poll, Interrupt 
Request 
or In-Service 
Status Register 
21 
Write Bank B ICW2, ICW3, ICW4 or OCW1 
Read Bank B Interrupt 
Mask Register 
22 
Read Bank B ICW2 
28 
Read/Write 
IRQ8 Vector 
Register 
29 
Read/Write 
IRQ9 Vector 
Register 
2A 
Reserved 
2B 
Read/Write 
IRQ11 Vector 
Register 
2C 
Read/Write 
IRQ12 Vector 
Register 
20 
Read/Write 
IRQ13 Vector 
Register 
2E 
Read/Write 
IRQ14 Vector 
Register 
2F 
Read/Write 
IRQ15 Vector Register 


AO 
Write Bank C ICW1, OCW2 or OCW3 
Read Bank C Poll, Interrupt 
Request 
or In-Service 


Status Register 
A1 
Write Bank C ICW2, ICW3, ICW4 or OCW1 
Read Bank C Interrupt 
Mask Register 
A2 
Read Bank C ICW2 
A8 
Read/Write 
IRQ16 Vector Register 
A9 
Read/Write 
IRQ1? Vector 
Register 
M 
Read/Write 
IRQ18 Vector 
Register 
AB 
Read/Write 
IRQ19 Vector 
Register 
AC 
Read/Write 
IRQ20 Vector R~gister 
AD 
Read/Write 
IRQ21 Vector 
Register 
AE 
Read/Write 
IRQ22 Vector 
Register 
AF 
Read/Write 
IRQ23 Vector Register 


30 
Write Bank A ICW1, OCW2 or OCW3 
Read Bank A Poll, Interrupt 
Request 
or In-Service 
Status Register 
31 
Write Bank A ICW2, ICW3, ICW4 or OCW1 
Read Bank A Interrupt 
Mask Register 
32 
Read Bank A ICW2 
38 
Read/Write 
IRQO Vector 
Register 
39 
Read/Write 
IRQ1 Vector 
Register 
3A 
Read/Write 
IRQ1.5 Vector Register 
3B 
Read/Write 
IRQ3 Vector Register 
3C 
Read/Write 
IRQ4 Vector Register 
3D 
Reserved 
3E 
Reserved 
3F 
Read/Write 
IRQ? Vector Register 


Port Address 
Description 
(HEX) 


PROGRAMMABLE 
INTERVAL 
TIMER 


40 
Read/Write 
Counter 0 Register 
41 
Read/Write 
Counter 
1 Register 
42 
Read/Write 
Counter 2 Register 
43 
Write Control Word Register 
I-Counter 
0, 1, 2 


44 
Read/Write 
Counter 3 Register 
47 
Write Word Register 
II-Counter 
3 


CPU RESET 


64 
Write CPU Reset Register 
(Data-1111 
XXXOH) 


WAIT STATE GENERATOR 


72 
Read/Write 
Wait State Register 0 
73 
Read/Write 
Wait State Register 
1 
74 
Read/Write 
Wait State Register 2 
75 
Read/Write 
Refresh Wait State Register 


DRAM REFRESH 
CONTROLLER 


1C 
Read/Write 
Refresh Control 
Register 


INTERNAL 
CONTROL 
AND DIAGNOSTIC 
PORTS 


61 
Write Internal Control Port 
80 
Read/Write 
Internal Diagnostic 
Port 0 
88 
Read/Write 
Internal Diagnostic 
Port 1 


RELOCATION 
REGISTER 


7F 
Read/Write 
Relocation 
Register 


INTEL RESERVED 
PORTS 


10 
Reserved 
12 
Reserved 
14 
Reserved 
16 
Reserved 
2A 
Reserved 
3D 
Reserved 
3E 
Reserved 
45 
Reserved 
46 
Reserved 
76 
Reserved 
77 
Reserved 
70 
Reserved 
7E 
Reserved 
CC 
Reserved 
CD 
Reserved 
DO 
Reserved 
02 
Reserved 
04 
Reserved 
06 
Reserved 
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APPENDIX 
C 
SYSTEM NOTES 


1. BHE# IN MASTER MODE. 


In Master 
Mode, BHE # will be activated 
during DMA to/from 
8-bit devices 
residing at even locations 
when 
the remaining 
byte count 
is greater 
than 1. 


For example, 
if an 8-bit device is located at 00000000 
Hex and the number of bytes to be transferred 
is > 1, 


the first address/BHE 
# combination 
will be 00000000/0. 
In some systems this will cause the bus controller 
to perform 
two 8-bit accesses, 
the first to 0000000 
Hex and the second 
to 00000001 
Hex. However, 
the 
82370's 
DMA will only read/write 
one byte. This mayor 
may not cause a problem 
in the system depending 
on what is located 
at 00000001 
Hex. 


SolUtion: 


There 
are two solutions 
if BH# 
active 
is unacceptable. 
Of the two, 
number 
2 is the cleanest 
and most 
recommended. 


1. If there is an 8-bit device that uses DMA located 
at an even address, 
do not use that address + 1. The 
limitation 
of this solution 
is that the user must have complete 
control 
over what addresses 
will be used in 
the end system. 


2. Do not allow the Bus Controller 
to split cycles for the DMA. 


The 82370 DMA Controller 
with Integrated 
System 
Peripherals 
is functionally 
inconsistent 
with the data sheet. 


This document 
explains 
the behavior 
of the 82370 Timer Unit and outlines 
subsequent 
limitations 
of the timer 
unit. This document 
also provides 
recommended 
workarounds. 


This errata applies 
only to SLAVE WRITE cycles to the 82370 timer unit. During these cycles, 
the data being 
written 
into the 82370 
timer 
unit may be corrupted 
if asynchronous 
CLKIN 
is not inhibited 
during 
a certain 
"window" 
of the write cycle. 


Please refer to Figure C-2. 


During write cycles to the 82370 timer unit, the 82370 translates 
the 80376 
interface 
signals such as II ADS, 
IIW/R, 
IIM/IO, 
and 
IID/C 
into several 
internal 
signals 
that control 
the operation 
of the internal 
sub-blocks 
(e.g. Timer 
Unit). 


The 82370 timer uint is controlled 
by such internal 
signals. These internal 
signals are generated 
and sampled 
with respect 
to two separate 
clock signals: CLK2 (the system 
clock) and CLKIN (the 82370 timer unit clock). 


Since the CLKIN and CLK2 clock signals are used internally 
to generate 
control 
signals for the interface 
to the 
timer unit, some timing parameters 
must be met in order for the interface 
logic to function 
properly. 


Those 
timing parameters 
are met by inhibiting 
the CLKIN signal for a specific 
window 
during Write Cycles 
to 
the 82370 Timer Unit. 


The CLKIN signal must be inhibited 
using external 
logic, as the GATE function 
of the 82370 timer unit is not 
guaranteed 
to totally 
inhibit CLKIN. 


1.2 Consequences 


This CLKIN inhibits 
circuitry 
guarantees 
proper write cycles to the 82370 timer unit. 


Without 
this 
solution, 
write 
cycles 
to the 
82370 
timer 
unit could 
place 
corrupted 
data 
into the 
timer 
unit 
registers. 
This, in turn, could yield inaccurate 
results and improper 
timer operation. 


A timing waveform 
(Figure C-3) shows the specific 
window 
during which CLKIN must be inhibited. 
Please note 
that CLKIN must only be inhibited 
during the window 
shown in Figure C-3. This window 
is defined 
by two AC 
timing parameters: 


The proposed 
solution 
provides 
a certain 
amount 
of system 
"guardband" 
to make sure that this window 
is 
avoided. 


PAL equations 
for a suggested 
workaround 
are also included. 
Please refer to the comments 
in the PAL codes 
for stated 
assumptions 
of this particular 
workaround. 
A state diagram 
(Figure C-4) is provided 
to help clarify 
how this PAL is designed. 


Figure C-5 shows 
how this PAL would fit into a system workaround. 
In order to show the effect 
of this work- 
around on the CLKIN signal, Figure C-6 shows how CLKIN is inhibited. 
Note that you must still meet the CLKIN 
AC timing parameters 
(e.g. ~7 (min), ~8 (min)) in order for the timer unit to function 
properly. 


Please note that this workaround 
has not been tested. 
It is provided 
as a suggested 
solution. 
Actual 
solutions 
will vary from system 
to system. 


module Timer_82370_Fix 
flag '-r2', '-q2', '-fl', '-t4', '-wl,3,6,5,4,16,7,12,17,18,15,14' 
title 
'82370 Timer Unit CLKIN 
INHIBIT signal PAL Solution 
' 
Timer_Unit_Fix 
device 
'P16R6'; 


"This PAL inhibits the CLKIN signal 
(that comes from an oscillator) 
"during Slave Writes to the 82370 Timer unit. 
""ASSUMPTION: 
This PAL assumes that an external system address 
decoder provides a signal to indicate that an 82370 
Timer Unit access is taking place. This input 
signal is called TMR in this PAL. This PAL also 
assumes that this TMR signal occurs during a 
specific T-State. Please see Figure 2 of this 
document to see when this signal is expected to 
be active by this PAL. 


"NOTE: 
This PAL does not support pipelined 82370 SLAVE 
cycles. 


"(c) Intel Corporation 1989. This PAL is provided as a proposed 
"method of solving a certain 82370 Timer Unit problem. This PAL 
"has not been tested or validated. Please validate this solution 
"for your system and application. 
" 


CLK2 
RESET 
TMR 


pin 
pin 
pin 


!RDY 
!ADS 
CLK 
W_R 
ncl 
nc3 
GNDa 
GNDb 
CLKIN_IN 


pin 
pin 
pin 
pin 
pin 
pin 
pin 
pin 
pin 


"Output Pins" 
Q_O 
pin 


CLKIN_OUT 
pin 
INHIBIT 
pin 
SO 
pin 
Sl 
pin 


1; "System Clock 
2; "Microprocessor RESET signal 
3; "Input from Address Decoder, indicating 
"an access to the timer unit of the 
"82370. 
4; "End of Cycle indicator 
5; "Address and control strobe 
6; "PHI2 clock 
7; "Write/Read Signal" 
8; "No Connect 0" 
9; "No Connect I" 
10; "Tied to ground, documentation 
only 
11; "Output enable, documentation 
only 
12; "Input-CLKIN 
directly from oscillator 


18; "Internal signal only, fed back to 
"PAL logic" 
17; "CLKIN signal fed to 82370 Timer Unit 
16; "CLKIN Inhibit signal 
15; "Unused State Indicator Pin 
14; "Unused State Indicator Pin 


infelGP 


Valid_ADS 
Valid_RDY 
Timer_Acc 


ADS 
II: CLK 
RDY 
II: CLK 
TMR 
II: CLK 


"#ADS 
sampled in PHIl of 80376 T-State 
"#RDY 
sampled 
in PHIl of 80376 T-State 
"Timer Unit Access, 
as provided 
by 
"external Address 
Decoder" 


if RESET then 000 
else if Valid_ADS 
II: W_R then 001 
else 000; 


if RESET then 000 
else if Timer_Acc 
then 010 
else if 
!Timer_Acc then 000 
else 001; 


if RESET then 000 
else if CLK then 110 
else 010; 


if RESET then 000 
else if CLK then 111 
else 110; 


if RESET then 000 
else if CLK then 011 
else 111; 


if RESET then 000 
else if Valid_RDY 
then 000 
else 011; 


if RESET then 000 
else 000; 


if RESET then 000 
else 000; 


EQUATIONS 
Q_O 
:= CLKIN_IN; 
"Latched incoming 
clock. This signal 1s used 
"internally 
to feed into the MUX-ing 
logic" 


CLKIN_OUT 
.= (INHIBIT 
II: CLKIN_OUT 
II: 
!RESET) 
+{!INHIBIT 
II: Q_O 
II: 
!RESET); 


"Equation for CLKIN_OUT. 
This 
"feeds directly 
to the 82370 Timer Unit." 


- 


INHIBIT 
signal PAL Solution 
Equations 
for Module 
Timer_82370_Fix 


!lNHIBIT:= 
(!ClK 
& !INHIBIT 
II ClK 
& SO II RESET II !S1); 


!S1 := 
(RESET 
# INHIBIT 
& 151 
II ClK 
& !INHIBIT 
& !-ROY 
& SO & 51 
# !ClK 
& !S1 
II !S1 & !TMR 
# ISO & !S1); 


ISO : = 
(RESET 
# INHIBIT & !S1 
II ClK 
& !INHIBIT 
& !- ROY & 51 
# !INHIBIT & ISO & 51 
# !ClK 
& ISO 
# !INHIBIT 
& ISO & 51 
# SO & 151 
# 151 & !W_R 
# 
- ADS & !51); 


!O-O 
:= 
(IClKIN_IN); 


!ClKIN_OUT 
: = 
(RESET 
II !ClKIN_OUT 
& INHIBIT 
# !INHIBIT 
& 10-0); 


82370 Timer Unit CLKIN 
INHIBIT signal PAL Solution 
Chip diagram for Module Timer_82370_Fix 


ClK2 
1 
20 


RESET 
2 
19 


TWR 
3 
18 
0_0 


ROY 
4 
17 
ClKIN_OUT 


ADS 
5 
16 
INHIBIT 


ClK 
6 
15 
SO 


W_R 
7 
14 
SI 


ncl 
8 
13 


nc3 
9 
12 
ClKIN_IN 


GNIla 
10 
11 
GNDb 


2OO164-A9 


end of module Timer_82370_Fix 
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W/RH 


M/IOH 


RDYH 
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UNIT 
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TIMER-PAL 
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17 
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CLK 
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RESET 
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5 
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CLKIN 
W/R# 
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CLKIN 
Tt.lR 
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NOTE: 
This solution 
does not support 
pipelined 
82370 
SLAVE 
Cycles. 
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intelGP 
80C286 
CHMOS MICROPROCESSOR 
WITH 
MEMORY MANAGEMENT AND PROTECTION 


• 
High Speed CHMOS 
III Technology 


• 
Pin for Pin, Clock for Clock, and 
Functionally 
Compatible 
with the HMOS 
80286 


• 
12.5 MHz Clock Rate 


• 
Available 
in a Variety 
of Packages: 
- 
68 Pin PLCC (Plastic Leaded 
Chip 
Carrier) 
- 
68 Pin PGA (Pin Grid Array) 


(See 
Packaging 
Spec., 
Order 
# 231369) 
• 
Stop Clock Capability 
- 
Uses Less Power (see Ices 
Specification) 


INTRODUCTION 


The 
80C286 
is an advanced 
16 bit CHMOS 
III microprocessor 
designed 
for 
multi-user 
and 
multi-tasking 
applications 
that require low power and high performance. 
The 80C286 is fully compatible 
with its predecessor 
the HMOS 
80286 
and object-code 
compatible 
with the 8086 and 80386 
family 
of products. 
In addition, 
the 
80C286 
has a power down mode which uses less power, 
making it ideal for mobile applications. 
The 80C286 
has built-in memory 
protection 
that maintains 
a four level protection 
mechanism 
for task isolation, 
a hardware 
task 
switching 
facility 
and 
memory 
management 
capabilities 
that 
map 230 bytes 
(one 
gigabyte) 
of virtual 
address 
space per task (per user) into 224 bytes (16 megabytes) 
of physical 
memory. 


The 80C286 
is upward compatible 
with 8086 and 8088 software. 
Using 8086 real address 
mode, the 80C286 
is object code compatible 
with existing 8086, 8088 software. 
In protected 
virtual address 
mode, the 80C286 
is 
source 
code 
compatible 
with 
8086, 
8088 
software 
which 
may require 
upgrading 
to use virtual 
addresses 
supported 
by the 80C286's 
integrated 
memory 
management 
and protection 
mechanism. 
Both modes operate 
at full 80C286 
performance 
and execute 
a superset 
of the 8086 and 8088 instructions. 


The 80C286 
provides 
special 
operations 
to support 
the efficient 
implementation 
and execution 
of operating 
systems. 
For example, 
one instruction 
can end execution 
of one task, save its state, switch to a new task, load 
its state, and start execution 
of the new task. The 80C286 also supports 
virtual memory systems 
by providing 
a 
segment-not-present 
exception 
and restartable 
instructions. 
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Component 
Pad Views-As 
viewed 
from 
underside 
of 
component 
when 
mounted 
on the board. 
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viewed 
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Table 
1. Pin Description 
The following 
pin function 
descriptions 
are for the 80C286 
microprocessor: 


Symbol 
Type 
Name and Function 


ClK 
I 
SYSTEM 
CLOCK 
provides 
the fundamental 
timing for BOC2B6 systems. 
It is 
divided by two inside the BOC286 to generate 
the processor 
clock. The internal 
divide-by-two 
circuitry 
can be synchronized 
to an external 
clock generator 
by a 
lOW 
to HIGH transition 
on the RESET input. 


015-00 
I/O 
DATA 
BUS inputs data during memory, 
I/O. and interrupt 
acknowledge 
read 
cycles; 
outputs 
data during memory 
and I/O write cycles. The data bus is active 
HIGH and floats to 3-state 
OFF" 
during bus hold acknowledge. 


A23-Ao 
0 
ADDRESS 
BUS outputs 
physical 
memory 
and I/O port addresses. 
AO is lOW 
when data is to be transferred 
on pins 07-0. 
A23-A16 
are lOW 
during I/O 


transfers. 
The address 
bus is active HIGH and floats to 3-state 
OFF< during bus 
hold acknowledge. 


SHE 
0 
BUS HIGH ENABLE 
indicates 
transfer 
or data on the upper byte of the data bus. 


015-8. 
Eight-bit 
oriented 
devices 
assigned 
to the upper byte of the data bus would 


normally 
use SHE to condition 
chip select functions. 
SHE is active lOW 
and floats 


to 3-state 
OFF< during bus hold acknowledge. 


Symbol 
Type 
Name and Function 
m:iE 
SHE and AO Encodlngs 
(Continued) 
&HE Value 
AOValue 
Function 


0 
0 
Word transfer 
0 
1 
Transfer 
on upper half of data bus (015-08) 
1 
0 
Byte transfer 
on lower half of data bus (Dr 
Do) 
1 
1 
Will never occur 
Sf,SO 
0 
BUS CYCLE 
STATUS 
indicates 
initiation 
of a bus cycle and, along with M/iO 
and COOl 
iJiITA, defines 
the type of bus cycle. The bus is in aT s state whenever 
one or both are LOW, 


Sf and SO are active 
LOW and float to 3-state 
OFF" 
during bus hold acknowledge. 


8OC286 Bus Cycle Status 
Definition 


CODIINTA 
Mlro 
51 
SO 
Bus Cycle Initiated 
o (LOW) 
E> 
0 
0 
Interrupt 
acknowledge 
0 
0 
0 
1 
Will not occur 
0 
0 
1 
0 
Will not occur 
0 
0 
1 
1 
None; not a status cycle 
0 
1 
0 
0 
IF A 1 = 1 then halt; else shutdown 
0 
1 
0 
1 
Memory 
data read 
0 
1 
1 
0 
Memory 
data write 
0 
1 
1 
1 
None; not a status cycle 
1 (HIGH) 
0 
0 
0 
Will not occur 
1 
0 
0 
1 
1/0 read 
1 
0 
1 
0 
I/O write 
1 
0 
1 
1 
None; not a status cycle 
1 
1 
0 
0 
Will not occur 
1 
1 
0 
1 
Memory 
instruction 
read 
1 
1 
1 
0 
Will not occur 
1 
1 
1 
1 
None; not a status cycle 


M/iO 
0 
MEMORY 
I/O SELECT 
distinguishes 
memory 
access 
from 1/0 access. 
If HIGH during Ts, a 
memory 
cycle or a halt/shutdown 
cycle is in progress. 
If LOW, an 1/0 cycle or an interrupt 
acknowledge 
cycle is in progress. 
M/iO 
floats to 3-state 
OFF" 
during bus hold 
acknowledge. 


COO/iJiITA 
0 
CODE/INTERRUPT 
ACKNOWLEDGE 
distinguishes 
instruction 
fetch cycles from memory 
data read cycles. Also distinguishes 
interrupt 
acknowledge 
cycles from 1/0 cycles. COOl 
iNiA 
floats to 3-state 
OFF" 
during bus hold acknowledge. 
Its timing is the same as M/iO. 


LOa< 
0 
BUS LOCK indicates 
that other system 
bus masters 
are not to gain control 
of the system 
bus for the current 
and the following 
bus cycle. The ~ 
signal may be activated 
explicitly 
by the "LOCK" 
instruction 
prefix or automatically 
by 80C286 
hardware 
d~ng 
memory 
XCHG instructions, 
interrupt 
acknowledge, 
or descriptor 
table access. 
L 
K is active 
LOW 
and floats to 3-state 
OFF" 
during bus hold acknowledge. 


~ 
I 
BUS READY terminates 
a bus cycle. Bus cycles are extended 
without 
limit until terminated 
by READY 
LOW. REAl:5Y is an active 
LOW synchronous 
input reWiring 
setup and hold 
times relative to the system clock be met for correct 
operation. 
R AOY is ignored 
during 
bus hold acknowledge. 


HOLD 
I 
BUS HOLD REQUEST 
AND HOLD ACKNOWLEDGE 
control 
ownership 
of the 80C286 
HLOA 
0 
local bus. The HOLD input allows another 
local bus master to request 
control 
of the local 
bus. When control 
is granted, 
the 80C286 
will float it': bus drivers to 3-state 
OFF" 
and then 
activate 
HLOA, thus entering 
the bus hold acknowledge 
condition. 
The local bus will remain 
granted 
to the requesting 
master until HOLD becomes 
inactive 
which results 
in the 80C286 
deactivating 
HLOA and regaining 
control 
of the local bus. This terminates 
the bus hold 
acknowledge 
condition. 
HOLD may be asynchronous 
to the system 
clock. These 
signals 
are active HIGH. 


INTR 
I 
INTERRUPT 
REQUEST 
requests 
the 80C286 
to suspend 
its current 
program 
execution 
and service a pending 
external 
request. 
Interrupt 
requests 
are masked 
whenever 
the 
interrupt 
enable 
bit in the flag word is cleared. 
When the 80C286 
responds 
to an interrupt 
request, 
it performs 
two interrupt 
acknowledge 
bus cycles to read an 8-bit interrupt 
vector 
that identifies 
the source of the interrupt. 
To assure program 
interruption,lNTR 
must remain 
active until the first interrupt 
acknowledge 
cycle is completed. 
INTR is sampled 
at the 
beginning 
of each processor 
cycle and must be active 
HIGH at least two processor 
cycles 
before 
the current 
instruction 
ends in order to interrupt 
before the next instruction. 
INTR is 
level sensitive, 
active HIGH, and may be asynchronous 
to the system clock. 


• 


Symbol 
Type 
Name and Function 


NMI 
I 
NON-MASKABLE 
INTERRUPT 
REQUEST 
interrupts 
the 80C286 
with an 
internally 
supplied 
vector value of 2. No interrupt 
acknowledge 
cycles are 
performed. 
The interrupt 
enable 
bit in the 80C286 
flag word does not affect 
this input. The NMI input is active HIGH, may be asynchronous 
to the system 
clock, and is edge triggered 
after internal 
synchronization. 
For proper 
recognition, 
the input must have been previously 
LOW for at least four system 
clock cycles and remain HIGH for at least four system clock cycles. 


PEREa 
I 
PROCESSOR 
EXTENSION 
OPERAND 
REQUEST 
AND ACKNOWLEDGE 
PEACK 
0 
extend the memory 
management 
and protection 
capabilities 
of the 80C286 
to 
processor 
extensions. 
The PEREa 
input requests 
the 80C286 
to perform 
a 
data operand 
transfer 
for a processor 
extension. 
The PEACK output 
signals 
the processor 
extension 
when the requested 
operand 
is being transferred. 


PEREa 
is active HIGH and floats to 3-state 
OFF' 
during bus hold 
acknowledge. 
PEACK may be asynchronous 
to the system clock. 
PEACK is 
active LOW. 


BUSY 
I 
PROCESSOR 
EXTENSION 
BUSY AND ERROR 
indicate 
the operating 
ERROR 
I 
condition 
of a processor 
extension 
to the 80C286. 
An active BUSY input 
stops 80C286 
program 
execution 
on WAIT and some ESC instructions 
until 
BUSY becomes 
inactive 
(HIGH). The 80C286 
may be interrupted 
while 
waiting for BUSY to become 
inactive. 
An active ERROR 
input causes 
the 


, 
80C286 
to perform 
a processor 
extension 
interrupt 
when executing 
WAIT or 
some ESC instructions. 
These inputs are active 
LOW and may be 
asynchronous 
to the system clock. These inputs have internal 
pull-up 
resistors. 


RESET 
I 
SYSTEM 
RESET clears the internal 
logic of the 80C286 
and is active HIGH. 


The 80C286 
may be reinitialized 
at any time with a LOW to HIGH transition 
on 
RESET which 
remains 
active for more than 16 system clock cycles. 
During 
RESET active, the output 
pins of the 80C286 
enter the state shown below: 


80C286 
Pin State 
During 
Reset 


Pin Value 
Pin Names 


1 (HIGH) 
SO, Sf, PEACK, A23-AO, 
BHE, LOCK 
o (LOW) 
MIra, 
COD/INTA, 
HLDA (Note 1) 
3-stateOFP 
D15-DO 


Operation 
of the 80C286 
begins after a HIGH to LOW transition 
on RESET. 
The HIGH to LOW transition 
of RESET must be synchronous 
to the system 
clock. Approximately 
38 CLK cycles from the trailing edge of RESET are 
required 
by the 80C286 
for internal 
initialization 
before 
the first bus cycle, to 
fetch code from the power-on 
execution 
address. 
occurs. 


A LOW to HIGH transition 
of RESET synchronous 
to the system 
clock will 
end a processor 
cycle at the second 
HIGH to LOW transition 
of the system 
clock. The LOW to HIGH transition 
of RESET may be asynchronous 
to the 
system clock; 
however, 
in this case it cannot 
be predetermined 
which phase 
of the processor 
clock will occur during the next system 
clock period. 
Synchronous 
LOW to HIGH transitions 
of RESET are required 
only for 
systems 
where the processor 
clock must be phase synchronous 
to another 
clock. 


Vss 
I 
SYSTEM 
GROUND: 
0 Volts. 


Vcc 
I 
SYSTEM 
POWER: + 5 Volt Power Supply. 


CAP 
I 
SUBSTRATE 
FILTER 
CAPACITOR: 
a 0.047,...F ± 20% 
12V capacitor 
can 
be connected 
between 
this pin and ground for compatibility 
with the HMOS 
80286. 
For systems 
using only an 80C286, 
this pin can be left floating. 


NOTE: 
1. HLDA 
is only Low if HOLD 
is inactive 
(Low). 


The 80C286 is an advanced, high-performance mi- 
croprocessor with specially optimized capabilities for 
multiple user and multi-tasking systems. Depending 
on the application, a 12 MHz 80C286's performance 
is up to ten times faster than the standard 5 MHz 
8086's, while providing complete upward software 
compatibility with Intel's 8086, 88, and 186 family of 
CPU's. 


The 80C286 operates in two modes: 8086 real ad- 
dress mode and protected virtual address mode. 
Both modes execute a superset of the 8086 and 88 
instruction set. 


In 8086 real address mode programs use real ad- 
dresses with up to one megabyte of address space. 
Programs use virtual addresses in protected virtual 
address mode, also called protected mode. In pro- 
t~cted mode, t.he80C286 CPU automatically maps 1 
gigabyte of virtual addresses per task into a 16 
~egabyte real address space. This mode also pro- 
vides memory protection to isolate the operating 
system and ensure privacy of each tasks' programs 
and data. Both modes provide the same base in- 
struction set, registers, and addressing modes. 


The following Functional Description describes first, 
the base 80C286 architecture common to both 
modes, second, 8086 real address mode, and third, 
protected mode. 


The 8086, 88, 186, and 286 CPU family all contain 
the same basic set of registers, instructions, and 
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addressing modes. The 80C286 processor is up- 
ward compatible with the 8086, 8088, and 80186 
CPU's and fully compatible with the HMOS 80286. 


Register Set 


The 80C286 base architecture has fifteen registers 
~s shown in ~igure 3. These registers are grouped 
Into the following four categories: 


Ge~eral Registers: 
Eight 16-bit general purpose 
registers used to contain arithmetic and logical oper- 
ands. Four of these (AX, BX, CX, and OX) can be 
used either in their entirety as 16-bit words or split 
into pairs of separate 8-bit registers. 


Se~ment 
Registers: 
Four 16-bit special purpose 2 


registers select, at any given time, the segments of 
memory that are immediately addressable for code, 
stack, and data. (For usage, refer to Memory Organi- 
zation.) 


Base an~ Index Registers: Four of the general pur- 
pose registers may also be used to determine offset 
addresses of operands in memory. These registers 
may contain base addresses or indexes to particular 
locations within a segment. The addressing mode 
determines the specific registers used for operand 
address calculations. 


Status and Control Registers: The 3 16-bit special 
purpose registers in figure 3A record or control cer- 
tain aspects of the 80C286 processor state including 
the Instruction Pointer, which contains the offset ad- 
dress of the next sequential instruction to be execut- 
ed. 
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Flags Word Description 


The Flags word (Flags) records specific characteris- 
tics of the result of logical and arithmetic instructions 
(bits 0, 2, 4, 6, 7, and 11) and controls the operation 
of the 80C286 within a given operating mode (bits 8 
and 9). Flags is a 16-bit register. The function of the 
flag bits is given in Table 2. 


The instruction set is divided into seven categories: 
data transfer, arithmetic, shift/rotate/logical, 
string 
manipulation, control transfer, high level instruc- 
tions, and processor control. These categories are 
summarized in Figure 4. 


An 80C286 instruction can reference zero, one, or 
two operands; where an operand resides in a regis- 
ter, in the instruction itself, or in memory. Zero-oper- 
and instructions (e.g. NOP and HLT) are usually one 
byte long. One-operand instructions (e.g. INC and 
DEC) are usually two bytes long but some are en- 
coded in only one byte. One-operand instructions 
may reference a register or memory location. Two- 
operand instructions permit the following six types of 
instruction operations: 


-Register 
to Register 
-Memory 
to Register 
-Immediate 
to Register 
-Memory 
to Memory 


-Register 
to Memory 
-Immediate 
to Memory 


Bit 
Name 
Function 
Position 


0 
CF 
Carry Flag-Set 
on high-order 
bit 
carry or borrow; 
cleared 
otherwise 


2 
PF 
Parity Flag-Set 
if low-order 
8 bits 
of result contain 
an even number 
of 
1-bits; cleared 
otherwise 


4 
AF 
Set on carry from or borrow to the 
low order four bits of AL; cleared 
otherwise 
6 
ZF 
Zero Flag-Set 
if result is zero; 
cleared 
otherwise 


7 
SF 
Sign Flag-Set 
equal to high-order 
bit of result (0 if positive, 
1 if negative) 


11 
OF 
Overflow 
Flag-Set 
if result is a too- 


large positive 
number 
or a too-small 
negative 
number 
(excluding 
sign-bit) 
to fit in destination 
operand; 
cleared 
otherwise 


8 
TF 
Single Step Flag-Once 
set, a sin- 
gle step interrupt 
occurs 
after the 
next instruction 
executes. 
TF is 
cleared 
by the single step interrupt. 


9 
IF 
Interrupt-enable 
Flag-When 
set, 
maskable 
interrupts 
will cause the 
CPU to transfer 
control 
to an inter- 
rupt vector 
specified 
location. 


10 
OF 
Direction 
Flag-Causes 
string 
instructions 
to auto decrement 
the appropriate 
index registers 
when set. Clearing 
OF causes 
auto increment. 


Two-operand instructions (e.g. MOV and ADD) are 
usually three to six bytes long. Memory to memory 
operations are provided by a special class of string 
instructions requiring one to three bytes. For de- 
tailed instruction formats and encodings refer to the 
instruction set summary at the end of this document. 


For detailed operation and usage of each instruc- 
tion, see Appendix B of the 80286/80287 Program- 
mer's Reference Manual (Order No. 210498) 


GENERAL 
PURPOSE 


MOV 
Move byte or word 


PUSH 
Push word onto stack 


POP 
Pop word off stack 


PUSHA 
Push all registers 
on stack 


paPA 
Pop all registers 
from stack 


XCHG 
Exchange 
byte or word 


XLAT 
Translate 
byte 


INPUT IOUTPUT 


IN 
Input byte or word 


OUT 
Output byte or word 


ADDRESS 
OBJECT 


LEA 
Load effective 
address 


LOS 
Load pointer 
using OS 


LES 
Load pointer 
using ES 


FLAG TRANSFER 


LAHF 
Load AH register from flags 


SAHF 
Store AH register 
in flags 


PUSHF 
Push flags onto stack 


POPF 
Pop flags off stack 


MOVS 
Move byte or word string 


INS 
Input bytes or word string 


OUTS 
Output bytes or word string 


CMPS 
Compare 
byte or word string 


SCAS 
Scan byte or word string 


LaDS 
Load byte or word string 


STOS 
Store byte or word string 


REP 
Repeat 


REPE/REPZ 
Repeat while equal/zero 


REPNE/REPNZ 
Repeat 
while not equal/not 
zero 


ADDITION 


ADD 
Add byte or word 


ADC 
Add byte or word with carry 


INC 
Increment 
byte or word by 1 


AM 
ASCII adjust for addition 


DAA 
Decimal 
adjust for addition 


SUBTRACTION 


SUB 
Subtract 
byte or word 


SBB 
Subtract 
byte or word with borrow 


DEC 
Decrement 
byte or word by 1 


NEG 
Negate 
byte or word 


CMP 
Compare 
byte or word 


AAS 
ASCII adjust for subtraction 


DAS 
Decimal 
adjust for subtraction 


MULTIPLICATION 


MUL 
Multiple 
byte or word unsigned 


IMUL 
Integer 
multiply 
byte or word 


AAM 
ASCII adjust for multiply 


DIVISION 


DIV 
Divide byte or word unsigned 


IDIV 
Integer divide byte or word 


AAD 
ASCII adjust for division 


CBW 
Convert 
byte to word 


CWO 
Convert 
word to doubleword 


LOGICALS 


NOT 
"Not" 
byte or word 


AND 
"And" 
byte or word 


OR 
"Inclusive 
or" byte or word 


XOR 
"Exclusive 
or" byte or word 


TEST 
"Test" 
byte or word 


SHIFTS 


SHL/SAL 
Shift logical/ arithmetic 
left byte or word 


SHR 
Shift logical right byte or word 


SAR 
Shift arithmetic 
right byte or word 


ROTATES 


ROL 
Rotate 
left byte or word 


ROR 
Rotate 
right byte or word 


RCL 
Rotate through 
carry left byte or word 


RCR 
Rotate through 
carry right byte or word 


• 


intel~ 


CONDITIONAL 
TRANSFERS 
UNCONDITIONAL 
TRANSFERS 


JAlJNBE 
Jump if above/not 
below nor equal 
CALL 
Call procedure 


JAE/JNB 
Jump if above or equal/not 
below 
RET 
Return from procedure 


JB/JNAE 
Jump if below/not 
above nor equal 
JMP 
Jump 


JBE/JNA 
Jump if below or equal/not 
above 


JC 
Jump if carry 
ITERATION 
CONTROLS 


JE/JZ 
Jump if equal/zero 


JG/JNLE 
Jump if greater/not 
less nor equal 
LOOP 
Loop 


JGE/JNL 
Jump if greater 
or equal/not 
less 
LOOPE/LOOPZ 
Loop if equal/zero 


JLlJNGE 
Jump if less/not 
greater 
nor equal 
LOOPNE/LOOPNZ 
Loop if not equal/not 
zero 


JLE/JNG 
Jump if less or equal/not 
greater 
JCXZ 
Jump if register 
CX = 0 


JNC 
Jump if not carry 


JNE/JNZ 
Jump if not equal/not 
zero 
INTERRUPTS 


JNO 
Jump if not overflow 


JNP/JPO 
Jump if not parity/parity 
odd 
INT 
Interrupt 


JNS 
Jump if not sign 
INTO 
Interrupt 
if overflow 


JO 
Jump if overflow 
IRET 
Interrupt 
return 


JP/JPE 
Jump if parity/parity 
even 


JS 
Jump if sign 


FLAG OPERATIONS 


STC 
Set carry flag 


CLC 
Clear carry flag 


CMC 
Complement 
carry flag 


STD 
Set direction 
flag 


CLD 
Clear direction 
flag 


STI 
Set interrupt 
enable flag 


CLI 
Clear interrupt 
enable flag 


EXTERNAL 
SYNCHRONIZATION 


HLT 
Halt until interrupt 
or reset 


WAIT 
Wait for ffiJS( 
not active 


ESC 
Escape to extension 
processor 


LOCK 
Lock bus dUring next instruction 


NO OPERATION 


NOP 
No operation 


EXECUTION 
ENVIRONMENT 
CONTROL 


LMSW 
Load machine 
status word 


SMSW 
I 
Store machine 
status word 


ENTER 
Format stack for procedure 
entry 


LEAVE 
Restore 
stack for procedure 
exit 


BOUND 
Detects 
values outside 
prescribed 
range 


Memory is organized as sets of variable length seg- 
ments. Each segment is a linear contiguous se- 
quence of up to 64K (216) 8·bit bytes. Memory is 
addressed using a two component address (a point- 
er) that consists of a 16-bit segment selector, and a 
16-bit offset. The segment selector indicates the de- 
sired segment in memory. The offset component in- 
dicates the desired byte address within the segment. 
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Memory 
Segment 
Regllter 
Implicit 
Segment 
Reference 
Needed 
Uled 
Selection 
Rule 


Instructions 
Code(CS) 
Automatic 
with instruction 
prefetch 


Stack 
Stack(SS) 
All stack pushes 
and pops. Any memory 
reference 
which uses BP 
as a base register. 


Local Data 
Data (OS) 
All data references 
except 
when relative 
to stack or 
string destination 


External 
(Global) 
Data 
Extra (ES) 
Alternate 
data segment 
and destination 
of string operation 


All instructions that address operands in memory 
must specify the segment and the offset. For speed 
and compact instruction encoding, segment selec- 
tors are usually stored in the high speed segment 
registers. An instruction need specify only the de- 
sired segment register and an offset in order to ad- 
dress a memory operand. 


Most instructions need not explicitly specify which 
segment register is used. The correct segment reg- 
ister is automatically chosen according to the rules 
of Table 3. These rules follow the way programs are 
written (see Figure 6) as independent modules that 
require areas for code and data, a stack, and access 
to external data areas. 


Special segment override instruction prefixes allow 
the implicit segment register selection rules to be 
overridden for special cases. The stack, data, and 
extra segments may coincide for simple programs. 
To access operands not residing in one of the four 
immediately available segments. a full 32-bit pointer 
or a new segment selector must be loaded. 


Addressing Modes 


The 80C286 provides a total of eight addressing 
modes for instructions to specify operands. Two ad- 
dressing modes are provided for instructions that 
operate on register or immediate operands: 


Register Operand Mode: The operand is locat- 
ed in one of the 8 or 16-bit general registers. 
Immediate Operand Mode: The operand is in- 
cluded in the instruction. 


Six modes are provided to specify the location of an 
operand in a memory segment. A memory operand 
address consists of two 16-bit components: seg- 
ment selector and offset. The segment selector is 
supplied by a segment register either implicitly cho- 
sen by the addressing mode or explicitly chosen by 
a segment override prefix. The offset is calculated 
by summing any combination of the following three 
address elements: 
the displacement 
(an 8 or 16-bit immediate val- 
ue contained in the instruction) 
the base (contents of either the BX or BP base 
registers) 
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Figure 6. Segmented Memory Helps 
Structure Software 


the Index (contents of either the SI or 01 index 
registers) 


Any carry out from the 16-bit addition is ignored. 
Eight-bit displacements are sign extended to 16-bit 
values. 


Combinations of these three address elements de- 
fine the six memory addressing modes, described 
below. 


Direct Mode: The operand's offset is contained in 
the instruction as an 8 or 16-bit displacement ele- 
ment. 


Register Indirect Mode: The operand's offset is in 
one of the registers SI, 01, BX, or BP. 


Based Mode: The operand's offset is the sum of an 
8 or 16-bit displacement and the contents of a base 
register (BX or BP). 


• 


Indexed Mode: The operand's offset is the sum of 
an 8 or 16-bit displacement and the contents of an 
index register (SI or 01). 


Based Indexed Mode: The operand's offset is the 
sum of the contents of a base register and an index 
register. 


Based Indexed Mode with Displacement: The op- 
erand's offset is the sum of a base register's con- 
tents, an index register's contents, and an 8 or 16-bit 
displacement. 


The 80C286 
types: 


Integer: 
A signed binary numeric value con- 
tained in an 8·bit byte or a 16-bit 
word. All operations assume a 2's 
complement representation. Signed 
32 and 64-bit integers are supported 
using the Numeric Data Processor, 
the 80287. 
An unsigned binary numeric value 
contained in an 8-bit byte or 16·bit 
word. 
A 32-bit quantity, composed of a 
segment selector component and an 
offset component. Each component 
is a 16-bit word. 
A contiguous sequence of bytes or 
words. A string may contain from 1 
byte to 64K bytes. 


A byte representation of alphanu- 
meric and control characters using 
the ASCII standard of character rep- 
resentation. 
A byte (unpacked) representation of 
the decimal digits 0-9. 
A byte (packed) representation of 
two decimal digits 0-9 
storing one 
digit in each nibble of the byte. 
A signed 32, 64, or 80-bit real num- 
ber representation. (Floating point 
operands are supported using the 
80287 Numeric Processor). 


Figure 7 graphically represents the data types sup- 
ported by the 80C286. 


1/0 Space 


The I/O space consists of 64K 8-bit or 32K 16·bit 
ports. 110 instructions address the 110 space with 


either an 8-bit port address, specified in the instruc- 
tion, or a 16-bit port address in the OX register. 8-bit 
port addresses are zero extended such that A1s-Ae 
are 
LOW. 
110 port addresses 00F8(H) through 


OOFF(H)are reserved. 
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Interrupt 
Related 
Does Return Address 


Function 
Point to Instruction 
Number 
Instructions 
Causing Exception? 


Divide error exception 
0 
DIV,IDIV 
Yes 


Single step interrupt 
1 
All 


NMI interrupt 
2 
INT 2 or NMI pin 


Breakpoint interrupt 
3 
INT3 


INTO detected overflow exception 
4 
INTO 
No 


BOUND range exceeded exception 
5 
BOUND 
Yes 


Invalid opcode exception 
6 
Any undefined opcode 
Yes 


Processor extension not available exception 
7 
ESCorWAIT 
Yes 


Intel reserved-do not use 
8-15 


Processor extension error interrupt 
16 
ESCorWAIT 


Intel reserved-do not use 
17-31 


User defined 
32-255 


Interrupts 


An interrupt transfers execution to a new program 
location. The old program address (CS:IP) and ma- 
chine state (Flags) are saved on the stack to allow 
resumption of the interrupted program. Interrupts fall 
into three classes: hardware initiated, INT instruc- 
tions, and instruction exceptions. Hardware initiated 
interrupts occur in response to an external input and 
are classified as non-maskable or maskable. Pro- 
grams may cause an interrupt with an INT instruc- 
tion. Instruction exceptions occur when an unusual 
condition, which prevents further instruction pro- 
cessing, is detected while attempting to execute an 
instruction. The return address from an exception 
will always point at the instruction causing the ex- 
ception and include any leading instruction prefixes. 


A table containing up to 256 pointers defines the 
proper interrupt service routine for each interrupt. In- 
terrupts 0-31, some of which are used for instruc- 
tion exceptions, are reserved. For each interrupt, an 
8-bit vector'must be supplied to the 80C286 which 
identifies the appropriate table entry. Exceptions 
supply the interrupt vector internally. INT instructions 
contain or imply the vector and allow access to all 
256 interrupts. Maskable hardware initiated inter- 
rupts supply the 8-bit vector to the CPU during an 
interrupt acknowledge bus sequence. Non-maska- 
ble hardware interrupts use a predefined internally 
supplied vector. 


MASKABLE 
INTERRUPT 
(INTR) 


The 80C286 provides a maskable hardware interrupt 
request pin, INTR. Software enables this input by 


setting the interrupt flag bit (IF) in the flag word. All 
224 user-defined interrupt sources can share this in- 
put, yet they can retain separate interrupt handlers. 
An 8-bit vector read by the CPU during the interrupt 
acknowledge sequence (discussed in System Inter- 
face section) identifies the source of the interrupt. 


Further maskable interrupts are disabled while serv- 
icing an interrupt by resetting the IF but as part of 
the response to an interrupt or exception. The saved 
flag word will reflect the enable status of the proces- 
sor prior to the interrupt. Until the flag word is re- 
stored to the flag register, the interrupt flag will be 
zero unless specifically set. The interrupt return in- 
struction includes restoring the flag word, thereby 
restoring the original status of IF. 


NON-MASKABLE 
INTERRUPT 
REQUEST 
(NMI) 


A non-maskable interrupt input (NMI) is also provid- 
ed. NMI has higher priority than INTR. A typical use 
of NMI would be to activate a power failure routine. 
The activation of this input causes an interrupt with 
an internally supplied vector value of 2. No external 
interrupt acknowledge sequence is performed. 


While executing the NMI servicing procedure, the 
80C286 will service neither further NMI requests, 
INTR requests, nor the processor extension seg- 
ment overrun interrupt until an interrupt return (IRET) 
instruction is executed or the CPU is reset. If NMI 
occurs while currently servicing an NMI, its presence 
will be saved for servicing after executing the first 
IRET instruction. IF is cleared at the beginning of an 
NMI interrupt to inhibit INTR interrupts. 


fII 


The 80C286 has an internal interrupt that allows pro- 
grams to execute one instruction at a time. It is 
called the single step interrupt and is controlled by 
the single step flag bit (TF) in the flag word. Once 
this bit is set, an internal single step interrupt will 
occur after the next instruction has been executed. 
The interrupt clears the TF bit and uses an internally 
supplied vector of 1. The IRET instruction is used to 
set the TF bit and transfer control to the next instruc- 
tion to be single stepped. 


When simultaneous interrupt requests occur, they 
are processed in a fixed order as shown in Table 5. 
Interrupt processing involves saving the flags, return 
address, and setting CS:IP to point at the first in- 
struction of the interrupt handler. If other interrupts 
remain enabled they are processed before the first 
instruction of the current interrupt handler is execut- 
ed. The last interrupt processed is therefore the first 
one serviced. 


Table 5. Interrupt Processing Order 


Order 
Interrupt 


1 
Instruction 
exception 


2 
Single step 
3 
NMI 
4 
Processor 
extension 
segment 
overrun 
5 
INTR 


6 
INT instruction 


Processor initialization or start up is accomplished 
by driving the RESET input pin HIGH. RESET forces 
the 80C286 to terminate all execution and local bus 
activity. No instruction or bus activity will occur as 
long as RESET is active. After RESET becomes in- 
active and an internal processing interval elapses, 
the 80C286 begins execution in real address mode 
with the instruction at physical location FFFFFO(H). 
RESET also sets some registers to predefined val- 
ues as shown in Table 6. 


Table 6. 80C286 Initial Register State after RESET 


Flag word 
0002(H) 
Machine 
Status Word 
FFFO(H) 
Instruction 
pointer 
FFFO(H) 
Code segment 
FOOO(H) 
Data segment 
OOOO(H) 
Extra segment 
OOOO(H) 
Stack segment 
OOOO(H) 


HOLD must not be active during the time from the 
leading edge of RESET to 34 CLKs after the trailing 
edge of RESET. 


Machine Status Word Description 
The machine status word (MSW) records when a 
task switch takes place and controls the operating 
mode of the 80C286. It is a 16-bit register of which 
the lower four bits are used. One bit places the CPU 
into protected mode, while the other three bits, as 
shown in Table 7, control the processor extension 
interface. 
After 
RESET, this 
register 
contains 
FFFO(H)which places the 80C286 in 8086 real ad- 
dress mode. 


Table 7. MSW Bit Functions 


Bit 
Name 
Function 
Position 


0 
PE 
Protected 
mode enable 
places the 
BOC2B6 into protected 
mode and cannot 
be cleared 
except 
by RESET. 


1 
MP 
Monitor 
processor 
extension 
allows 
WAIT instructions 
to cause a processor 
extension 
not present 
exception 
(number 
7). 


2 
EM 
Emulate 
processor 
extension 
causes a 
processor 
extension 
not present 
exception 
(number 
7) on ESC 
instructions 
to allow emulating 
a 
processor 
extension. 
3 
TS 
Task switched 
indicates 
the next 
instruction 
using a processor 
extension 
will cause exception 
7, allowing 
software 
to test whether 
the current 
processor 
extension 
context 
belongs 
to the current 
task. 


The LMSW and SMSW instructions can load and 
store the MSW in real address mode. The recom· 
mended use of TS, EM, and MP is shown in Table 8. 


Instructions 
TS 
MP 
EM 
Recommended 
Use 
Causing 
Exception 
7 


0 
0 
0 
Initial encoding 
after RESET. BOC2B6 operation 
is identical 
to BOB6, BB. 
None 


0 
0 
1 
No processor 
extension 
is available. 
Software 
will emulate 
its function. 
ESC 
1 
0 
1 
No processor 
extension 
is available. 
Software 
will emulate 
its function. 
The current 
ESC 
processor 
extension 
context 
may belong to another 
task. 


0 
1 
0 
A processor 
extension 
exists. 
None 
1 
1 
0 
A processor 
extension 
exists. The current 
processor 
extension 
context 
may belong to 
ESCor 
another 
task. The Exception 
7 on WAIT allows software 
to test for an error pending 
WAIT 
from a previous 
processor 
extension 
operation. 
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The HLT instruction stops program execution and 
prevents the CPU from using the local bus until re- 
started. Either NMI, INTR with IF = 1, or RESETwill 
force the 80C286 out of halt. If interrupted, the 
saved CS:IP will point to the next instruction after 
the HLT. 


The 80C286 executes a fully upward-compatible su- 
perset of the 8086 instruction set in real address 
mode. In real address mode the 80C286 is object 
code compatible with 8086 and 8088 software. The 
real address mode architecture (registers and ad- . 
dressing modes) is exactly as described in the 
80C286 Base Architecture section of this Functional 
Description. 


Physical memory is a contiguous array of up to 
1,048,576 bytes (one megabyte) addressed by pins 
Ao through A19and BHE. A20through A23should be 
ignored. 


In real address mode physical memory is a contigu- 
ous array of up to 1,048,576 bytes (one megabyte) 
addressed by pins Ao through A19 and BHE. Ad- 
dress bits A20-A23 may not always be zero in real 
mode. A20-A23 should not be used by the system 
while the 80C286 is operating in Real Mode. 


The selector portion of a pointer is interpreted as the 
upper 16 bits of a 20-bit segment address. The lower 
four bits of the 20-bit segment address are always 
zero. Segment addresses, therefore, begin on multi- 
ples of 16 bytes. See Figure 8 for a graphic repre- 
sentation of address information. 


All segments in real address mode are 64K bytes in 
size and may be read, written, or executed. An ex- 
ception or interrupt can occur if data operands or 
instructions attempt to wrap around the end of a 
segment (e.g. a word with its low order byte at offset 
FFFF(H) and its high order byte at offset OOOO(H).If, 
in real address mode, the information contained in a 
segment does not use the full 64K bytes, the unused 
end of the segment may be overlayed by another 
segment to reduce physical memory requirements. 


Reserved Memory Locations 


The 80C286 reserves two fixed areas of memory in 
real address mode (see Figure 9); system initializa- 


tion area and interrupt table area. Locations from 
addresses FFFFO(H) through 
FFFFF(H) are re- 
served for system initialization. Initial execution be- 
gins at 
location 
FFFFO(H). Locations 
OOOOO(H) 
through 003FF(H) are reserved for interrupt vectors. 


El 
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Figure 8. 8086 Real Address Mode 
Address Calculation 
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Figure 9. 8086 Real Address Mode Initially 
Reserved Memory Locations 
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Interrupt 
Related 
Return Address 
Function 
Number 
Instructions 
Before 
Instruction? 


Interrupt 
table limit too small exception 
8 
INT vector is not within table limit 
Yes 


Processor 
extension 
segment 
overrun 
9 
ESC with memory operand 
extend- 
No 
interrupt 
ing beyond offset FFFF(H) 


Segment 
overrun exception 
13 
Word memory reference 
with offset 
Yes 
= FFFF(H) or an attempt 
to exe- 
cute past the end of a segment 


Interrupts 


Table 9 shows the interrupt 
vectors 
reserved 
for ex- 
ceptions 
and interrupts 
which indicate 
an addressing 
error. The exceptions 
leave the CPU in the state ex- 
isting 
before 
attempting 
to 
execute 
the 
failing 
in- 
struction 
(except for PUSH, POP, PUSHA, or paPA). 
Refer to the next section 
on protected 
mode initiali- 


zation for a discussion 
on exception 
8. 


To 
prepare 
the 
80C286 
for 
protected 
mode, 
the 
L1DT instruction 
is used to load the 24-bit 
interrupt 
table 
base 
and 
16-bit 
limit for the protected 
mode 
interrupt 
table. 
This instruction 
can also set a base 
and limit for the interrupt vector table in real address 
mode. After 
reset, the interrupt 
table base is initial- 
ized to OOOOOO(H)and its size set to 03FF(H). 
These 
values 
are compatible 
with 8086, 88 software. 
L1DT 
should only be executed 
in preparation 
for protected 
mode. 


Shutdown 
occurs 
when 
a severe 
error 
is detected 
that 
prevents 
further 
instruction 
processing 
by the 
CPU. Shutdown 
and halt are externally 
signalled 
via 
a halt bus operation. 
They can be distinguished 
by 
A1 HIGH for halt and A1 LOW for shlltdown. 
In real 
address 
mode, shutdown 
can occur under two con- 
ditions: 


• 
Exceptions 
8 or 13 happen and the IDT limit does 
not include 
the interrupt 
vector. 


• 
A CALL INT or PUSH instruction 
attempts 
to wrap 
around the stack segment 
when SP is not even. 


An NMI input can bring the CPU out of shutdown 
if 
the 
IDT limit is at least OOOF(H) and SP is greater 
than 0005(H), 
otherwise 
shutdown 
can only be exit- 
ed via the RESET input. 


PROTECTED 
VIRTUAL 
ADDRESS 
MODE 


The 80C286 
executes 
a fully upward-compatible 
su- 
perset of the 8086 instruction 
set in protected 
virtual 
address 
mode 
(protected 
mode). 
Protected 
mode 
also provides 
memory 
management 
and protection 
mechanisms 
and associated 
instructions. 


The 80C286 
enters 
protected 
virtual 
address 
mode 
from 
real address 
mode by setting 
the PE (Protec- 
tion Enable) 
bit of the machine 
status word with the 
Load Machine 
Status Word (LMSW) instruction. 
Pro- 
tected 
mode 
offers 
extended 
physical 
and 
virtual 
memory 
address 
space, 
memory 
protection 
mecha- 
nisms, and new operations 
to support 
operating 
sys- 
tems and virtual memory. 


All registers, 
instructions, 
and addressing 
modes de- 
scribed 
in the 80C286 
Base Architecture 
section 
of 
this 
Functional 
Description 
remain 
the 
same. 
Pro- 
grams for the 8086, 88, 186, and real address 
mode 
80C286 can be run in protected 
mode; however, 
em- 
bedded 
constants 
for segment 
selectors 
are differ- 
ent. 


Memory Size 


The protected 
mode 80C286 
provides 
a 1 gigabyte 
virtual 
address 
space 
per task 
mapped 
into 
a 16 
megabyte 
physical address space defined 
by the ad- 
dress 
pin 
A23-Ao 
and 
BHE. 
The 
virtual 
address 
space 
may 
be 
larger 
than 
the 
physical 
address 
space 
since 
any use of an address 
that 
does 
not 
map to a physical 
memory 
location 
will cause are· 
startable 
exception. 


Memory Addressing 


As in real address 
mode, protected 
mode 
uses 32- 
bit pointers, 
consisting 
of 16-bit selector 
and offset 
components. 
The selector, 
however, 
specifies 
an in- 
dex into a memory 
resident table rather than the up- 


per 
16-bits 
of a real 
memory 
address. 
The 
24-bit 


base address of the desired segment is obtained 
from the tables in memory. The 16-bit offset is add- 
ed to the segment base address to form the physical 
address as shown in Figure 10. The tables are auto- 
matically referenced by the CPU whenever a seg- 
ment register is loaded with a selector. All 80C286 
instructions which load a segment register will refer- 
ence the memory based tables without additional 
software. The memory based tables contain 8 byte 
values called descriptors. 


1--- 
I 


SEGlllENT 
DESCAtPTOR 
TABU 


DESCRIPTORS 
Descriptors define the use of memory. Special types 
of descriptors also define new functions for transfer 
of control and task switching. The 80C286 has seg- 
ment descriptors for code, stack and data segments, 
and system control descriptors for special system 
data segments and control transfer operations. De- 
scriptor accesses are performed as locked bus op- 
erations to assure descriptor integrity in multi-proc- 
essor systems. 


CODE AND DATA SEGMENT 
DESCRIPTORS 
(S = 1) 
Besides segment base addresses, code and data 
descriptors contain other segment attributes includ- 
ing segment size (1 to 64K bytes), access rights 
(read only, read/write, execute only, and execute/ 
read), and presence in memory (for virtual memory 
systems) (See Figure 11). Any segment usage vio- 
lating a segment attribute indicated by the segment 
descriptor will prevent the memory cycle and cause 
an exception or interrupt. 


Code or Data Segment 
Descriptor 


07 


+7 
INTEL RESERVED· 
+6 


ACCESS 
+. 
RIGHTS 
BYTE 
8A5E23-1. 
+4 


+. 
IIASE'5-0 
+2 


+1 
UllfT15-G 


15 
07 


Bit 
Name 
Function 
Position 


7 
Present 
(P) 
P=l 
Segment 
is mapped 
into physical 
memory. 


P=O 
No mapping 
to physical 
memory 
exits, base and limit are 


not used. 


6-5 
Descriptor 
Privilege 
Segment 
privilege 
attribute 
used in privilege 
tests. 


Level (DPL) 
4 
Segment 
Descrip- 
5= 
1 
Code or Data (includes 
stacks) 
segment 
descriptor 


tor (5) 
5=0 
System 
Segment 
Descriptor 
or Gate Descriptor 
3 
Executable 
(E) 
E=O 
Data segment 
descriptor 
type is: 


1 


If 
2' 
Expansion 
Direc- 
ED = 0 
Expand 
up segment, 
offsets 
must be S; limit. 
Data 
tion(ED) 
ED = 
1 
Expand down segment, 
offsets 
must be > limit. 
Segment 


1 
Writeable 
(W) 
w=o 
Data segment 
may not be written 
into. 
(5 = 
1, 


W= 
1 
Data segment 
may be written 
into. 
E = 0) 
3 
Executable 
(E) 
E=l 
Code Segment 
Descriptor 
type is: 
} 


If 
2 
Conforming 
(C) 
C=l 
Code segment 
may only be executed 
Code 
when CPL ~ DPL and CPL 
Segment 
remains 
unchanged. 


1 
Readable 
(R) 
R =0 
Code segment 
may not be read 
(5 = 
1, 


R=l 
Code segment 
may be read. 
E = 
1) 


0 
Accessed 
(A) 
A=O 
Segment 
has not been accessed. 
A=l 
Segment 
selector 
has been loaded into segment 
register 


or used by selector 
test instructions. 


Type 
Field 
Definition 


• 


Code and data (including stack data) are stored in 
two types of segments: code segments and data 
segments. Both types are identified and defined by 
segment descriptors (S = 1). Code segments are 
identified by the executable (E) bit set to 1 in the 
descriptor access rights byte. The access rights byte 
of both code and data segment descriptor types 
have three fields in common: present (P) bit, De- 
scriptor Privilege Level (DPL), and accessed (A) bit. 
If P = 0, any attempted use of this segment will 
cause a not-present exception. DPL specifies the 
privilege level of the segment descriptor. DPL con· 
trois when the descriptor may be used by a task 
(refer to privilege discussion below). The A bit shows 
whether the segment has been previously accessed 
for usage profiling, a necessity for virtual memory 
systems. The CPU will always set this bit when ac- 
cessing the descriptor. 


Data segments (S = 1, E = 0) may be either read- 
only or read-write as controlled by the W bit of the 
access rights byte. Read-only (W = 0) data seg- 
ments may not be written into. Data segments may 
grow in two directions, as determined by the Expan- 
sion Direction (ED) bit: upwards (ED = 0) for data 
segments, and downwards (ED = 1) for a segment 
containing a stack. The limit field for a data segment 
descriptor is interpreted differently depending on the 
ED bit (see Figure 11). 


A code segment (S = 1, E = 1) may be execute- 
only or execute/read as determined by the Read- 
able (R) bit. Code segments may never be written 
into and execute-only code segments (R = 0) may 
not be read. A code segment may also have an attri- 
bute called conforming (C). A conforming code seg- 
ment may be shared by programs that execute at 
different privilege levels. The DPL of a conforming 
code segment defines the range of privilege levels 
at which the segment may be executed (refer to priv- 
ilege discussion below). The limit field identifies the 
last byte of a code segment. 


SYSTEM SEGMENT DESCRIPTORS (S = 0, 
TYPE = 1-3) 


In addition to code and data segment descriptors, 
the protected mode 80C286 defines System Seg- 
ment Descriptors. These descriptors define special 
system data segments which contain a table of de- 
scriptors (Local Descriptor Table Descriptor) or seg- 
ments which contain the execution state of a task 
(Task State Segment Descriptor). 


Figure 12 gives the formats for the special system 
data segment descriptors. The descriptors contain a 
24-bit base address of the segment and a 16-bit lim- 
it. The access byte defines the type of descriptor, its 
state and privilege level. The descriptor contents are 
valid and the segment is in physical memory if P = 1. 
If P = 0, the segment is not valid. The DPL field is 
only used in Task State Segment descriptors and 
indicates the privilege level at which the descrip· 
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tor may be used (see Privilege). Since the Local De- 
scriptor Table descriptor may only be used by a spe- 
cial privileged instruction, the DPL field is not used. 
Bit 4 of the access byte is 0 to indicate that it is a 
system control descriptor. The type field specifies 
the descriptor type as indicated in Figure 12. 


System Segment Descriptor 
" 
+7 
INTEL RERllYED' 
+1 


+I 
lASED-II 
+< 


+3 
lASE,•..• 
+3 


+1 
UllfT11-O 


II 
OJ 


Name 
Value 
Description 


TYPE 
1 
Available 
Task State Segment 
(TSS) 
2 
Local Descriptor 
Table 
3 
Busy Task State Segment 
(TSS) 


P 
0 
Descriptor 
contents 
are not valid 
1 
Descriptor 
contents 
are valid 


DPl 
0-3 
Descriptor 
Privilege 
Level 


BASE 
24-bit 
Base Address 
of special 
system data 
number 
segment 
in real memory 


LIMIT 
16-bit 
Offset 
of last byte in segment 
number 


GATE DESCRIPTORS (S = 0, TYPE = 4-7) 


Gates are used to control access to entry points 
within the target code segment. The gate descrip- 
tors are call gates, task gates, interrupt gates and 
trap gates. Gates provide a level of indirection be- 
tween the source and destination of the control 
transfer. This indirection allows the CPU to automati- 
cally perform protection checks and control entry 
point of the destination. Call gates are used to 
change privilege levels (see Privilege), task gates 
are used to perform a task switch, and interrupt and 
trap gates are used to specify interrupt service rou- 
tines. The interrupt gate disables interrupts (resets 
IF) while the trap gate does not. 


Gate Descriptor 
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Name 
Value 
Description 


4 
-Call 
Gate 


TYPE 
5 
-Task 
Gate 
6 
-Interrupt 
Gate 
7 
-Trap 
Gate 


P 
0 
- Descriptor 
Contents 
are not 
valid 
1 
- Descriptor 
Contents 
are 
valid 


DPL 
0-3 
Descriptor 
Privilege 
Level 


WORD 
Number 
of words to copy 
COUNT 
0-31 
from callers stack to called 
procedures 
stack. Only used 
with call gate. 


Selector 
to the target code 


DESTINATION 
16-bit 
segment 
(Call, Interrupt 
or 


SELECTOR 
selector 
Trap Gate) 
Selector 
to the target task 
state segment 
(Task Gate) 


DESTINATION 
16-bit 
Entry point within the target 
OFFSET 
offset 
code segment 


Figure 13. Gate Descriptor Format 


Figure 13 shows the format of the gate descriptors. 
The descriptor contains a destination pointer that 
points to the descriptor of the target segment and 
the entry point offset. The destination selector in an 
interrupt gate, trap gate, and call gate must refer to a 
code segment descriptor. These gate descriptors 
contain the entry point to prevent a program fro,m 
constructing and using an illegal entry point. Task 
gates may only refer to a task state segment. Since 
task gates invoke a task switch, the destination off- 
set is not used in the task gate. 


Exception 13 is generated when the gate is used if a 
destination selector does not refer to the correct de- 
scriptor type. The word count field is used in the call 
gate descriptor to indicate the number of parameters 
(0-31 words) to be automatically copied from the 
caller's stack to the stack of the called routine when 
a control transfer changes privilege levels. The word 
count field is not used by any other gate descriptor. 


The access byte format is the same for all gate de- 
scriptors. P = 1 indicates that the gate contents are 
valid. P = 0 indicates the contents are not valid and 
causes exception 11 if referenced. DPL is the de- 


scriptor privilege level and specifies when this de- 
scriptor may be used by a task (refer to privilege 
discussion below). Bit 4 must equal 0 to indicate a 
system control descriptor. The type field specifies 
the descriptor type as indicated in Figure 13. 


SEGMENT DESCRIPTOR CACHE REGISTERS 
A segment descriptor cache register is assigned to 
each of the four segment registers (CS, SS, DS, ES). 
Segment 
descriptors 
are 
automatically 
loaded 
(cached) into a segment descriptor cache register 
(Figure 14) whenever the associated segment regis- 
ter is loaded with a selector. Only segment descrip- 
tors may be loaded into segment descriptor cache 
registers. Once loaded, all references to that seg- 
ment of memory use the cached descriptor informa- 
tion instead of reaccessing the descriptor. The de- • 
scriptor cache registers are not visible to programs. 
No instructions exist to store their contents. They 
only change when a segment register is loaded. 


SELECTOR FIELDS 
A protected mode selector has three fields: descrip- 
tor entry index, local or global descriptor table indi- 
cator (TI), and selector privilege (RPL) as shown in 
Figure 15. These fields select one of two memory 
based tables of descriptors, select the appropriate 
table entry and allow highspeed testing of the selec- 
tor's privilege attribute (refer to privilege discussion 
below). 
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Figure 14. Descriptor Cache Registers 
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Two tables of descriptors, called descriptor tables, 
contain all descriptors accessible by a task at any 
given time. A descriptor table is a linear array of up 
to 8192 descriptors. The upper 13 bits of the selec- 
tor value are an index into a descriptor table. Each 
table has a 24-bit base register to locate the descrip- 
tor table in physical memory and a 16-bit limit regis- 
ter that confine descriptor access to the defined lim- 
its of the table as shown in Figure 16. A restartable 
exception (13) will occur if an attempt is made to 
reference a descriptor outside the table limits. 


One table, called the Global Descriptor table (GOT), 
contains descriptors available to all tasks. The other 
table, called the Local Descriptor Table (LOT), con- 
tains descriptors that can be private to a task. Each 
task may have its own private LOT. The GOT may 
contain all descriptor types except interrupt and trap 
descriptors. The LOT may contain only segment, 
task gate, and call gate descriptors. A segment can- 
not be accessed by a task if its segment descriptor 
does not exist in either descriptor table at the time of 
access. 
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Figure 16. Local and Global 
Descriptor Table Definition 


The LGDT and LLDT instructions load the base and 
limit of the global and local descriptor tables. LGDT 
and LLDT are privileged, Le. they may only be exe- 
cuted by trusted programs operating at level O.The 
LGDT instruction loads a six byte field containing the 
16-bit table limit and 24-bit physical base address of 
the Global Descriptor Table as shown in Figure 17. 
The LOT instruction loads a selector which refers to 
a Local Descriptor Table descriptor containing the 


Uct::;t/i:tUurt/55 ana 
limit TOran LU I, as snown In I-Ig- 
ure 12. 
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Figure 17. Global Descriptor Table and 
Interrupt Descriptor Table Data Type 


INTERRUPT DESCRIPTOR TABLE 
The protected mode 80C286 has a third descriptor 
table, called the Interrupt Descriptor Table (lOT) 
(see Figure 18). used to define up to 256 interrupts. 
It may contain only task gates, interrupt gates and 
trap gates. The lOT (Interrupt Descriptor Table) has 
a 24-bit physical base and 16-bit limit register in the 
CPU. The privileged L1DT instruction loads these 
registers with a six byte value of identical form to 
that of the LGDT instruction (see Figure 17 and Pro- 
tected Mode Initialization). 
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tHTEAAUPT 
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GATE FOR 
tNTEAAUPT 
#n-1 


INTERRUPT 
DESCRIPTOR 
TABLE 
(lOT) 
GATE FOR 
INTERRUPT 
#1 


GATE FOR 
tHTERRUPT 
#0 till 


Figure 18. Interrupt Descriptor Table DefinitIon 


References to lOT entries are made via INT instruc- 
tions, external interrupt vectors. or exceptions. The 
lOT must be at least 256 bytes in size to allocate 
space for all reserved interrupts. 


Privilege 
The 80C286 has a four-level hierarchical privilege 
system which controls the use of privileged instruc- 
tions and access to descriptors (and their associat- 
ed segments) within a task. Four-level privilege, as 
shown in Figure 19, is an extension of the user/su- 
pervisor mode commonly found in minicomputers. 
The privilege levels are numbered 0 through 3. 
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Figure 19 


Level 0 is the most privileged level. Privilege levels 
provide protection within a task. (Tasks are isola~ed 
by providing private LOT's for each task.) Operating 
system routines, interrupt handlers, and other ~y~- 
tem software can be included and protected Within 
the virtual address space of each task using the four 
levels of privilege. Each task in the system has a 
separate stack for each of its privilege levels. 


Tasks, descriptors, and selectors have a privilege 
level attribute that determines whether the descrip- 
tor may be used. Task privilege effects the use of 
instructions and descriptors. Descriptor and selector 
privilege only effect access to the descriptor. 


TASK PRIVILEGE 
A task always executes at one of the four privilege 
levels. The task privilege level at any specific instant 
is called the Current Privilege Level (CPL)and is de- 
fined by the lower two bits of the CS register. CPL 
cannot change during execution in a single code 
segment. A task's CPL may only be changed by con- 
trol transfers through gate descriptors to a new code 
segment (See Control Transfer). Tasks begin exe- 
cuting at the CPL value specified by the ~o?e.seg- 
ment selector within TSS when the task ISInitiated 
via a task switch operation (See Figure 20). A task 
executing at Level 0 can access all data segments 
defined in the GOT and the task's LOT and is con- 
sidered the most trusted level. A task executing a 
Level 3 has the most restricted access to data and is 
considered the least trusted level. 


DESCRIPTOR 
PRIVILEGE 
Descriptor privilege is specified by the Descriptor 
Privilege Level (DPL) field of the descriptor access 


byte. DPL specifies the least trusted task privile~e 
level (CPL) at which a task may access the deSCrip- 
tor. Descriptors with DPL = 0 are the most protect- 
ed. 
Only 
tasks 
executing 
at 
privilege 
level 
0 


(CPL = 0) may access them. Descriptors with DPL 
= 3 are the least protected (Le. have the least re- 
stricted access) since tasks can access them when 
CPL = 0, 1, 2, or 3. This rule applies to all descrip- 
tors, except LDT descriptors. 


SELECTOR 
PRIVILEGE 
Selector privilege is specified by the Requested Pr!v- 
i1egeLevel (RPL) field in the least significant two bits 
of a selector. Selector RPL may establish a less 


. trusted privilege level than the current privilege level 


for the use of a selector. This level is called the 
task's effective privilege level (EPL). RPL can only 2 
reduce the scope of a task's access to data with this 
selector. A task's effective privilege is the numeric 
maximum of RPL and CPL. A selector with RPL = 0 
imposes no additional restriction on its use while a 
selector with RPL = 3 can only refer to segments at 
privilege Level 3 regardless of the task's CPL. RPL 
is generally used to verify that pointer parameters 
passed to a more trusted procedure are not allowed 
to use data at a more privileged level than the caller 
(refer to pointer testing instructions). 


Descriptor 
Access 
and Privilege 


Validation 
Determining the ability of a task to access a seg- 
ment involves the type of segment to be accessed, 
the instruction used, the type of descriptor used and 
CPL, RPL,and DPL.The two basic types of segment 
accesses are control transfer (selectors loaded into 
CS) and data (selectors loaded into DS, ES or SS). 


DATA SEGMENT ACCESS 
Instructions that load selectors into DS and ES must 
refer to a data segment descriptor or readable code 
segment descriptor. The CPL of the task and the 
RPL of the selector must be the same as or more 
privileged (numerically equal to or lower than) than 
the descriptor DPL. In general, a task can only ac- 
cess data segments at the same or less privileged 
levels than the CPL or RPL (whichever is numerically 
higher) to prevent a program from accessing data it 
cannot be trusted to use. 


An exception to the rule is a readable conforming 
code segment. This type of code segment can be 
read from any privilege level. 


If the privilege checks fail (e.g. DPL is nume~ically 
less than the maximum of CPL and RPL) or an Incor- 
rect type of descriptor is referenced (e.g. gate de- 


scriptor 
or execute 
only code segment) 
exception 
13 
occurs. 
If the segment 
is not present, 
exception 
11 
is generated. 


Instructions 
that load selectors 
into SS must refer to 
data 
segment 
descriptors 
for 
writable 
data 
seg- 
ments. The descriptor 
privilege 
(DPL) and RPL must 
equal 
CPL. All other 
descriptor 
types 
or a privilege 
level violation 
will cause exception 
13. A not present 
fault causes 
exception 
12. 
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ence to a valid Task State Segment 
descriptor 
caus- 
es a task switch (see Task Switch Operation). 
Refer- 
ence to a Task State Segment 
descriptor 
at a more 
privileged 
level than 
the task's 
CPL generates 
ex- 
ception 
13. 


When 
an instruction 
or interrupt 
references 
a gate 
descriptor, 
the gate DPL must have the same or less 
privilege than the task CPL. If DPL is at a more privi- 
leged 
level than CPL, exeception 
13 occurs. 
If the 
destination 
selector 
contained 
in the 
gate 
refer- 
ences 
a code 
segment 
descriptor, 
the 
code 
seg- 
ment descriptor 
DPL must be the same or more priv- 
ileged than the task CPL. If not, Exception 
13 is is- 
sued. After 
the control 
transfer, 
the code 
segment 
descriptors 
DPL is the task's 
new CPL. If the desti- 


nation 
selector 
in the gate references 
a task 
state 
segment, 
a task 
switch 
is automatically 
performed 
(see Task Switch Operation). 


The privilege 
rules on control 
transfer 
require: 


- 
JMP 
or CALL 
direct 
to a code 
segment 
(code 
segment 
descriptor) 
can only be to a conforming 
segment 
with 
DPL of equal 
or greater 
privilege 
than 
CPL or a non-conforming 
segment 
at the 
same privilege 
level. 


- 
interrupts 
within 
the 
task 
or 
calls 
that 
may 
change 
privilege 
levels, can only transfer 
control 
through 
a gate at the same or a less privileged 
level than CPL to a code segment 
at the same or 
more privileged 
level than CPL. 


return 
instructions 
that 
don't 
switch 
tasks 
can 
only 
return 
control 
to 
a code 
segment 
at the 
same or less privileged 
level. 


- 
task switch 
can be performed 
by a call, jump or 
interrupt 
which 
references 
either 
a task gate or 
task state segment 
at the same or less privileged 
level. 


CONTROL 
TRANSFER 


Four types of control 
transfer 
can occur when a se- 
lector is loaded 
into CS by a control 
transfer 
opera- 
tion (see Table 
10). Each transfer 
type can only oc- 
cur if the operation 
which 
loaded 
the selector 
refer- 
ences 
the correct 
descriptor 
type. 
Any violation 
of 
these descriptor 
usage rules (e.g. JMP through 
a call 
gate or RET to a Task 
State 
Segment) 
will cause 
exception 
13. 


The ability to reference 
a descriptor 
for control trans- 
fer is also subject 
to rules of privilege. 
A CALL 
or 
JUMP 
instruction 
may only 
reference 
a code 
seg- 
ment descriptor 
with DPL equal to the task CPL or a 
conforming 
segment 
with 
DPL of equal 
or greater 
privilege 
than CPL. The RPL of the selector 
used to 
reference 
the code 
descriptor 
must have as much 
privilege 
as CPL. 


RET and IRET instructions 
may only reference 
code 
segment 
descriptors 
with descriptor 
privilege 
equal 
to or less privileged 
than the task CPL. The selector 
loaded 
into CS is the return address 
from the stack. 
After the return, the selector 
RPL is the task's 
new 
CPL. If CPL changes, 
the old stack pointer is popped 
after the return address. 


When a JMP or CALL references 
a Task State Seg- 
ment 
descriptor, 
the 
descriptor 
DPL 
must 
be the 
same or less privileged 
than the task's 
CPL. Refer- 


Table 
10. Descriptor 
Types 
Used for Control 
Transfer 


Control 
Transfer 
Types 
Operation 
Types 
Descriptor 
Descriptor 
Referenced 
Table 


Intersegment 
within the same privilege 
level 
JMP, CALL, RET, IREP 
Code Segment 
GOT/LOT 


Intersegment 
to the same or higher privilege 
level Interrupt 
CALL 
Call Gate 
GOT/LOT 
within task may change 
CPL. 
Interrupt 
Instruction, 
Trap or 
lOT 
Exception, 
External 
Interrupt 
Interrupt 
Gate 


Intersegment 
to a lower privilege 
level (changes 
task CPL) 
RET,IREP 
Code Segment 
GOT/LOT 


CALL,JMP 
Task State 
GOT 
Segment 


Task Switch 
CALL, JMP 
Task Gate 
GOT/LOT 


IREP" 
Interrupt 
Instruction, 
Task Gate 
lOT 
Exception, 
External 
Interrupt 


"NT (Nested 
Task bit of flag word) 
= 0 


""NT 
(Nested 
Task bit of flag word) = 1 


PRIVILEGE 
LEVEL 
CHANGES 
Any control transfer that changes CPL within the 
task, causes a change of stacks as part of the oper- 
ation. Initial values of SS:SP for privilege levels 0, 1, 
and 2 are kept in the task state segment (refer to 
Task Switch Operation). During a JMP or CALL con- 
trol transfer, the new stack pointer is loaded into the 
SS and SP registers and the previous stack pointer 
is pushed onto the new stack. 


When returning to the original privilege level, its 
stack is restored as part of the RET or IRET instruc- 
tion operation. For subroutine calls that pass param- 
eters on the Stack and cross privilege levels, a fixed 
number of words, as specified in the gate, are cop- 
ied from the previous stack to the current stack. The 
inter-segment RET instruction with a stack adjust- 
ment value will correctly restore the previous stack 
pointer upon return. 


Protection 
The 80C286 includes mechanisms to protect critical 
instructions that affect the CPU execution state (e.g. 
HLT) and code or data segments from improper us- 
age. These protection mechanisms are grouped into 
three forms: 
Restricted usage of segments (e.g. no write al- 
lowed to read-only data segments). The only seg- 
ments available for use are defined by descrip- 
tors in the Local Descriptor Table (LOT) and 
Global Descriptor Table (GOT). 
Restricted access to segments via the rules of 
privilege and descriptor usage. 
Privileged instructions or operations that may 
only be executed at certain privilege levels as de- 
termined by the CPL and 110 Privilege Level 
(IOPL). The 10PL is defined by bits 14 and 13 of 
the flag word. 


These checks are performed for all instructions and 
can be split into three categories: segment load 
checks (Table 11), operand reference checks (Table 
12), and privileged instruction checks (Table 13). 
Any violation of the rules shown will result in an ex- 
ception. A not-present exception related to the stack 
segment causes exception 12. 


The IRET and POPF instructions do not perform 
some of their defined functions if CPL is not of suffi- 
cient privilege (numerically small enough). Precisely 
these are: 
• The IF bit is not changed if CPL > 10PL. 


• The 10PL field of the flag word is not changed if 
CPL> 
O. 


No exceptions or other indication are given when 
these conditions occur. 


Error 
Description 
Exception 
Number 


Descriptor 
table limit exceeded 
13 


Segment 
descriptor 
not-present 
11 or 12 


Privilege 
rules violated 
13 


Invalid descriptor/segment 
type seg- 
ment register 
load: 


-Read 
only data segment 
load to 
SS 


-Special 
Control 
descriptor 
load to 
DS,ES,SS 
13 
-Execute 
only segment 
load to 
DS, ES,SS 
-Data 
segment 
load to CS 
-Read/Execute 
code segment 
10adtoSS 


Error 
Description 
Exception 
Number 


Write into code segment 
13 
Read from execute-only 
code 
segment 
13 
Write to read-only 
data segment 
13 
Segment 
limit exceeded' 
12 or 13 


NOTE: 
Carry out in offset 
calculations 
is ignored. 


Error 
Description 
Exception 
Number 


CPL * 0 when executing 
the following 
instructions: 
13 
L1DT, LLDT, LGDT, LTR, LMSW, 
CTS,HLT 


CPL > IOPL when executing 
the fol- 
lowing instructions: 
13 
INS, IN, OUTS, OUT, STI, CLI, 
LOCK 


EXCEPTIONS 
The 80C286 detects several types of exceptions 
and interrupts, in protected mode (see Table 14). 
Most are restartable after the exceptional condition 
is removed. Interrupt handlers for most exceptions 
can read an error code, pushed on the stack after 
the return address, that identifies the selector in- 
volved (0 if none). The return address normally 
points to the failing instruction, including all leading 
prefixes. For a processor extension segment over- 
run exception, the return address will not point at the 
ESC instruction that caused the exception; however, 
the processor extension registers may contain the 
address of the failing instruction. 


• 


Return 
Always 
Error 
Interrupt 
Function 
Address 
Restart- 
Code 
Vector 
At Failing 
able? 
on Stack? 
Instruction? 
8 
Double exception 
detected 
Yes 
N02 
Yes 
9 
Processor 
extension 
segment 
overrun 
No 
N02 
No 
10 
Invalid task state segment 
Yes 
Yes 
Yes 
11 
Segment 
not present 
Yes 
Yes 
Yes 
12 
Stack segment 
overrun 
or stack segment 
not present 
Yes 
Yes1 
Yes 
13 
General 
protection 
Yes 
N02 
Yes 


NOTE: 
1. When 
a PUSHA 
or POPA instruction 
attempts 
to wrap around 
the stack 
segment, 
the machine 
state 
after the exception 
will not be restartable 
because 
stack 
segment 
wrap around 
is not permitted. 
This condition 
is identified 
by "e 
value 
of the 
saved 
SP being either 
OOOO(H),0001 (H), FFFE(H), 
or FFFF(H). 


2. These 
exceptions 
indicate 
a violation 
to privilege 
rules or usage 
rules has occurred. 
Restart 
is generally 
not attempted 
under 
those 
conditions. 


These 
exceptions 
indicate 
a violation 
to 
privilege 
rules or usage rules has occurred. 
Restart 
is gener- 
ally not attempted 
under those conditions. 


All these 
checks 
are performed 
for all instructions 
and can be split into three categories: 
segment 
load 
checks 
(Table 11), operand 
reference 
checks 
(Table 
12), and 
privileged 
instruction 
checks 
(Table 
13). 
Any violation 
of the rules shown will result in an ex- 
ception. 
A not-present 
exception 
causes 
exception 
11 or 12 and is restartable. 


The 80C286 
provides 
a built-in task switch operation 
which saves the entire 80C286 
execution 
state (reg- 
isters, 
address 
space, 
and 
a link to the 
previous 
task), loads a new execution 
state, and commences 
execution 
in the 
new 
task. 
Like 
gates, 
the 
task 
switch 
operation 
is invoked 
by executing 
an inter- 
segment 
JMP or CALL instruction 
which 
refers to a 
Task State Segment 
(TSS) or task gate descriptor 
in 
the GOT or LOT. An INT n instruction, 
exception, 
or 
external 
interrupt 
may also 
invoke 
the task 
switch 
operation 
by selecting 
a task gate descriptor 
in the 
associated 
lOT descriptor 
entry. 


The TSS descriptor 
points at a segment 
(see Figure 
20) 
containing 
the 
entire 
80C286 
execution 
state 
while a task gate descriptor 
contains 
a TSS selector. 
The limit field of the descriptor 
must be >002B(H). 


Each task must have a TSS associated 
with it. The 
current 
TSS is identified 
by a special 
register 
in the 
80C286 
called the Task Register 
(TR). This register 
contains 
a selector 
referring 
to the task 
state 
seg- 
ment descriptor 
that defines 
the current TSS. A hid- 
den base and limit register 
associated 
with TR are 
loaded whenever 
TR is loaded with a new selector. 


The IRET instruction 
is used to return control 
to the 
task that called the current 
task or was interrupted. 


Bit 14 in the flag register 
is called 
the Nested 
Task 
(ND 
bit. It controls 
the function 
of the IRET instruc- 
tion. 
If NT = 0, the 
IRET instruction 
performs 
the 
regular current task by popping 
values off the stack; 


when 
NT = 1, IRET performs 
a task switch 
opera- 
tion back to the previous 
task. 


When 
a CALL, 
JMP, 
or INT instruction 
initiates 
a 
task 
switch, 
the old (except 
for case 
of JMP) 
and 
new TSS will be marked 
busy and the back link field 
of the new TSS set to the old TSS selector. 
The NT 
bit of the new task 
is set by CALL or INT initiated 
task 
switches. 
An interrupt 
that 
does 
not cause 
a 
task 
switch 
will 
clear 
NT. NT may also 
be set or 
cleared 
by POPF or IRET instructions. 


The task state segment 
is marked 
busy by changing 
the descriptor 
type field from Type 1 to Type 3. Use 
of a selector 
that references 
a busy task state seg- 
ment causes 
Exception 
13. 


PROCESSOR 
EXTENSION 
CONTEXT 
SWITCHING 


The context 
of a processor 
extension 
(such as the 
80287 
numerics 
processor) 
is not changed 
by the 
task 
switch 
operation. 
A processor 
extension 
con- 
text need only be changed 
when a different 
task at- 


tempts 
to use the processor 
extension 
(which 
still 
contains 
the 
context 
of 
a 
previous 
task). 
The 
80C286 
detects 
the first use of a processor 
exten- 
sion 
after 
a task 
switch 
by causing 
the 
processor 
extension 
not present 
exception 
(7). The 
interrupt 
handler 
may then decide whether 
a context 
change 
is necessary. 


Whenever 
the 
80C286 
switches 
tasks, 
it sets 
the 
Task 
Switched 
(TS) bit of the 
MSW. 
TS indicates 
that a processor 
extension 
context 
may belong 
to a 
different 
task than 
the current 
one. The processor 
extension 
not present 
exception 
(7) will occur when 
attempting 
to execute 
an ESC or WAIT instruction 
if 
TS = 1 and a processor 
extension 
is present 
(MP = 1 
in MSW). 
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The 80C286 
provides 
several 
instructions 
to speed 
pointer testing 
and consistency 
checks for maintain- 
ing system 
integrity 
(see Table 
15). These 
instruc- 


tions use the memory 
management 
hardware 
to ver- 


ify that a selector 
value refers to an appropriate 
seg- 
ment without 
risking 
an exception. 
A condition 
flag 
(ZF) indicates 
whether 
use of the selector 
or seg- 
ment will cause an exception. 
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TASK LOT SELECTOR 


DSSELECTOR 


SSSELECTOR 


CSSELECTOR 


ESSELECTOR 


III 
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BP 


SP 


BX 


DX 


CX 


AX 


FLAGWOlID 


IP (ENTRY 
PDIHT) 


SSFORCPL2 


SPFORCPL2 


SSFORCPL 
1 


SP FOR CPL 1 


SSFORCPLO 
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BACK 
UNK 
SELECTOR 
TD TSS 


TYPE 
DESCRIPTION 


1 
AN AVAILABLE TASK STATE 
SEGMENT. 
MAY BE USED AS 
THE DESnNATlOH 
OF A TASK 
SWITCH 
OPERATION. 


3 
A BUSY TASK STATE SEGMENT. 
CANNOT 
BE USED AS THE 
DESTINATION 
OF A TASK 
SWITCH. 


BYTE 
o 
OFFSET 
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P 
DESCRIPTION 
1 
BASE AND UMIT 
FIELDS 
ARE YAUD 
0 
SEGMENT 
IS NOT PRESENT 
IN 
MEMORY, 
BASE 
AND UIIlT 
ARE NOT 
DEFINED 
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Instruction 
Operands 
Function 


ARPL 
Selector, 
Adjust Requested Privilege 
Register 
Level: adjusts the RPL of 
the selector to the numeric 
maximum of current selec- 
tor RPL value and the RPL 
value in the register. Set 
zero flag if selector RPL 
was changed by ARPL. 


VERR 
Selector 
VERify for Read: sets the 
zero flag if the segment re- 
ferred to by the selector 
can be read. 


VERW 
Selector 
VERify for Write: sets the 
zero flag if the segment re- 
ferred to by the selector 
can be written. 


LSL 
Register, 
Load Segment Limit: reads 
Selector 
the segment limit into the 
register if privilege rules 
and descriptor type allow. 
Set zero flag if successful. 


LAR 
Register, 
Load Access Rights: reads 
Selector 
the 
descriptor 
access 
rights byte into the register 
if privilege rules allow. Set 
zero flag if successful. 


DOUBLE 
FAULT 
AND SHUTDOWN 
If two separate exceptions are detected during a sin- 
gle instruction execution, the 80C286 performs the 
double fault exception (8). If an execution occurs 
during processing of the double fault exception, the 
80C286 will enter shutdown. During shutdown no 
further instructions or exceptions are processed. Ei- 
ther NMI (CPU remains in protected mode) or RE- 
SET (CPU exits protected mode) can force the 
80C286 out of shutdown. Shutdown is externally sig- 
nalled via a HALT bus operation with A1 LOW. 


PROTECTED 
MODE 
INITIALIZATION 
The 80C286 initially executes in real address mode 
after RESET. To allow initialization code to be 
placed at the top of physical memory, A23-A20 will 
be HIGH when the 80C286 performs memory refer- 
ences relative to the CS register until CS is changed. 
A23-A20 will be zero for references to the OS,ES, or 
SS segments. Changing CS in real address mode 
will force A23-A20 LOW whenever CS is used again. 
The initial CS:IP value of FOOO:FFFO 
provides 64K 
bytes of code space for initialization code without 
changing CS. 


Protected mode operation requires several registers 
to be initialized. The GOT and lOT base registers 
must refer to a valid GOT and lOT. After executing 
the LMSW instruction to set PE, the 80C286 must 


intel~ 


immediately execute an intra-segment JMP instruc- 
tion to clear the instruction queue of instructions de- 
coded in real address mode. 


To force the 80C286 CPU registers to match the 
initial protected mode state assumed by software, 
execute a JMP instruction with a selector referring to 
the initial TSS used in the system. This will load the 
task register, local descriptor table register, segment 
registers and initial general register state. The TR 
should point at a valid TSS since any task switch 
operation involves saving the current task state. 


SYSTEM 
INTERFACE 
The 80C286 system interface appears in two forms: 
a local bus and a system bus. The local bus consists 
of address, data, status, and control signals at the 
pins of the CPU. A system bus is any buffered ver- 
sion of the local bus. A system bus may also differ 
from the local bus in terms of coding of status and 
control lines and/or timing and loading of signals. 
The 80C286 family includes several devices to gen- 
erate standard system buses such as the IEEE 796 
standard MULTIBUS. 


Bus Interface 
Signals and Timing 
The 80C286 microsystem local bus interfaces the 
80C286 to local memory and I/O components. The 
interface has 24 address lines, 16 data lines, and 8 
status and control signals. 


The 80C286 CPU, 82C284 clock generator, 82C288 
bus controller, transceivers, and latches provide a 
buffered and decoded system bus interface. The 
82C284 generates the system clock and synchroniz- 
es READY and RESET. The 82C288 converts bus 
operation status encoded by the 80C286 into com- 
mand and bus control signals. These components 
can provide the timing and electrical power drive lev- 
els required for most system bus interfaces including 
the Multibus. 


Physical Memory and I/O Interface 
A maximum of 16 megabytes of physical memory 
can be addressed in protected mode. One mega- 
byte can be addressed in real address mode. Memo- 
ry is accessible as bytes or words. Words consist of 
any two consecutive bytes addressed with the least 
significant byte stored in the lowest address. 


Byte transfers occur on either half of the 16-bit local 
data bus. Even bytes are accessed over 07-00 
while odd bytes are transferred over 015-08. Even- 
addressed words are transferred over 015-00 
in 
one bus cycle, while odd-addressed word require 
two 
bus operations. The first transfers data on 
015-08, and the second transfers data on 07-00. 
Both byte data transfers occur automatically, trans- 
parent to software. 


Two bus signals, Ao and BHE, control transfers over 
the lower and upper halves of the data bus. Even 
address byte transfers are indicated by Ao LOW and 
BHE HIGH. Odd address byte transfers are indicat- 
ed by Ao HIGH and BHE LOW. Both Ao and BHE are 
LOW for even address word transfers. 


The 1/0 address space contains 64K addresses in 
both modes. The 1/0 space is accessible as either 
bytes or words, as is memory. Byte wide peripheral 
devices may be attached to either the upper or lower 
byte of the data bus. Byte-wide 1/0 devices attached 
to the upper data byte (015-08) 
are accessed with 
odd 1/0 addresses. Devices on the lower data byte 
are accessed with even 1/0 addresses. An interrupt 
controller such as Intel's 82C59A-2 must be con- 
nected to the lower data byte (Dr 
Do) for proper 
return of the interrupt vector. 


Bus Operation 
The 80C286 uses a double frequency system clock 
(CLK input) to control bus timing. All signals on the 
local bus are measured relative to the system CLK 
input. The CPU divides the system clock by 2 to pro- 
duce the internal processor clock, which determines 
bus state. Each processor clock is composed of two 
system clock cycles named phase 1 and phase 2. 
The 82C284 clock generator output (PCLK) identi- 
fies the next phase of the processor clock. (See Fig- 
ure 21.) 
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Figure 21. System and Processor 
Clock Relationships 


Six types of bus operations are supported; memory 
read, memory write, 1/0 read, 1/0 write, interrupt ac- 
knowledge, and halt/shutdown. Data can be trans- 
ferred at a maximum rate of one word per two proc- 
essor clock cycles. 


The 80C286 bus has three basic states: idle (Ti), 
send status (Ts), and perform command (To). The 
80C286 CPU also has a fourth local bus state called 
hold (Th). Th indicates that the 80C286 has surren- 
dered control of the local bus to another bus master 
in response to a HOLD request. 


Each bus state is one processor clock long. Figure 
22 shows the four 80C286 local bus states and al- 
lowed transitions. 


Figure 22. 80C286 Bus States 


Bus States 
The idle (Ti) state indicates that no data transfers • 
are in progress or requested. The first active state 
Ts is signaled by status line S1 or SO going LOW 
and identifying phase 1 of the processor clock. Dur- 
ing TS, the command encoding, the address, and 
data (for a write operation) are available on the 
80C286 output pins. The 82C288 bus controller de- 
codes the status signals and generates Multibus 
compatible readlwrite 
command and local trans- 
ceiver control signals. 


After TS, the perform command (Tcl state is en- 
tered. Memory or 1/0 devices respond to the bus 
operation during Tc, either transferring read data to 
the CPU or accepting write data. TC states may be 
repeated as often as necessary to assure sufficient 
time for the memory or 1/0 device to respond. The 
READY signal determines whether Tc is repeated. A 
repeated Testate is called a wait state. 


During hold (Th), the 80C286 will float" all address, 
data, and status output pins enabling another bus 
master to use the local bus. The 80C286 HOLD in- 
put signal is used to place the 80C286 into the Th 
state. The 80C286 HLDA output signal indicates that 
the CPU has entered Th. 


Pipelined Addressing 


The 80C286 uses a local bus interface with pipe- 
lined timing to allow as much time as possible for 
data access. Pipelined timing allows a new bus oper- 
ation to be initiated every two processor cycles, 
while allowing each individual bus operation to last 
for three processor cycles. 


The timing of the address outputs is pipelined such 
that the address of the next bus operation becomes 
available during the current bus operation. Or in oth- 
er words, the first clock of the next bus operation is 
overlapped with the last clock of the current bus op- 
eration. Therefore, address decode and routing logic 
can operate in advance of the next bus operation. 
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Figure 23. Basic Bus Cycle 


External address latches may hold the address sta- 
Command 
Timing Controls 
ble for the entire bus operation, and provide addi- 
tional AC and DC buffering. 
Two system timing customization options, command 
extension and command delay, are provided on the 
The 80C286 does not maintain the address of the 
80C286 local bus. 
current bus operation during all Tc states. Instead, 
the address for the next bus operation may be emit- 
ted during phase 2 of any Tc. The address remains 
valid during phase 1 of the first Tc to guarantee hold 
time, relative to ALE, for the address latch inputs. 


Bus Control 
Signals 
The 82C288 bus controller provides control signals; 
address latch enable (ALE), Read/Write commands, 
data transmit/receive 
(DT/Fi), 
and data enable 
(DEN) that control the address latches, data trans- 
ceivers, write enable, and output enable for memory 
and I/O systems. 


The Address Latch Enable (ALE) output determines 
when the address may be latched. ALE provides at 
least one system CLK period of address hold time 
from the end of the previous bus operation until the 
address for the next bus operation appears at the 
latch outputs. This address hold time is required to 
support MULTIBUS and common memory systems. 


The data bus transceivers are controlled by 82C288 
outputs Data Enable (DEN) and Data Transmit/Re- 
ceive (DT/R). DEN enables the data transceivers; 
while DT/R controls tranceiver direction. DEN and 
DT/R are timed to prevent bus contention between 
the bus master, data bus transceivers, and system 
data bus transceivers. 


Command extension allows additional time for exter- 
nal devices to respond to a command and is analo- 
gous to inserting wait states on the 8086. External 
logic can control the duration of any bus operation 
such that the operation is only as long as necessary. 
The READY input signal can extend any bus opera- 
tion for as long as necessary. 


Command delay allows an increase of address or 
write data setup time to system bus command active 
for any bus operation by delaying when the system 
bus command becomes active. Command delay is 
controlled by the 82C288 CMDLY input. After TS, 
the bus controller samples CMDLY at each failing 
edge of CLK. If CMDLY is HIGH, the 82C288 will not 
activate the command signal. When CMDLY is LOW, 
the 82C288 will activate the command signal. After 
the command becomes active, the CMDLY input is 
not sampled. 


When a command is delayed, the available re- 
sponse time from command active to return read 
data or accept write data is less. To customize sys- 
tem bus timing, an address decoder can determine 
which bus operations require delaying the com- 
mand. The CMDLY i~ut 
does not affect the timing 
of ALE, DEN, or DT/R. 


inteJ~ 
80C286 


READ BUS C't'CLE N 


ClJ( 


PROC 
CLK 


Aa-At 


If. III 


ALE- 
• 
~~~ 
Ell 
~v 


~m~ 
EX> 
c-.v 


231923-24 


Figure 24. CMDL Y Controls 
the Leading 
Edge of Command 
Signal 


Figure 24 illustrates four uses of CMDl Y. Example 1 
of the READY signal, thereby requiring READY be 
shows delaying the read command two system 
synchronous to the system clock. 


ClKs for cycle N-1 and no delay for cycle N, and 
example 2 shows delaying the read command one 
system ClK for cycle N-1 and one system ClK de- 
lay for cycle N. 


Bus Cycle Termination 
At maximum transfer rates, the 80C286 bus alter- 
nates between the status and command states. The 
bus status signals become inactive after Ts so that 
they may correctly signal the start of the next bus 
operation after the completion of the current cycle. 
No external indication of Tc exists on the 80C286 
local bus. The bus master and bus controller enter 
Tc directly after Ts and continue executing Tc cycles 
until terminated by READY. 


READY Operation 
The current bus master and 82C288 bus controller 
terminate each bus operation simultaneously to 
achieve maximum bus operation bandwidth. Both 
are informed in advance by READY active (open- 
collector output from 82C284) which identifies the 
last Tc cycle of the current bus operation. The bus 
master and bus controller must see the same sense 


Synchronous 
Ready 
The 82C284 clock generator provides READY syn- 
chronization from both synchronous and asynchro- 
nous sources (see Figure 25). The synchronous 
ready input (SRDY) of the clock generator is sam- 
pled with the falling edge of ClK at the end of phase 
1 of each Tc. The state of SRDY is then broadcast to 
the bus master and bus controller via the READY 
output line. 


Asynchronous 
Ready 
Many systems have devices or subsystems that are 
asynchronous to the system clock. As a result, their 
ready outputs cannot be guaranteed to meet the 
82C284 SRDY setup and hold 
ime requirements. 


But the 82C284 asynchronous ready input (ARDY) is 
designed to accept such signals. The ARDY input is 
sampled at the beginning of each TC cycle by 
82C284 synchronization logic. This provides one 
system ClK cycle time to resolve its value before 
broadcasting it to the bus master and bus controller. 
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(SEE NOTE. 3.) 


NOTES: 
1. SRDYEN 
is active 
low. 


2. If SRDYEN 
is high, the state of SRDY will no affect 
READY. 
3. ARDYEN 
is active 
low. 


ARDY or ARDYEN must be HIGH at the end of Ts. 
ARDY cannot be used to terminate bus cycle with no 
wait states. 


Each ready input of the 82C284 has an enable pin 
(SRDYEN and ARDYEN) to select whether the cur- 
rent bus operation will be terminated by the synchro- 
nous or asynchronous ready. Either of the ready in- 
puts may terminate a bus operation. These enable 
inputs are active low and have the same timing as 
their respective ready inputs. Address decode logic 
usually selects whether the current bus operation 
should be terminated by ARDY or SRDY. 


Data Bus Control 


Figures 26, 27, and 28 show how the DT/A, DEN, 
data bus, and address signals operate for different 
com!?inationsof repd, write, and idle bus operation~ 
DT/R goes active (LOW) for a read operation. DT/R 
remains HIGH before, during, and between write op- 
erations. 


The data bus is driven with write data during the 
second phase of Ts' The delay in write data timing 
allows the read data drivers, from a previous read 
cycle, sufficient time to enter 3-state OFF" before 
the 80C286 CPU begins driving the local data bus 
for write operations. Write data will always remain 
valid for one system clock past the last Tc to provide 
sufficient hold time for Multibus or other similar 
memory or I/O systems. During write-read or write- 
idle sequences the data bus enters 3-state OFF" 
during the second phase of the processor cycle after 
the last Tc. In a write-write sequence the data bus 
does not enter 3-state OFF" between TC and Ts. 


Bus Usage 


The 80C286 local bus may be used for several func- 
tions: instruction data transfers, data transfers by 
other bus masters, instruction fetching, processor 
extension data transfers, interrupt acknowledge, and 
halt/shutdown. This section describes local bus ac- 
tivities which have special signals or requirements. 
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Figure 28. Back to Back Write-Write 
Cycles 


Lock will be active for the first and subsequent cy- 
cles of a series of cycles to be locked. Lock will not 
be shown active during the last cycle to be locked. 
For the next-to-Iast.cycle, Lock will become inactive 
at the end of the first Tc regardless of the number of 
wait-states inserted. For Interrupt-Acknowledge cy- 
cles, Lock will be active for each cycle, and will be- 
come inactive at the end of the first Tc for each cy- 
cle regardless of the number of wait-states inserted. 


HOLD AND HLDA allow another bus master to gain 
control of the local bus by placing the 80C286 bus 
into the Th state. The sequence of events required 
to pass control between the 80C286 and another 
local bus master are shown in Figure 29. 


In this example, the 80C286 is initially in the Th state 
as signaled by HLDA being active. Upon leaving Th, 
as signaled by HLDA going inactive, a write opera- 
tion is started. During the write operation another 
local bus master requests the local bus from the 
80C286 as shown by the HOLD signal. After com- 
pleting the write operation, the 80C286 performs 
one Tj bus cycle, to guarantee write data hold time, 
then enters Th as signaled by HLDA going active. 


The CMDLY signal and ARDY ready are used to 
start and stop the write bus command, respectively. 
Note that SRDY must be inactive or disabled by 
SRDYEN to guarantee ARDY will terminate the cy- 
cle. 


HOLD must not be active during the time from the 
leading edge of RESET until 34 CLKs following the 
trailing edge of RESET. 


The CPU asserts an active lock signal during Inter- 
rupt-Acknowledge cycles, the XCHG instruction, and 
during some descriptor accesses. Lock is also as- 
serted when the LOCK prefix is used. The LOCK 
prefix may be used with the following ASM-286 as- 
sembly instructions; MOVS, INS, and OUTS. For bus 
cycles other than 
Interrupt-Acknowledge cycles, 


Instruction 
Fetching 


The 80C286 Bus Unit (BU) will fetch instructions 
ahead of the current instruction being executed. This 
activity is called prefetching. It occurs when the local 
bus would otherwise be idle and obeys the following 
rules: 


A prefetch bus operation starts when at least two 
bytes of the 6-byte prefetch queue are empty. 


The prefetcher normally performs word prefetches 
independent of the byte alignment of the code seg- 
ment base in physical memory. 


The prefetcher will perform only a byte code fetch 
operation for control transfers to an instruction be- 
ginning on a numerically odd physical address. 


Prefetching stops whenever a control transfer or 
HLT instruction is decoded by the IU and placed into 
the instruction queue. 


In real address mode, the prefetcher may fetch up to 
6 bytes beyond the last control transfer or HLTin- 
struction in a code segment. 
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In protected mode, the prefetcher will never cause a 
segment overrun exception. The prefetcher stops at 
the last physical memory word of the code segment. 
Exception 13 will occur if the program attempts to 
execute beyond the last full instruction in the code 
segment. 


If the last byte of a code segment appears on an 
even physical memory address, the prefetcher will 
read the next physical byte of memory (perform a 
word code fetch). The value of this byte is ignored 
and any attempt to execute it causes exception 13. 
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NOTES: 
1. Status 
lines are not driven 
by 80C286, 
yet remain 
high due to internal 
pullup 
resistors 
during 
HOLD state. See section 
on bus hold circuitry. 
2. Address, 
M/ID 
and 
COD/INTA 
may start 
floating 
during 
any Tc 
depending 
on when 
internal 
80C286 
bus arbiter 
decides 
to release 
bus to external 
HOLD. The float starts 
in </>2of Tc. See section 
on bus hold circuitry. 


3. SHE and LOCK may start floating 
after the end of any Tc depending 
on when 
internal 
80C286 
bus arbiter 
decides 
to 
release 
bus to external 
HOLD. The float starts 
in </>1of Tc. See section 
on bus hold circuitry. 


4. The minimum 
HOLD to HLDA time is shown. 
Maximum 
is one TH longer. 


5. The earliest 
HOLD time is shown. 
It will always 
allow a subsequent 
memory 
cycle 
if pending 
is shown. 


6. The minimum 
HOLD 
to HLDA 
time 
is shown. 
Maximum 
is a function 
of the instruction, 
type of bus cycle 
and other 
machine 
state 
(i.e., Interrupts, 
Waits, 
Lock, etc.). 


7. Asynchronous 
ready 
allows 
termination 
of the cycle. 
Synchronous 
ready does 
not signal 
ready 
in this example. 
Syn- 
chronous 
ready state is ignored 
after ready is signaled 
via the asynchronous 
input. 
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The processor extension interface uses 1/0 port ad- 
dresses 00F8(H), OOFA(H),and OOFC(H)which are 
part of the 1/0 port address range reserved by Intel. 
An ESC instruction with Machine Status Word bits 
EM = 0 and TS = 0 will perform 1/0 bus operations 
to one or more of these 1/0 port addresses indepen- 
dent of the value of 10PL and CPL. 


ESC instructions with memory references enable the 
CPU to accept PEREQ inputs for processor exten- 
sion operand transfers. The CPU will determine the 
operand starting address and readlwrite 
status of 
the instruction. For each operand transfer, two or 
three bus operations are performed, one word trans- 
fer with 1/0 port address OOFA(H)and one or two 
bus operations with memory. Three bus operations 
are required for each word operand aligned on an 
odd byte address. 


NOTE: 
Odd-aligned numerics instructions should be avoid- 
ed when using an 80C286 system running six or 
more memory-write wait-states. The 80C286 can 
generate an incorrect numerics address if all the 
following conditions are met: 


- 
Two floating point (FP) instructions are fetched 
and in the 80C286 queue. 
- 
The first FP instruction is any floating point store 
except FSTSW AX. 


- 
The second FP instruction is any floating point 
store except FSTSW AX. 
- 
The second FP instruction accesses memory. 
- 
The operand of the first instruction is aligned on 
an odd memory address. 
- 
More than five wait-states are inserted during ei- 
ther of the last two memory write transfers 
(transferred as two bytes for odd aligned oper- 
ands) of the first instruction. 
The second FP instruction operand address will be 
incremented by one if these conditions are met. 
These conditions are most likely to occur in a multi- 
master system. For a hardware solution, contact 
your local Intel representative. 


Ten or more command delays should not be used 
when accessing the numerics coprocessor. Exces- 
sive command delays can cause the 80C286 and 
80287 to lose synchronization. 


Interrupt 
Acknowledge 
Sequence 


Figure 30 illustrates an interrupt acknowledge se- 
quence performed by the 80C286 in response to an 


INTR input. An interrupt acknowledge sequence 
consists of two INTA bus operations. The first allows 
a master 82C59A-2 Programmable Interrupt Control- 
ler (PIC) to determine which if any of its slaves 
should return the interrupt vector. An eight bit vector 
is read on 00-07 
of the 80C286 during the second 
INTA bus operation to select an interrupt handler 
routine from the interrupt table. 


The Master Cascade Enable (MCE) signal of the 
82C288 is used to enable the cascade address driv- 
ers, during INTA bus operations (See Figure 30), 
onto the local address bus for distribution to slave 
interrupt controllers via the system address bus. The 
80C286 emits the LOCK signal (active LOW) during 
Ts of the first INTA bus operation. A local bus "hold" 
request will not be honored until the end of the sec- 
ond INTA bus operation. 


Three idle processor clocks are provided by the 
80C286 between INTA bus operations to allow for 
the minimum INTA to INTA time and CAS (cascade 
address) out delay of the 82C59A-2. The second 
INTA bus operation must always have at least one 
extra Testate 
added via logic controlling READY. 
This is needed to meet the 82C59A-2 minimum 
INTA pulse width. 


Local Bus Usage Priorities 


The 80C286 local bus is shared among several in- 
ternal units and external HOLD requests. In case of 
simultaneous requests, their relative priorities are: 
(Highest) Any transfers which assert U5CK either 
explicitly (via the LOCK instruction prefix) 
or implicitly (Le. some segment descriptor 
accesses, 
interrupt 
acknowledge 
se- 
quence, or an XCHG with memory). 
The second of the two byte bus opera- 
tions required for an odd aligned word op- 
erand. 


The second or third cycle of a processor 
extension data transfer. 
Local bus request via HOLD input. 


Processor extension data operand trans- 
fer via PEREQ input. 


Data transfer performed by EU as part of 
an instruction. 
(Lowest) 
An instruction prefetch request from BU. 
The EU will inhibit prefetching two proc- 
essor clocks in advance of any data 
transfers to minimize waiting by EU for a 
prefetch to finish. 
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NOTES: 
1. Data is ignored, 
upper data bus, 08-015, should 
not change 
state during this time. 


2. First INTA cycle 
should 
have at least one wait state inserted 
to meet 8259A 
minimum 
INTA pulse wid1h. 


3. Second 
INTA cycle 
should 
have at least one wait state inserted 
to meet 8259A 
minimum 
INTA pulse width. 


4. IT5CK is active for the first INTA cycle to prevent 
a bus arbiter 
from 
releasing 
the bus between 
INTA cycles 
in a multi- 


master 
system. IT5CK is also active 
for the second 
INTA cycle. 


5. A23-Ao 
exits 3-state 
OFF dUring </>2of the second 
Tc in the INTA cycle. 
See section 
on bus hold circuitry. 


6. Upper data bus should 
not change 
state dUring this time. 


Halt or Shutdown Cycles 


The 80C286 externally indicates halt or shutdown 
conditions as a bus operation. These conditions oc- 
cur due to a. HLT instruction or multiple protection 
exceptions while attempting to execute one instruc- 
tion. A halt or shutdown bus operation is signalled 
when Sf, 'SO and COD/INTA are LOW and MilO is 
HIGH. A1 HIGH indicates halt, and A1 LOW indi- 
cates shutdown. The 82C288 bus controller does 
not issue ALE, nor is READY required to terminate a 
halt or shutdown bus operation. 


During halt or shutdown, the 80C286 may service 
PEREQ or HOLD requests. A processor extension 
segment overrun exception during shutdown will in- 
hibit further service of PEREQ. Either NMI or RESET 
will force the 80C286 out of either halt or shutdown. 
An INTR, if interrupts are enabled, or a processor 
extension segment overrun exception will also force 
the 80C286 out of halt. 
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THE POWER-DOWN 
FEATURE 
OF 
THE 80C286 


The 80C286, unlike the HMOS part, can enter into a 
power-down mode. By stopping the processor CLK, 
the processor will enter a power-down mode. Once 
in the power-down mode, all 80C286 outputs remain 
static (the same state as before the mode was en- 
tered). The 80C286 D.C. specification Ices rates the 
amount of current drawn by the processor when in 
the power-down mode. When the CLK is reapplied 
to the processor, it will resume execution where it 
was interrupted. 


In order to obtain maximum benefits from the power- 
down mode, certain precautions should be taken. 
When in the power-down mode, all 80C286 outputs 
remain static and any output that is turned on and 
remains in a HIGH condition will source current 
when loaded. Best low-power performance can be 
obtained by first putting the processor in the HOLD 


condition (turning off all of the output buffers), and 
then stopping the processor CLK in the phase 2 
state. In this condition, any output that is loaded will 
source only the "Bus Hold Sustaining Current". 


When stopping the processor clock, minimum clock 
high and low times cannot be violated (no glitches 
on the clock line). 


Violating this condition can cause the 80C286 to 
erase its internal register states. Note that all inputs 
to 
the 
80C286 (CLK, HOLD, PEREQ, RESET, 


READY, INTR, NMI, BUSY, and ERROR) should be 
at Vcc or Vss; any other value will cause the 
80C286 to draw additional current. 


When coming out of power-down mode, the system 
CLK must be started with the same polarity in which 
it was stopped. An example power down sequence 
is shown in Figure 31. 


VALID 
:: 


VALID 
:: 
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To avoid high current conditions caused by floating 
inputs to peripheral CMOS devices and eliminate the 
need for pull-up/down resistors, "bus-hold" circuitry 
has been used on all tri-state 80C286 outputs. See 
Table A for a list of these pins and Figures Ba and 
Bb for a complete description of which pins have 
bus hold circuitry. These circuits will maintain the 
last valid logic state if no driving source is present 
(i.e., an unconnected pin or a driving source which 
goes to a high impedance state). To overdrive the 
"bus hold" circuits, an external driver must be capa- 
ble of supplying the maximum "Bus Hold Overdrive" 
sink or source current at valid input voltage levels. 
Since this "bus hold" circuitry is active and not a 


"resistive" type element, the associated power sup- 
ply current is negligible and power dissipation is sig- 
nificantly reduced when compared to the use of pas- 
sive pull-up resistors. 


Signal 
Pin 
Polarity 
Pulled to 
Location 
when trl-stated 


S1, SO,PEACK,LOCK 4-6,68 
Hi, See Figure Bb 


Data Bus (00-015) 
36-51 
Hi/Lo, 
See Figure Ba 


COO/INTA, MilO 
66-67 
Hi/Lo, 
See Figure Ba • 


The versatile bus structure of the 80C286 microsys- 
tem, with a full complement of support chips, allows 
flexible configuration of a wide range of systems. 
The basic configuration, shown in Figure 32, is simi- 
lar to an 8086 maximum mode system. It includes 
the CPU plus an 82C59A-2 interrupt controller, 
82C284 clock generator, and the 82C288 Bus Con- 
troller. 


As indicated by the dashed lines in Figure 32, the 
ability to add processor extensions is an integral fea- 
ture of 80C286 microsystems. The processor exten- 
sion interface allows external hardware to perform 
special functions and transfer data concurrent with 
CPU execution of other instructions. Full system in- 
tegrity is maintained because the 80C286 supervis- 
es all data transfers and instruction execution for the 
processor extension. 


The 80287 has all the instructions and data types of 
an 8087. The 80287 NPX can perform numeric cal- 
culations and data transfers concurrently with CPU 
program execution. Numerics code and data have 
the same integrity as all other information protected 
by the 80C286 protection mechanism. 


The 80C286 can overlap chip select decoding and 
address propagation during the data transfer for the 
previous bus operation. This information is latched 
by ALE during the middle of a Ts cycle. The latched 
chip select and address information remains stable 
during the bus operation while the next cycle's ad- 


UI ,,::;::; I::; Delngaecoaea ana propagated into the sys- 
tem. Decode logic can be implemented with a high 
speed PROM or PAL. 


The optional decode logic shown in Figure 32 takes 
advantage of the overlap between address and data 
of the 80C286 bus cycle to generate advanced 
memory and 10-select signals. This minimizes sys- 
tem performance degradation caused by address 
propagation and decode delays. In addition to se- 
lecting memory and I/O, the advanced selects may 
be used with configurations supporting local and 
system buses to enable the appropriate bus inter- 
face for each bus cycle. The COD/INTA and M/IO 
signals are applied to the decode logic to distinguish 
between interrupt, I/O, code and data bus cycles. 


By adding a bus arbiter, the 80C286 provides a 
MUl TIBUS system bus interface as shown in Figure 
33. 
The 
ALE 
output 
of 
the 
82C288 
for 
the 
MUl TIBUS bus is connected to its CMDl Y input to 
delay the start of commands one system ClK as 
required to meet MUl TIBUS address and write data 
setup times. This arrangement will add at least one 
extra Testate to each bus operation which uses the 
MUlTIBUS. 


A second 82C288 bus controller and additional 
latches and transceivers could be added to the local 
bus of Figure 33. This configuration allows the 
80C286 to support an on-board bus for local memo- 
ry and peripherals, and the MUl TIBUS for system 
bus interfacing. 
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Figure 34 shows the addition of dual ported dynamic 
memory between the MULTIBUS system bus and 
the 80C286 local bus. The dual port interfacl;!is pro- 
vided by the 8207 Dual Port DRAM Controller. The 
8207 runs synchronously with the CPU to maximize 
throughput for local memory references. It also arbi- 
trates between requests from the local and system 
buses and performs functions such as refresh, 


initialization of RAM, and read/modify/write 
cycles. 


The 8207 combined with the 8206 Error Checking 
and Correction memory controller provide for single 
bit error correction. The dual-ported memory can be 
combined with a standard MULTIBUS system bus 
interface to maximize performance and protection in 
multiprocessor system configurations. 
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80C286 
Pin and Name 
PullupValue 
Purpose 
4-Sf 
Pull SO, s:t; and PEACK inactive during 80C286 hold periods 
5-50 
20 Kn 
±10% 
(Note 1) 
6-PEACK 


63-READY 
910n 
±5% 
Pull READY inactive within required minimum time (CL = 150 pF, 
IR s 7mA) 


NOTE: 
1. Pullup resistors are not required for SO and S'I when the corresponding pins on the 82C284 are connected to SO and S'I. 


80C286 
IN-CIRCUIT 
EMULATION 
CONSIDERATIONS 


One of the advantages 
of using the 80C286 
is that 
full in-circuit 
emulation 
development 
support 
is avail- 
able 
through 
either 
the 
121CE 80286 
probe 
for 
8 MHz/10 
MHz or ICE286 for 12.5 MHz designs. 
To 
utilize 
these 
powerful 
tools 
it is necessary 
that the 
designer 
be aware 
of a few 
minor 
parametric 
and 
functional 
differences 
between 
the 80C286 
and the 
in-circuit 
emulators. 
The 121CEdatasheet 
(121CEInte- 
grated Instrumentation 
and In-Circuit 
Emulation 
Sys- 
tem, order 
#210469) 
contains 
a detailed 
description 
of these 
design 
considerations. 
The 
ICE286 
Fact 
Sheet (#280718) 
and User's Guide (#452317) 
con- 
tain design considerations 
for the 80C286 
12.5 MHz 
microprocessor. 
It is recommended 
that the appro- 
priate document 
be reviewed 
by the 80C286 
system 
designer 
to determine 
whether 
or not these 
differ- 
ences 
affect 
the design. 


PACKAGE 
THERMAL 
SPECIFICATIONS 


The 80C286 
Microprocessor 
is specified 
for opera- 
tion when case temperature 
(Tcl is within the range 
of 
0·C-85·C. 
Case 
temperature, 
unlike 
ambient 
temperature, 
is easily measured 
in any environment 


Table 
17. Thermal 
Resistances 
(·C/Watt) 
8JC and 8JA 


8JA versus Airflow 


Package 
8JC 
«/mln 
(m/sec) 


0 
200 
400 
600 
800 
1000 


CO) (1.01) (2.03) (3.04) (4.06) (5.07) 


68-Lead PGA 
5.5 29 
22 
16 
15 
14 
13 


68-Lead PLCC 
w/lnternal 
8 
29 
23 
21 
18 
16 
15 
Heat Speader 


to determine 
whether 
the 80C286 
Microprocessor 
is 
within the specified 
operating 
range. The case tem- 
perature 
should 
be measured 
at the center 
of the 
top surface 
of the component. 


The 
maximum 
ambient 
temperature 
(TA) allowable 
without 
violating 
TC specifications 
can be calculated 
from the equations 
shown 
below. 
TJ is the 80C286 
junction 
temperature. 
P is the power 
dissipated 
by 
the 80C286. 


TJ = Tc + p. 8JC 
TA = TJ - p. 8JA 
Tc = TA + p. [8JA - 
8Jcl 


Values for 8JA and 8JC are given in Table 
17. 8JA is 
given at various 
airflows. 
Table 
18 shows 
the maxi- 
mum TA allowable 
(without 
exceeding 
Tcl at various 
airflows. 
Note that the 80C286 
PLCC package 
has 
an 
internal 
heat 
spreader. 
TA can 
be further 
im- 
proved by attaching 
"fins" 
or an external 
"heat 
sink" 
to the package. 


Junction 
temperature 
calculations 
should use an Icc 
value 
that 
is measured 
without 
external 
resistive 
loads. 
The 
external 
resistive 
loads 
dissipate 
addi- 
tional power external 
to the 80C286 
and not on the 
die. This increases 
the resistor 
temperature, 
not the 
die 
temperature. 
The 
full 
capacitive 
load 
(CL 
= 
100 pF) should 
be applied 
during the Icc measure- 
ment. 


TA{*C) versus Airflow 


Package 
«/mln 
(m/sec) 


0 
200 
400 
600 
800 
1000 
(0) (1.01) 
(2.03) (3.04) (4.06) (5.07) 


68-Lead PGA 
68 
73 
78 
78 
79 
80 


68 Lead-PLCC 
w/lnternal 
70 
74 
76 
78 
79 
80 
Heat Speader 


NOTE: 
The numbers in Table 18 were calculated using a Vee of 5.0V, and an lee of 150 mA, which is representative of the worst 
case lee at Te = 85'C with the outputs unloaded. 
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NOTICE: This is a production data sheet. The specifi- 
cations are subject to change without notice. 


• WARNING: Stressing the device beyond the "Absolute 
Maximum 
Ratings" 
may 
cause 
permanent 
damage. 


These are stress ratings 
only. Operation 
beyond 
the 
"Operating 
Conditions" 
is not recommended 
and ex- 
tended exposure 
beyond 
the 
"Operating 
Conditions" 


may affect device reliability. 


Ambient 
Temperature 
under Bias 
.... 
O·C to + 70·C 


Storage Temperature 
-65·C 
to+ 
150·C 


Voltage 
on Any Pin with 
Respect to Ground 
-1.0V 
to + 7V 


Power Dissipation 
1.1W 


Symbol 
Parameter 
Mln 
Max 
Typ 
Unit 
Test Conditions 


Icc 
Supply Current 
200 
125 
mA 
CL = 100 pF (Note 1) 


Ices 
Supply Current (Static) 
5 
0.5 
mA 
(Note 2) 


CCLK 
ClK 
Input Capacitance 
20 
pF 
FREQ = 1 MHz (Note 3) 


CIN 
Other Input Capacitance 
10 
pF 
FREQ = 1 MHz (Note 3) 


Co 
Input/Output 
Capacitance 
20 
pF 
FREQ = 1 MHz (Note 3) 


NOTES: 
1. Tested at maximum frequency with no resistive loads on the outputs. 
2. Tested while clock stopped in phase 2 and inputs at Vcc or Vss with the outputs unloaded. 
3. These are not tested but are guaranteed by design characterization. 


Symbol 
Parameter 
Mln 
Max 
Unit 
Test Conditions 


VIL 
Input lOW 
Voltage 
-0.5 
0.8 
V 
FREQ = 2 MHz 


VIH 
Input HIGH Voltage 
2.0 
Vcc 
+ 0.5 
V 
FREQ = 2MHz 


VILC 
ClK 
Input lOW 
Voltage 
-0.5 
0.8 
V 
FREQ = 2MHz 


VIHC 
ClK 
Input HIGH Voltage 
3.8 
Vcc 
+ 0.5 
V 
FREQ = 2MHz 


VOL 
Output lOW 
Voltage 
0.45 
V 
IOL = 2.0 mA, FREQ = 2 MHz 


VOH 
Output HIGH Voltage 
3.0 
V 
IOH = - 2.0 mA, FREQ = 2 MHz 
Vcc 
- 
0.5 
V 
IOH = -100 
/-LA,FREQ = 2 MHz 


III 
Input leakage 
Current 
±10 
/-LA 
VIN = GND orVcc 
(Note 1) 


ILO 
Output leakage 
Current 
±10 
/-LA 
Vo = GND or Vcc (Note 1) 


IlL 
Input Sustaining 
Current on 
-30 
-500 
/-LA 
VIN = OV (Note 1) 
BUSY # and ERROR # Pins 


IBHL 
Input Sustaining 
Current 
38 
150 
/-LA 
VIN = 1.0V (Notes 1, 2) 


(Bus Hold lOW) 


IBHH 
Input Sustaining 
Current 
-50 
-350 
/-LA 
VIN = 3.0V (Notes 1, 3) 


(Bus Hold HIGH) 


IBHLO 
Bus Hold LOW Overdrive 
200 
/-LA 
(Notes 1, 4) 


IBHHO 
Bus Hold HIGH Overdrive 
-400 
/-LA 
(Notes 1, 5) 


NOTES: 
1. Tested with the clock stopped. 
2. ISHl should be measured after lowering VIN to GND and then raising to 1.0V on the following pins: 36-51, 66, 67. 
3. ISHHshould be measured after raising VIN to Vcc and then lowering to 3.0V on the following pins: 4-6, 36-51, 66-68. 
4. An external driver must source at least ISHlO to switch this node from LOW to HIGH. 
5. An external driver must sink at least ISHHOto switch this node from HIGH to LOW. 
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A.C. CHARACTERISTICS 
(Vcc = 5V ±10%, 
TCASE = O·Cto + 85·C) 
A.C. timings 
are referenced 
to 1.5V points of signals as illustrated 
in datasheet 
waveforms, 
unless otherwise 
noted. 


Symbol 
Parameter 
12.5 MHz 
Unit 
Test 


Mln 
Max 
Conditions 


1 
System Clock (ClK) 
Period 
40 
DC 
ns 
(Note 1) 


2 
System Clock (ClK) 
lOW 
Time 
11 
ns 
at 1.0V 


3 
System Clock (ClK) 
HIGH Time 
13 
ns 
at3.6V 


17 
System Clock (ClK) 
Rise Time 
8 
ns 
1.0V to 3.6V (Note 2) 


18 
System Clock (ClK) 
Fall Time 
8 
ns 
3.6V to 1.0V (Note 2) 


4 
Asynchronous 
Inputs Setup Time 
16 
ns 
(Note 3) 


5 
Asynchronous 
Inputs Hold Time 
16 
ns 
(Note 3) 


6 
RESET Setup Time 
19 
ns 


7 
RESET Hold Time 
6 
ns 


8 
Read Data Setup Time 
6 
ns 


9 
Read Data Hold Time 
7 
ns 


10 
READY Setup Time 
23 
ns 


11 
READY Hold Time 
21 
ns 


12a1 
Status Active Delay 
5 
16 
ns 
(Notes 4, 5, 7) 


12a2 
PEACK Active'Delay 
5 
18 
ns 
(Notes 4, 5, 7) 


12b 
Status/PEACK 
Inactive Delay 
5 
20 
ns 
(Notes 4, 5, 7) 


13 
Address 
Valid Delay 
4 
29 
ns 
(Notes 4, 5, 7) 


14 
Write Data Valid Delay 
3 
27 
ns 
(Notes 4, 5, 7) 


15 
Address/Status/Data 
Float Delay 
2 
32 
ns 
(Notes 2, 4, 6) 


16 
HlDA 
Valid Delay 
3 
24 
ns 
(Notes 4, 5, 7) 


19 
Address 
Valid To Status 
23 
ns 
(Notes 2, 4, 5) 
Valid Setup Time 


NOTES: 
1. Functionality 
at frequencies 
less than 2 MHz is not tested, 
but is guaranteed 
by design 
characterization. 


2. These 
are not tested 
but are guaranteed 
by design 
characterization. 


3. Asynchronous 
inputs 
are 
INTR, 
NMI, 
HOLD, 
PEREQ, 
ERROR, 
and 
BUSY. 
This 
specification 
is given 
only 
for testing 
purposes, 
to assure 
recognition 
at a specific 
CLK edge. 
4. Delay from 
1.0V on the CLK, to 1.5V or float on the output 
as appropriate 
for valid or floating 
condition. 


5. Output 
load: CL = 100 pF. 


6. Float condition 
occurs 
when 
output 
current 
is less than 
ILO in magnitude. 
7. Minimum 
output 
delay timings 
are not tested, 
but are guaranteed 
by design 
characterization. 


NOTE 7: 
AC Test Loading on Outputs 


NOTE 8: 
AC Drive and Measurement Points-CLK 
Input 


elK 
INPUT 
O.45V----- 


NOTE 9: 
AC Setup, Hold and Delay Time Measurement-General 


• 


OUTPUT VALID DELAY 
NOlol 
(ns) 
50 


~ 
ADDRESS/DATA 


-0- STATUS 


Typical 
CMOS Level Slew Rates for Address/Data 
Buffers 


10 


~ 
RISE T1lolE(0 •• V-3.5V) 


-0- FALL TllolE (3.5V-0 
•• V) 


Typical TTL Level Slew Rates for Address/Data 
Buffers 


9 


SLEW RATE 
(ns/V) 
4 


~ 
RISE TIME (0.8Y-2.0Y) 


-<>- FALL TIME (2.0Y-0.8Y) 


200 


175 


150 


125 


Ice (mA) 
100 


75 


50 


25 


0 


0 
2 
<4 
6 
8 
10 


FREQUENCY(101Hz) 


NOTES: 
1. Vcc = 5.0V 
2. Loaded: 
IOL = 2.0 mA, IOH as shown, 
CL = 100 pF 
Unloaded: 
CL = 100 pF 


• 


A2'-Ao 


•• 
ll/iO. 
COD/INTA 
g 


READ CYClE 
ILLUSTRATED WITH ZERO 
WJJT STATES 


1S 
Te 


WRITE CYCLE 
ILLUSTRATED WITH ONE 
WAIT STATE 


Ts 
Tc 


. 
..~ --- 
ARDY+AADYEN 


CllOLY 


llwrC 
:g 
!l 
'"•• 
llROC 


DT/ii 


NOTE: 
1. The modified 
timing 
is due to the CMDL Y signal being active. 


80C286 
ASYNCHRONOUS 
INPUT 
SIGNAL 
TIMING 


NOTES: 
1. PCLK indicates 
which 
processor 
cycle 
phase will oc- 
cur on the 
next CLK. 
PCLK 
may not indicate 
the 
cor- 
rect phase 
until the first bus cycle 
is performed. 


2. These 
inputs 
are asynchronous. 
The setup 
and hold 
times 
shown 
assure 
recognition 
for testing 
purposes. 


",LOCK 
A'J - 
I Ao 
(SE£ NOTE 5.) 
"Iii, ------------ 


COO/INTA 


(SEE 
NOTE e.) 
D1• 
- 
Do 
------------------------_ 
I 


80C286 
RESET 
INPUT 
TIMING 
AND 
SUBSEQUENT 
PROCESSOR 
CYCLE 
PHASE 


NOTES: 
1. When 
RESET 
meets 
the setup time shown, 
the next 
CLK will start </>2of a processor 
cycle. 
2. When 
RESET 
meets the setup 
time shown, 
the next 
CLK will repeat 
</>1 of a processor 
cycle. 


I[ 


NOTES: 
231923-42 


1. These 
signals 
may not be driven 
by the 80C286 
during the time shown. 
The worst 
case in terms 
of latest 
float time is 
shown. 
2. The data bus will be driven 
as shown 
if the last cycle 
before 
TI in the diagram 
was a write Tc. 


3. The 80C286 
floats 
its status 
pins during TH. External 
20 Kn 
resistors 
keep these 
signals 
high (see Table 
16). 


4. For HOLD request 
set up to HLDA, 
refer to Figure 29. 


5. SHE and I:Oa< are driven at this time but will not become 
valid until Ts. 


6. The data bus will remain 
in 3-state 
OFF if a read cycle 
is performed. 


• 


An 
- At 


MOO 


COD 1fT" 


_____ 
N!Il_OPBIAND.IFOllOAUClNED. 
__ 
~ 
ll_lIYTE-AT-A-11Il£WlTHTMlIlE1lllllYCYClES. 


NOTES: 
231923-43 
1. PEACK always goes active during the first bus operation of a processor extension data operand transfer sequence. 
The first bus operation will be either a memory read at operand address or I/O read at port address OOFA(H). 
2. To prevent a second processor extension data operand transfer, the worst case maximum time (Shown above) is: 
3 x <D-12a2max. 
- 
@)min.' 
The 
actual, configuration 
dependent, 
maximum time 
is: 3 x <D-12a2max. 
- 
@)min. + 


AX2x<D. 
A is the number of extra TC states added to either the first or second bus operation of the processor extension data 
operand transfer sequence. 


cu 


~ 
••••• 


it.so 
l 


UMO«)WN 
iiW5C 


Au .. 


l 


LNCNOWN 
- 


llljO 
l 
COD/In''' 
UNKNOWN 


lOCI< 
l 


I,H(NOWN 


DATA »»»»»»»»»m. 


NOTES: 
231923-44 


1. Setup time for RESET t may be violated with the consideration that </>1of the processor clock may begin one 
system elK 
period later. 


2. Setup and hold times for RESET .J..must be met for proper operation, but RESET .J..may occur during </>1or </>2.If 
RESET.J..occurs in </>1,the reference clock edge can be </>2of the previous bus cycle. 
3. The data bus is only guaranteed to be in 3-state OFF at the time shown. 


-------~-------~-------~-------~ 
I 
I 
I 
I 
LOW DlSPIDATA 
I 
HIGH DlSPIDATA 
I 
LOW D.\TA 
I 
HIGH D.\TA 
I 
------_._------~-------.-------~ 


REGISTER OPERAND/REGISTERS 
TO USE IN OFFSET 
CALCULATION 


REGISTER OPERANOIEXTENSION 
OF OPCODE 
REGISTER MODEJMEIIORY MODE WITH DISPLACEMENT LENGTH 


WOAOIBYTE OPERATION 
DIRECTION IS TO REGlSTEAIDIRECTION 
IS FROM REGISTER 


OPERATION (INSTRUCTION} CODE 


80C286 
INSTRUCTION 
SET 
SUMMARY 


Instruction 
Timing Notes 


The instruction clock counts listed below establish 
the maximum execution rate of the 80C286. With no 
delays in bus cycles, the actual clock count of an 
80C286 program will average 5% more than the cal- 
culated clock count, due to instruction sequences 
which execute faster than they can be fetched from 
memory. 


To 
calculate 
elapsed 
times 
for 
instruction 
se- 
quences, multiply the sum of all instruction clock 
counts, as listed in the table below, by the processor 
clock period. A 12 MHz processor clock has a clock 
period of 83 nanoseconds and requires an 80C286 
system clock (CLK input) of 24 MHz. 


1. The instruction has been prefetched, decoded, 
and is ready for execution. Control transfer in- 
struction clock counts include all time required to 
fetch, decode, and prepare the next instruction for 
execution. 


2. Bus cycles do not require wait states. 
3. There are no processor extension data transfer or 
local bus HOLD requests. 
4. No exceptions occur during instruction execution. 


Instruction 
Set Summary Notes 


Addressing displacements selected by the MOD 
field are not shown. If necessary they appear after 
the instruction fields shown. 


Above/bel?w refers to unsigned value 
Greater'refers to positive signed value 
Less refers to less positive (more negative) signed 
values 
if d = 1 
then to register; if d = 0 then from register 
if w = 1 then word instruction; if w = 0 then byte 
instruction 
if s = 0 
then 16-bit immediate data form the oper- 
and 
if s = 1 
then an immediate data byte is sign-ex- 
tended to form the 16-bit operand 
x 
don't care 
z 
used for string primitives for comparison with 
ZF FLAG 


If two clock counts are given, the smaller refers to a 
register operand and the larger refers to a memory 
operand 


• = 
add one clock if offset calculation requires 
summing 3 elements 
n = 
number of times repeated 
m = 
number of bytes of code in next instruction 
Level (L)-Lexical 
nesting level of the procedure 


• 


The following comments describe possible excep- 
tions, side effects, and allowed usage for instruc- 
tions in both operating modes of the 80C286. 


REAL ADDRESS 
MODE 
ONLY 
1. This is a protected mode instruction. Attempted 
execution in real address mode will result in an 
undefined opcode exception (6). 
2. A segment overrun exception (13) will occur if a 
word operand reference at offset FFFF(H) is at- 
tempted. 
3. This instruction may be executed in real address 
mode to initialize the CPU for protected mode. 
4. The IOPL and NT fields will remain O. 
5. Processor extension segment overrun interrupt 
(9) will occur if the operand exceeds the seg- 
ment limit. 


EITHER 
MODE 
6. An exception may occur, depending on the value 
of the operand. 


7. LOCK is automatically asserted regardless of the 
presence or absence of the LOCK instruction 
prefix. 


8. LOCK does not remain active between all oper- 
and transfers. 


PROTECTED 
VIRTUAL 
ADDRESS 
MODE ONLY 
9. A general protection exception (13) will occur if 
the memory operand cannot be used due to ei- 
ther a segment limit or access rights violation. If 
a stack segment limit is violated, a stack seg- 
ment overrun exception (12) occurs. 
10. For segment load operations, the CPL, RPL, and 
OPL must agree with privilege rules to avoid an 
exception. The segment must be present to 


avoid a not-present exception (11). If the SS reg- 
ister is the destination, and a segment not-pres- 
ent violation occurs, a stack exception (12) oc- 
curs. 
11. All segment descriptor accesses in the GOT or 
LOT made by this instruction will automatically 
assert LOCK to maintain descriptor integrity in 
multiprocessor systems. 
12. JMP, CALL, INT, RET, IRET instructions refer- 
ring to another code segment will cause a gener- 
al protection exception (13) if any privilege rule is 
violated. 
13. A general protection exception (13) occurs if 
CPL,* 
O. 


14. A general protection exception (13) occurs if 
CPL> 
IOPL. 


15. The IF field of the flag word is not updated if CPL 
> 
IOPL. The IOPL field is updated only if 
CPL = O. 
16. Any violation of privilege rules as applied to the 
selector operand do not cause a protection ex- 
ception; rather, the instruction does not return a 
result and the zero flag is cleared. 
17. If the starting address of the memory operand 
violates a segment limit, or an invalid access is 
attempted, a general protection exception (13) 
will occur before the ESC instruction is execut- 
ed. A stack segment overrun exception (12) will 
occur if the stack limit is violated by the oper- 
and's starting address. If a segment limit is vio- 
lated during an attempted data transfer then a 
processor extension segment overrun exception 
(9) occurs. 
18. The destination of an INT, JMP, CALL, RET or 
IRET instruction must be in the defined limit of a 
code segment or a general protection exception 
(13) will occur. 


intel~ 
80C286 


8OC286 INSTRUCTION 
SET SUMMARY 


CLOCK 
COUNT 
COMMENTS 


Real 
Protected 
Real 


Protected 
UNCTION 
FORMAT 
Virtual 
Virtual 


Add •.••• 
Addr ••• 
Add •.••• 
Add •.••• 
Mode 
Mode 
Mode 
Mode 


ATA TRANSFER 


V-Move: 


egister to Register/Memort 
1000100w 
mod reg 
rim 
2,3' 
2,3' 
9 


egisterImemoiy to register 
1000101w 
mod reg 
rim 
2,5' 
2,5' 


mmediate to register/memort 
1100011w 
modOOO rim 
deta 
deta~w 
- 
1 
2,3' 
2,3' 
2 
9 


mmediate 
to register 
1011w 
reg 
deta 
deta~w~1 
2 


1010000w 
eddr·low 
eddr·high 
9 


1010001w 
addr·low 
addr-high 
3 
2 
9 • 


10001110 
modO reg rim 
2,5' 
17,19' 
9,10,11 


10001100 
mod 0 reg rim 
2,3- 
2,3- 
9 


11111111 
I mod 1 1 0 rim I 
5' 
5' 
9 


01010 
reg I 


I 
2 
9 


9 


9 


10001111 
ImodOOO 
r/ml 
5' 
5' 
2 
9 


01011 
reg 
9 


(reg"'OI) 
20 
2 
9,10,11 


l' 
l' 
2 
9 


CHO = Exchan •• : 


egister/memo<y with register 
1000011w 
lmodreg 
r/ml 
3,5' 
3,5' 
2,7 
7,9 


egister with accumulator 
10010 
reg 
3 
3 


N = Input trom: 


ixed port 
111001 
Ow I 
port 
5 
14 


ariable port 
111011 
Ow I 
5 
14 


1110011 
w I 
port 
14 


111 0111w 
I 
14 


11010111 
9 


= Load EA to register 
10001101 
Imod reg 
r/ml 
3' 
3' 


- Load pointer to OS 
11000101 
Imod reg 
r/ml 
(mod"ll) 
7' 
21' 
2 
9,10,11 


11000100 
Imod reg 
r/ml 
(mod"'l) 
7' 
21' 
2 
9,10,11 


Shaded areas indicate 
instructions 
not available 
in 8086, 88 microaystems. 


CLOCK COUNT 
COMMENTS 


Real 
Protected 
R.al 
Protected 
UNCTION 
FORMAT 
Virtual 
Vlrtuel 
AckI•••• 
Add •••• 
AckI •••• 
AckI •••• 
Mod. 
Mode 
M_ 
M_ 


DATA TRANSFER (ContinUed) 


LAHF Load AH with flags 
I 10011111 
I 
2 
2 


AHF ~ Store AH into flags 
I 10011110 
I 
2 
2 


USHF - Push flags 
1 10011100 
I 
3 
3 
2 
9 


POPF~ Pop flags 
1 10011101 
I 
5 
5 
2,4 
9,15 


"RITHMETIC 


"DO-Add: 


Reg/memory 
with register to either 
I OOOOOOdw ! modreg 
rIm 
I 
2,7' 
2,7' 
2 
9 


mmediate to register/memory 
I 1 OOOOOsw I modOOO 
rIm 
1 
data 
Idatailsw 
- 
011 
3,7' 
3,7' 
2 
9 


mmediate to accumulator 
I 0000010w 
I 
data 
! 
dataifw-l 
I 
3 
3 


"DC ~ Add with carry: 


Reg/memory 
with register to either 
I 000100dw 
I mod reg 
rIm I 
2,7' 
2,7' 
2 
9 


mmediate to register/memory 
I 1 OOOOOsw I modO 1 0 rIm I 
data 
Idataffsw 
= 011 
3,7' 
3,7' 
2 
9 


mmediate to accumulator 
I 0001010w 
I 
data 
dataijw=l 
I 
3 
3 


NC= Increment: 


RegisterI memory 
I 1 11 11 11 w I mod 0 0 0 rIm I 
2,7' 
2,7' 
2 
g 


Register 
I 
01000reg 
I 
2 
2 


SUB~ Subtract: 


Reg/memory 
and register to either 
100101 
Odw I mod reg 
rIm I 
2,7' 
2,7' 
2 
9 


mmediate from register/memory 
1100000sw 
I modl0l 
rIm I 
data 
I data ils w - 
011 
3,7' 
3,7' 
2 
9 


mmediate from accumulator 
10010110wl 
data 
I 
data ifw= 
1 
I 
3 
3 


BB - Subtract 
with borrow: 


Reg/memory 
and register to either 
100011 
Odw I modreg 
rIm 
I 
2,7' 
2,7' 
2 
9 


mmediate from register/memory 
11 OOOOOsw 
1 mod011 
rIm 
1 
data 
I dataifsw=01 
I 
3,7' 
3,7' 
2 
9 


mmediate from accumulator 
10001110wl 
data 
I 
data ifw-l 
I 
3 
3 


DEC= Decrement 


Register/memory 
I l111111w 
ImodOOl 
r/ml 
2,7' 
2,7' 
2 
9 


~egister 
I 01001 
reg I 
2 
2 


MP=Compa 
•• 


agister/memory 
with register 
I 0011101 
w Imodreg 
r/ml 
2,6' 
2,6' 
2 
9 


agister with register/memory 
I 00111 
OOw 
Imodreg 
rIm! 
2,7' 
2,7' 
2 
9 


mmediate w;th register/memory 
I 1 OOOOOsw 
Imod111 
r/ml 
data 
I dataijsw=01 
I 
3,6' 
3,6' 
2 
9 


mmediate with accumulator 
I 001111 
Ow I 
data 
I 
dataifw-1 
I 
3 
3 


EG = Change sign 
I 1111011w 
Imod011 
r/ml 
2 
7' 
2 
9 


'-'A 
~ ASCII adjust for add 
I 00110111 
I 
3 
3 


AA - Decimal adjust for add 
I 00100111 
I 
3 
3 


CLOCK COUNT 


Protected 


Virtual 


Address 
Mode 


COMMENTS 


Protected 


Virtual 


Address 


Mode 


Raal 


Addrass 
Mode 


Real 


Addra •• 
Mode 


S ~ ASCII adjust for subtract 
00111111 


00101111 
3 


1111011w 
Imodl00 
r/ml 


13 
13 


21 
21 


16' 
16' 
2 


24' 
24' 
2 • 


1111011w 
Imodl0l 
r/ml 


13 
13 


21 
21 


16' 
16' 
9 


24' 
24' 
9 


011010al 
Imod r8\J 
rIm I 
dale 
daleils 
= 0 
21,24' 
21,24' 
2 
• 


1111011wlmodll0 
r/ml 


14 
14 
6 
6 


22 
22 
6 
6 
17' 
17' 
2,6 
6,9 


25' 
25' 
2,6 
6,9 


1111011w 
Imodl11 
r/ml 


17 
17 
6 
6 


25 
25 
6 
6 


20' 
20' 
2,6 
6,9 


28' 
28' 
2,6 
6,9 


11010100 
00001010 
16 
16 


o ~ ASCII adjust for divide 
11010101 
00001010 
14 
14 


10011000 
2 
2 


10011001 


1101000w 
Imod Tn 
r/ml 
2,7- 
2,7' 
2 


1101001 
w ImodTn 
r/ml 
5+n,8+n- 
5+n,8+n- 
2 


111 
OOooOw 
ImodTn 
r/ml 
COUI1l 
5+11,8+n' 
5+n,8+n' 
2 
9 


Tn 
Instruction 


000 
ROL 


001 
ROR 


010 
RCL 


011 
RCR 


100 
SHLISAL 


101 
SHR 


111 
SAR 


Shaded 
areas 
indicate 
instructions 
not available 
in 8086, 
88 microsystems, 


CLOCK COUNT 
COMMENTS 


Protected 
Reel 
Protected 
UNCTION 
FORMAT 
Reel 
Virtual 
VlrtU81 


Add •••• 
Add •••• 
Add •••• 
Add •••• 
Mode 
Mode 
Mode 
Mode 


RITHMETIC (Continued) 


ND~And: 


eg/memory 
and register to either 
I 001 OOOdw I mod reg 
rIm I 
2,7' 
2,7' 
2 
9 


mmediate to register/memory 
I 1 OOOOOOw I mod 1 00 
rIm I 
data 
I 
data ~w= 1 I 
3,7' 
3,7' 
2 
9 


mmediate to accumulator 
I 0010010w 
I 
data 
I dataifw=l 
I 
3 
3 


EST~ And function to liege, no """It 


agister/memory 
and register 
I 100001 
Ow I modreg 
rIm I 
2,6' 
2,6' 
2 
9 


mmediate data and register/memory 
I 1111011wlmodOOOr/mi 
data 
I 
data~w~l 
I 
3,6' 
3,6' 
2 
9 


mmediate data and accumulator 
I 1010100w 
I 
data 
I data~w=l 
I 
3 
3 


)R = Or: 


eg/memory 
and register to erthar 
I 000010dw 
I mod reg 
rIm I 
2,7' 
2,7' 
2 
9 


mmediate to register/memory 
I 1000000w 
I modOOl 
rIm I 
data 
I 
data~w=l 
I 
3,7' 
3,7' 
2 
9 


mmediate to accumulator 
I 0000110wl 
data 
I data~w-l 
I 
3 
3 


OR ~ Exclullve 
or: 


eg/memory 
and register to either 
I 0011 
OOdw I modreg 
rIm I 
2,7' 
2.7' 
2 
9 


mmediate to register/memory 
I 1 OOOOOOw I mod 11 0 rIm I 
data 
I data~w-l 
I 
3,7' 
3,7' 
2 
9 


mmediate to accumulator 
I 0011010wl 
data 
IdataifW-ll 
3 
3 


OT= Invert register/memory 
I 1 1 1 1 0 1 1 w I mod 0 1 0 rIm I 
2,7' 
2,7' 
2 
9 


TAING MANIPULATION: 


IoIIOVS~Move byte/word 
I 1010010w 
5 
5 
2 
9 


MPS=Compare byte/word 
I 1010011w 
8 
8 
2 
9 


;CAS ~ seen byte/word 
1010111 
w 
7 
7 
2 
9 


ODS~ Load byte/wd to AlIl\X 
1010110w 
5 
5 
2 
9 


TOS~ Stor byte/wd from ALIA 
1010101w 
3 
3 
2 
9 


0110110. 
I 
~ 


NS-Input 
byte/wd from OXport 
5 
5 
2 
9,14 
wrs- 0uqIuI byte!wd to OXport 
0110111w 
I 
5 
5 
2 
9,14 


epeated by count in ex 


IoIIOVs~ Move string 
11110011 
1010010w 
5+4n 
5+4n 
2 
9 


MPS~ Compare string 
1111001 
z 
1010011w 
5+9n 
5+9n 
2,8 
8,9 


;CAS ~ SCanstring 
1111001 
z 
1010111 
w 
5+8n 
5+8n 
2,8 
8,9 


ODS ~ Load string 
11110011 
1010110w 
5+4n 
5+4n 
2,8 
8,9 


TOS ~ Store string 
11110011 
1010101w 
4+3n 
4+3n 
2,8 
8,9 


111110011 
10110110. 
I 
,- 
- 
NS-Input 
81ring 
1+4n 
5+4n 
2 
9,14 
wrs- 0uqIuI11Iing 
_I 
11110011 
10110111.1 
- 


1-1+4n 
5+4n 
2 
9.14 


CLOCK COUNT 
COMMENTS 


Real 
Protected 
Real 
Protected 
FUNCTION 
FORMAT 
Virtual 
Addr ••• 
Addr ••• 


Virtual 


Mode 
Addr ••• 
Mode 
Add,... 


Mode 
Mode 


CONTROL 
TRANSFER 


CALL 
=Call: 


Direct within segment 
I 11101000 
I 
disp-Iow 
I 
disp-high 
I 
7+m 
7+m 
2 
18 


Registerlmemory 
I 
11111111 
Imod010 
r/ml 
7 +m, 11+m· 
7+m.11+m· 
2,8 
8,9,18 


°ndir8Ct within 
segment 


Direct intersegment 
I 10011010 
I 
segment offset 
I 
13+m 
26+m 
2 
11,12,18 


Protected 
Mode Only (Direct 
Intersegment): 
I 
segment selector 
I 
V'" call gate to same privilege level 
41+m 
8,11,12,18 


Via call gate to different privilege level, no parameters 
82+m 
8,11,12,18 
V", call gate to different privilege level, x parameters 
86 +4x+m 
8,11,12,18 
ViaTSS 
177+m 
8,11,12,18 
Via task gate 
182+m 
8,11,12,18 


Indirect intersegment 
I 11111111 
Imod011 
r/ml 
(mod"11) 
16+m 
29+m· 
2 
8,9,11,12,18 


iProtected 
Mode Only (Indirect 
Interaegment): 
V'" call gate to same privilege level 
44+me 
8,9,11,12,18 
Via call gate to different privilege level, no parameters 
83 +m· 
8,9,11,12,18 


Via call gate to different 
privilege 
level. x parameters 
9O+4x +m· 
8,9,11,12,18 
ViaTSS 
180+m· 
8,9,11,12,18 
V'" task gate 
18S+m· 
8,9,11,12,18 


~MP ~ Unconditional 
lump: 


IshOf1l1ong 
I 
11101011 
I 
disp-Iow 
I 
7+m 
7+m 
18 


Direct within segment 
I 
11101001 
I 
disp-Iow 
I 
disp-high 
I 
7+m 
7+ 
m 
18 


Registerlmemory 
indirect within segment I 11111111 
Imod100 
r/ml 
7+m.11+m· 
7+m,11+m· 
2 
9,18 


Direct intersegment 
I 11101010 
I 
segment offset 
I 
11+m 
23+m 
11,12,18 


Protected 
Mode Only (Direct 
Interaegment): 
I 
segment selector 
I 
V", call gate to same privilege level 
38+m 
8,11,12,18 
V",TSS 
175+m 
8,11,12,18 
V'" task gate 
180+m 
8,11,12,18 


Indirect intersegment 
I 11111111 
I mod 1 01 
r/ml 
(mod"11) 
lS+m· 
26+m· 
2 
8,9,11,12,18 


!Protected 
Mode Only (Indirect 
Interaegment): 


Via call gate to same privilege level 
41+m· 
8,9,11,12,18 
ViaTSS 
178+m· 
8,9,11,12,18 
V'" task gate 
183+m· 
8,9,11,12,18 
RET ~ Return 
!Tom CALL: 


Iwrthin segment 
I 11000011 
I 
11+m 
11+m 
2 
8,9,18 


W~hin seg adding immed to SP 
I 1·1000010 
I 
data-low 
I 
data-high 
I 
11+m 
11+m 
2 
8,9,18 


Intersegment 
I 11001011 
I 
15+m 
25+m 
2 
8,9,11,12,18 


Intersegment 
adding immediate to SP 
I 11001010 
I 
data-low 
I 
data-high 
I 
15+m 
2 
8,9,11,12,18 


Protected 
Mode Only (RET): 


To different privilege level 
55+m 
9,11,12,18 


• 


CLOCK COUNT 
COMMENTS 


R•• I 
Protected 
R.el 
Protected 
FUNCTION 
FORMAT 
Vlrtuel 
Vlrtuel 
Addr ••• 
Addr ••• 
Addr ••• 
Addr ••• 
Mod. 
Mod. 
Mod. 
Mode 


CONTROL TRANSFER 
(Continued) 


JE/ JZ ~ Jump on equal zero 
01110100 
I 
disp 
I 
7+m or3 
7+mor3 
18 


JLlJNGE=Jump 
on less/not 
greater or equal 
01111100 
I 
disp 
I 
7+mor3 
7+mor3 
18 


JLE/JNG-Jump 
on less or equal/not greater 
01111110 
I 
disp 
I 
7+mor3 
7+mor3 
18 


JB/JNAE 
~ Jump on below/not above or equal 
01110010 
disp 
I 
7+mor3 
7+mor3 
18 


JBE/JNA 
~ Jump on below or equal/not above 
01110110 
disp 
I 
7+mor3 
7+mor3 
18 


JP/JPE = Jump on parily/parity even 
01111010 
disp 
I 
7+mor3 
7+mor3 
18 


JO =Jump on overllow 
01110000 
disp 
I 
7 +mor3 
7+mor3 
18 


JS=Jumpon 
sign 
01111000 
disp 
I 
7+mor3 
7+mor3 
18 


JNE/JNZ~Jump 
on not equal/not zero 
01110101 
disp 
I 
7+mor3 
7+mor3 
18 


JNL/JGE=Jump 
on not less/greater 
or equal 
01111101 
disp 
I 
7+mor3 
7+mor3 
18 


JNLE/JG~Jump 
on not less or equal/greater 
01111111 
disp 
I 
7+mor3 
7+mor3 
18 


JNB/ JAE ~ Jump on not below/ above or equal 
01110011 
disp 
I 
7+mor3 
7+mor3 
18 


JNBE/JA 
- Jump on not below or equal/above 
01110111 
disp 
7+mor3 
7+mor3 
18 


JNP/JPO~Jumpon 
not par/par odd 
01111011 
disp 
7+mor3 
7+mor3 
18 


JNO = Jump on not overflow 
01110001 
disp 
7+mor3 
7+mor3 
18 


JNS=Jump 
on not sign 
01111001 
disp 
7 +mor3 
7+mor3 
18 


LOOP = Loop ex times 
11100010 
disp 
8+mor4 
8+mor4 
18 


LooPZ/LooPE 
~ Loop while zero/ equal 
11100001 
disp 
8+mor4 
8+mor4 
18 


LooPNZ/LooPNE 
- Loop while not zero/ equal 
11100000 
disp 
8+mor4 
8+mor4 
18 


JCXZ~Jump 
on ex zero 
11100011 
disp 
8+mor4 
8+mor4 
18 


Idata-low 
defa:!llgh I 
I 
- 
ENTER - EnIer Procedure 
11001000 
L 
2,8 
8,9 


L-O 
11 
11 
L-1 
15 
15 
2,8 
8,9 


L>l 
18+4(l-1) 
16+4(L 
- 
1) 
2,8 
8,9 


2,8 
8,9 


LEAVE - Lea••• ProcecUe 
I 11001001 
I 
_5 
5 


INT ~ Interrupt: 


Type specified 
I 
11001101 
I 
type 
I 
23+m 
2,7,8 


Type 3 
I 
11001100 
I 
23+m 
2,7,8 


INTO = Interrupt on over1low 
I 
11001110 
I 
24 +mor3 
2,6,8 


(3~no 
(3 if no 


interrupt) 
interrupt) 
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8OC286 INSTRUCTION 
SET SUMMARY 
(Continued) 


CLOCKCOUNT 
COMMENTS 


Real 
Protected 
Real 
Protected 
UNCTION 
FORMAT 
Virtual 
Virtual 
Add•••• 
Add•••• 
Add•••• 
Add•••• 
Mode 
Mode - - 
ONTROLTRANSFER (Continued) 


otected Mode Only: 
Viainterrupt or trap gate to same privilegelevel 
40+ m 
7.8.tl.12,18 


Viainterrupt or trap gate to fitdifferent privilegelavel 
78+ m 
7.8,11,12,18 
ViaTask Gate 
167+m 
7.8,11.12.18 


11001111 
17+m 
31+ m 
2.4 
8.9.11,12,15.18 


55+m 
8.9.11.12,15.18 


169+m 
8.9.11,12,18 


- Detect vmu. out 01range 
101100010 
I modreg 
rIm I 
13' 
13' 
U 
8.8,11.11.12,18• 


(l1geINTctocl< 
countlf 
excep\lorI5) 


11111000 
2 


11110101 
2 


11111001 
2 
2 


11111100 
I 
2 


11111101 
2 
2 


11111010 
3 
14 


11111011 
2 
2 
14 


11110100 
2 
13 


10011011 
3 
3 


11110000 
0 
0 
14 


00001111 
00000110 
I 
2 
2 
3 
13 


- Processor Extension Escape 
111011 
TTT 
mod LLL rIm I 
9-20· 
9-20· 
5.8 
8.17 


(TIT LLLare opcode to procassor extension) 


001 reg 110 
0 
0 


- Loed gIobllldMcripIor tebIe regIater 
100001111 
I 00000001 
Jmod010 
rIm! 
11· 
11· 
2,3 
11,13 


-SIioreglolleldMcriplorteble 
••• 
I 00001111 
100000001 
ImodOOO 
r/ml 
11· 
11" 
2.3 
9 


-Loedlntemlpldellcrtptorteble 
••• 
1 00001111 
I 00000001 
ImodOl1 
rIm! 
12" 
12" 
2,3 
9,13 


- 8lOIll1ntemlpldeeatpIor tebIe regIater I 0000 
11 1 1 I 0000000 
1 Imod 0 0 1 
r/ml 
120 
12" 
2,3 
9 


- Loed _ 
deIetIpIor tebIe regIAer 
fromreglaterll*llOlY 
I 00001111 
I 00000000 
Imod 0 10 
r/ml 
17,19- 
9,11,13 


- SIiore_ 
dMcripIor tebIe regIater 


to reglater/ll*llOlY 
I 00001111 
100000000 
ImodOOO 
rIm! 
U- 
9 


Shaded 
areas indicate instructions not available in 8086, 88 microsystems. 


CLOCK COUNT 
COMMENTS 


Real 
Protected 
Real 
Protected 
FUNCTION 
FORMAT 
Virtual 
Virtual 
Add •••• 
Addreaa 
Addre •• 
Addreaa 
Mode 
Mode 
Mode - 
PROTECTION 
CONTROL 
(Con1Inued) 


LTR- 
Local task regiSter 


from registerlmemory 
I 00001111 
I 00000000 
ImodOll 
rIm I 
17,19' 
1 
9,11.13 


STR-Store 
task r.ter 


to register memory 
I 00001111 
I 00000000 
I mod 00 
1 
rIm I 
2.3' 
1 
9 


LMSW = Load machine status word 


from regtste</memory 
I 00001111 
I 00000001 
Imodl10 
rIm I 
3,6' 
3.6' 
2.3 
9,13 


SMSW - Store machine stetus word 
I 00001111 
I 00000001 
I modI 
00 
rIm I 
2.3' 
2.3' 
2,3 
9 


LAR - Load access righlS 


1romr.ter/memory 
I 00001111 
I 00000010 
Imodreg 
rIm 1 
14,16' 
1 
9,11,16 


LSL -Load 
eegmentlimil 


from •• 
ter/memory 
I 00001111 
I 00000011 
I modreg 
rIm I 
14.16' 
1 
9.11,16 


ARPL - Adjust requested privilege level: 
I 01100011 
I modr"!! 
rIm I 
10-.11- 
2 
8.9 
from •• 
ter/memory 


VERA -Verily 
reed access: regts1e</memory I 00001111 
I 00000000 
I modl00rlm 
I 
14,16' 
1 
9,11,16 


YEAR- 
Verilywrtte 
access: 
I 00001111 
I 00000000 
I 
modI 
01 rIm I 
14,16' 
1 
9,11.16 
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The Effective Address (EA) of the memory operand 
is computed according to the mod and rim fields: 


if mod = 11 then rim is treated as a REG field 
if mod = 00 then 015P = 0·, disp-Iow and disp-high 
are absent 
if mod = 01 then 015P = disp-Iow sign-extended to 
16 bits. disp-high is absent 
if mod = 10 then 015P = disp-high: disp-Iow 


if rim = 000 then EA = (SX) + (51) + 015P 
if rim = 001 then EA = (SX) + (01) + 015P 
if rim = 010 then EA = (SP) + (51) + 015P 
if rim = 011 then EA = (SP) + (01) + 015P 
if rim = 100 then EA = (51) + 015P 
if rim = 101 then EA = (01) + 015P 
if rim = 110 then EA = (SP) + 015p· 
if rim = 111 then EA = (SX) + 015P 


015P follows 2nd byte of instruction (before data if . 
required) 


'except 
~ mod 
~ 
00 and rIm ~ 
110 then 
EO 
~ 
disp-high: 
disp-Iow. 


SEGMENT 
OVERRIDE 
PREFIX 


10 0 1 reg 1 1 0 I 


reg is assigned according to the following: 


Segment 
reg 
Register 
00 
E5 
01 
C5 
10 
55 
11 
DC 


REG is assigned according to the following table: 


16·Bit (w = 1) 
8-Blt (w = 0) 
000 
AX 
000 
AL 
001 
CX 
001 
CL 
010 
OX 
010 
OL 
011 
SX 
011 
SL 
100 
5P 
100 
AH 
101 
SP 
101 
CH 
110 
51 
110 
OH 
111 
01 
111 
SH 


The physical addresses of all operands addressed 
by the SP register are computed using the 55 seg- 
ment register. The physical addresses of the desti- 
nation operands of the string primitive operations 2 
(those addressed by the 01 register) are computed 
using the E5 segment, which may not be overridden. 


The following list represents key differences be- 
tween this and the - 002 data sheet. Please review 
this summary carefully. 
1. The test conditions in the A.C. Characteristics ta- 


ble has been changed. 


2. The "Typical lee vs Frequency for Different Out- 
put Loads" graph has been modified. 
3. The maximum ambient temperature (TA) vs. vari- 
ous airflows has been updated. 
4. Deleted the 82C284 and 82C288 A.C. Character- 


istics tables. 
5. "PRELIMINARY" status was removed from the 
datasheet. 


MI"'t1Ut't1U~t:.:S:SUH WITH MEMORY 
MANAGEMENT AND PROTECTION 
(80286-12, 80286-10, 80286-8) 


• 
Two 8086 Upward 
Compatible 
Operating 
Modes: 
- 
8086 Real Address 
Mode 
- 
Protected 
Virtual Address 
Mode 


• 
Complete 
System 
Development 
Support: 
- 
Assembler, 
PL/M, 
Pascal and 
FORTRAN 


• 
Available 
In: 
- 
68-Pln PLCC (Plastic Leaded 
Chip 
Carrier) 
- 
68-Pln PGA (Pin Grid Array) 


(See Packaging 
Spec., 
Order 
# 231369) 


• 
High Performance 
HMOS III Technology 


• 
Large Address 
Space: 
- 
16 Megabytes 
Physical 
- 
1 Gigabyte 
Virtual per Task 


• 
Integrated 
Memory 
Management, 
Four- 
Level Memory 
Protection 
and Support 
for Virtual Memory 
and Operating 
Systems 


• 
High Bandwidth 
Bus Interface 
(12.5 Megabyte/See) 


• 
Industry 
Standard 
O.S. Support: 
-MS-DOS·, 
UNIX", 
XENIX·, 
IRMX@ 


• 
Optional 
Processor 
Extension: 
- 
80287 High Performance 
80-bit 
Numeric 
Data Processor 


The 80286 is an advanced, 
high-performance 
microprocessor 
with specially 
optimized 
capabilities 
for multiple 


user and multi-tasking 
systems. 
The 80286 has built-in memory protection 
that supports 
operating 
system and 
task isolation 
as well as program 
and data privacy within tasks. A 12.5 MHz 80286 provides 
six times or more 
. 


throughput 
than the standard 
5 MHz 8086. The 80286 includes 
memory management 
capabilities 
that map 230 
(one gigabyte) 
of virtual address 
space per task into 224 bytes (16 megabytes) 
of physical 
memory. 


The 80286 
is upward 
compatible 
with 8086 and 88 software. 
Using 8086 
real address 
mode, 
the 80286 
is 
object code compatible 
with existing 8086, 88 software. 
In protected 
virtual address 
mode, the 80286 is source 
code compatible 
with 8086, 88 software 
and may require upgrading 
to use virtual addresses 
supported 
by the 
80286's 
integrated 
memory 
management 
and protection 
mechanism. 
Both modes 
operate 
at full 80286 
per- 
formance 
and execute 
a superset 
of the 8086 and 88 instructions. 


The 80286 
provides 
special 
operations 
to support 
the efficient 
implementation 
and execution 
of operating 


systems. 
For example, 
one instruction 
can end execution 
of one task, save its state, switch to a new task, load 
its state, and start execution 
of the new task. The 80286 also supports 
virtual memory 
systems 
by providing 
a 


segment-not-present 
exception 
and restartable 
instructions. 


'XENIX 
and MS-DOS 
are trademarks 
of Microsoft 
Corp. 


"UNIX 
is a trademark 
of UNIX Systems 
Laboratories. 


~~~~--------------------' 
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Figure 1. 80286 Internal Block Diagram 


Component 
Pad Views-As 
viewed from underside of 
component when mounted on the board. 
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Table 
1. Pin Description 


The following 
pin function 
descriptions 
are for the 80286 microprocessor: 


Symbol 
Type 
Name and Function 


CLK 
I 
SYSTEM 
CLOCK 
provides 
the fundamental 
timing for 80286 systems. 
It is divided 
by two 
inside the 80286 to generate 
the processor 
clock. The internal 
divide-by-two 
circuitry 
can 
be synchronized 
to an external 
clock generator 
by a LOW to HIGH transition 
on the RESET 
input. 


015-00 
I/O 
DATA BUS inputs data during memory, 
I/O, and interrupt 
acknowledge 
read cycles; 
outputs 
data during memory 
and I/O write cycles. The data bus is active 
HIGH and floats to 
3-state 
OFF during bus hold acknowledge. 


A23-Ao 
0 
ADDRESS 
BUS outputs 
physical 
memory 
and I/O port addresses. 
AO is LOW when data is 
to be transferred 
on pins 07-0. A23-A16 
are LOW during I/O transfers. 
The address 
bus is 
active HIGH and floats to 3-state 
OFF during bus hold acknowledge. 


BHE 
0 
BUS HIGH ENABLE 
indicates 
transfer 
or data on the upper byte of the data bus. 015-8. 


~t-bit 
oriented 
devices 
assigned 
to the uppElr bytEl of the data bus would normally 
use 
BHE to condition 
chip select functions. 
BHE is active LOW and floats to 3-state 
OFF during 
bus hold acknowledge. 


BHE and AO Encodlngs 


BHE Value 
AOValue 
Function 


0 
0 
Word transfer 
0 
1 
Byte transfer 
on upper half of data bus (015-08) 
1 
0 
Byte transfer 
on lower half of data bus (07-0) 
1 
1 
Will never occur 
g'f,&i 
0 
BUS CYCLE 
STATUS 
indicates 
initiation 
of a bus cycle and, along with M/IO 
and COD/ 
INTA, defines 
the type of bus cycle. The bus is in a Ts state whenever 
one or both are LOW, 


S1 and &i are active 
LOW and float to 3-state 
OFF during bus hold acknowledge. 


80286 Bus Cycle Status 
Definition 


COD/INTA 
M/IO 
S1 
SO 
Bus Cycle Initiated 
o (LOW) 
0 
0 
0 
Interrupt 
acknowledge 
0 
0 
0 
1 
Will not occur 
0 
0 
1 
0 
Will not occur 
0 
0 
1 
1 
None; not a status cycle 
0 
1 
0 
0 
IF A 1 = 1 then halt; else shutdown 
0 
1 
0 
1 
Memory 
data read 
0 
1 
1 
0 
Memory 
data write 
0 
1 
1 
1 
None; not a status cycle 
1 (HIGH) 
0 
0 
0 
Will not occur 
1 
0 
0 
1 
I/O read 
1 
0 
1 
0 
I/O write 
1 
0 
1 
1 
None; not a status cycle 
1 
1 
0 
0 
Will not occur 
1 
1 
0 
1 
Memory 
instruction 
rElad 
1 
1 
1 
0 
Will not occur 
1 
1 
1 
1 
None; not a status cycle 


M/iO 
0 
MEMORY 
I/O SELECT 
distinguishes 
memory 
access 
from I/O access. 
If HIGH during Ts, a 
memory 
cycle or a halt/shutdown 
cycle is in progress. 
If LOW, an I/O cycle or an interrupt 
acknowledge 
cycle is in progress. 
M/iO 
floats to 3-state 
OFF during bus hold acknowledge. 


COD/INTA 
0 
CODE/INTERRUPT 
ACKNOWLEDGE 
distinguishes 
instruction 
fetch cycles from memory 
data read cycles. Also distinguishes 
interrupt 
acknowledge 
cycles from I/O cycles. COO/ 
INTA floats to 3-state 
OFF during bus hold acknowledge. 
Its timing is the same as M/IO. 


[QQ( 
0 
BUS LOCK indicates 
that other system bus masters 
are not to gain control 
of the system 
bus for the current 
and the following 
bus cycle. The [QQ( signal may be activated 
explicitly 
by the "LOCK" 
instruction 
prefix or automatically 
by 80286 hardware 
during memory 
XCHG 
instructions, 
interrupt 
acknowledge, 
or descriptor 
table access. [QQ( is active 
LOW and 
floats to 3-state 
OFF during bus hold acknowledge. 


READY 
I 
BUS READY 
terminates 
a bus cycle. Bus cycles 
are extended 
without 
limit until terminated 
by READY 
LOW. READY is an active LOW synchronous 
input requiring 
setup and hold 
times relative 
to the system 
clock be met for correct 
operation. 
READY is ignored 
during 
bus hold acknowledge. 
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Symbol 
Type 
Name and Function 


HOLD 
I 
BUS HOLD REQUEST 
AND HOLD ACKNOWLEDGE 
control 
ownership 
of 
HlDA 
0 
the 80286 local bus. The HOLD input allows another 
local bus master to 
request 
control 
of the local bus. When control 
is granted, 
the 80286 will float 
its bus drivers to 3-state 
OFF and then activate 
HlDA, 
thus entering 
the bus 
hold acknowledge 
condition. 
The local bus will remain granted 
to the 
requesting 
master until HOLD becomes 
inactive 
which results 
in the 80286 
deactivating 
HlDA 
and regaining 
control 
of the local bus. This terminates 
the 
bus hold acknowledge 
condition. 
HOLD may be asynchronous 
to the system 
clock. These signals are active HIGH. 


INTR 
I 
INTERRUPT 
REQUEST 
requests 
the 80286 to suspend 
its current 
program 
execution 
and service 
a pending 
external 
request. 
Interrupt 
requests 
are 
masked whenever 
the interrupt 
enable bit in the flag word is cleared. 
When 
the 80286 
responds 
to an interrupt 
request, 
it performs 
two interrupt 
acknowledge 
bus cycles to read an 8-bit interrupt 
vector that identifies 
the 
source of the interrupt. 
To assure program 
interruption, 
INTR must remain 
active until the first interrupt 
acknowledge 
cycle is completed. 
INTR is 
sampled 
at the beginning 
of each processor 
cycle and must be active HIGH 
at least two processor 
cycles before the current 
instruction 
ends in order to 
interrupt 
before 
the next instruction. 
INTR is level sensitive, 
active HIGH, and 
may be asynchronous 
to the system clock. 


NMI 
I 
NON-MASKABLE 
INTERRUPT 
REQUEST 
interrupts 
the 80286 with an 
internally 
supplied 
vector value of 2. No interrupt 
acknowledge 
cycles 
are 
performed. 
The interrupt 
enable bit in the 80286 flag word does not affect this 
input. The NMI input is active HIGH, may be asynchronous 
to the system 
clock, and is edge triggered 
after internal 
synchronization. 
For proper 
recognition, 
the input must have been previously 
lOW 
for at least four system 
clock cycles and remain HIGH for at least four system clock cycles. 


PEREa 
I 
PROCESSOR 
EXTENSION 
OPERAND 
REQUEST 
AND ACKNOWLEDGE 
PEACK 
0 
extend the memory 
management 
and protection 
capabilities 
of the 80286 to 
processor 
extensions. 
The PEREa 
input requests 
the 80286 to perform 
a 
data operand 
transfer 
for a processor 
extension. 
The PEACK output signals 
the processor 
extension 
when the requested 
operand 
is being transferred. 


PEREa 
is active HIGH and floats to 3-state 
OFF during bus hold 
acknowledge. 
PEACK may be asynchronous 
to the system 
clock. 
PEAcK 
is 
active lOW. 
sogy 
I 
PROCESSOR 
EXTENSION 
BUSY AND ERROR 
indicate 
the operating 
ERROR 
I 
condition 
of a processor 
extension 
to the 80286. 
An active sogy input stops 
80286 program 
execution 
on WAIT and some ESe instructions 
until sogy 
becomes 
inactive 
(HIGH). The 80286 may be interrupted 
while waiting 
for 
BUSY to become 
inactive. 
An active ERROR 
input causes the 80286 to 
perform 
a processor 
extension 
interrupt 
when executing 
WAIT or some ESe 
instructions. 
These 
inputs are active lOW 
and may be asynchronous 
to the 
system clock. These inputs have internal 
pull-up resistors. 
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Symbol 
Type 
Name and Function 


RESET 
I 
SYSTEM 
RESET clears the intemallogic 
of the 80286 and is active HIGH. 
The 80286 
may be reinitialized 
at any time with a LOW to HIGH transition 
on 
RESET which remains 
active for more than 16 system clock cycles. 
During 
RESET active, the output pins of the 80286 enter the state shown below: 


80286 Pin State During Reset 


Pin Value 
Pin Namea 


1 (HIGH) 
SO,ST,~,A23-AO,~,~ 
o (LOW) 
M/iO, COD/lfJ'fA, 
HLDA (Note 1) 
3-stateOFF 
015-00 


Operation 
of the 80286 
begins after a HIGH to LOW transition 
on RESET. 


The HIGH to LOW transition 
of RESET must be synchronous 
to the system 
clock. Approximately 
38 eLK cycles from the trailing edge of RESET are 
required 
by the 80286 for internal 
initialization 
before the first bus cycle, to 
fetch code from the power-on 
execution 
address, 
occurs. 
A LOW to HIGH transition 
of RESET synchronous 
to the system 
clock will 
end a processor 
cycle at the second 
HIGH to LOW transition 
of the system 
clock. The LOW to HIGH transition 
of RESET may be asynchronous 
to the 
system 
clock; however, 
in this case it cannot 
be predetermined 
which 
phase 
of the processor 
clock will occur during the next system 
clock period. 
Synchronous 
LOW to HIGH transitions 
of RESET are required 
only for 
systems 
where the processor 
clock must be phase synchronous 
to another 
clock. 


Vss 
I 
SYSTEM 
GROUND: 
0 Volts. 


Vcc 
I 
SYSTEM 
POWER: + 5 Volt Power Supply. 


CAP 
I 
SUBSTRATE 
FILTER 
CAPACITOR: 
a 0.047 ",F ± 20% 
12V capacitor 
must 
be connected 
between 
this pin and ground. 
This capacitor 
filters the output of 
the internal 
substrate 
bias generator. 
A maximum 
DC leakage 
current 
of 1 ",A 
is allowed 
through 
the capacitor .. 


For correct 
operation 
of the 80286, the substrate 
bias generator 
must charge 
this capacitor 
to its operating 
voltage. 
The capacitor 
chargeup 
time is 5 
milliseconds 
(max.) after Vcc and CLK reach their specified 
AC and DC 
parameters. 
RESET may be applied 
to prevent 
spurious 
activity 
by the CPU 
during this time. After this time, the 80286 processor 
clock can be 
synchronized 
to another 
clock by pulsing RESET LOW synchronous 
to the 
system clock. 


NOTE: 
1. HLDA 
is only Low if HOLD 
is inactive 
(Low). 


The 80286 is an advanced, high-performance micro- 
processor with specially optimized capabilities for 
multiple user and multi-tasking systems. Depending 
on the application, a 12.5 MHz 80286's performance 
is up to six times faster than the standard 5 MHz 
8086's, while providing complete upward software 
compatibility with Intel's 8086, 88, and 186 family of 
CPU's. 
. 


The 80286 operates in two modes: 8086 real ad- 
dress mode and protected virtual address mode. 
Both modes execute a superset of the 8086 and 88 
instruction set. 


In 8086 real address mode programs use real ad- 
dresses with up to one megabyte of address space. 
Programs use virtual addresses in protected virtual 
address mode, also called protected mode. In pro- 
t~cted mode, ~he80286 CPU automatically maps 1 
gigabyte of virtual addresses per task into a 16 
~egabyte real address space. This mode also pro- 
vides memory protection to isolate the operating 
system and ensure privacy of each tasks' programs 
and data. Both modes provide the same base in- 
struction set, registers, and addressing modes. 


The following Functional Description describes first, 
the 
base 
80286 
architecture 
common 
to 
both 
modes, second, 8086 real address mode, and third, 
protected mode. 


The 8086, 88, 186, and 286 CPU family all contain 
the same basic set of registers, instructions, and 
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NAME 
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REGISTER 
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CH 
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addressing modes. The 80286 processor is upward 
compatible with the 8086, 8088, and 80186 CPU's. 


The 80286 base architecture has fifteen registers as 
shown in Figure 3. These registers are grouped into 
the following four categories: 


Ge~eral 
Registers: 
Eight 16-bit general purpose 
registers used to contain arithmetic and logical oper- 
ands. Four of these (AX, BX, CX, and OX) can be 
~sed e~therin their entirety as 16-bit words or split 
Into pairs of separate 8-bit registers. 


Se~ment 
Registers: 
Four 16-bit special purpose 
registers select, at any given time, the segments of 
memory that are immediately addressable for code, 
stack, and data. (For usage, refer to Memory Organi- 
zation.) 


Base and Index Registers: 
Four of the general pur- 
pose registers may also be used to determine offset 
addresses of operands in memory. These registers 
may contain base addresses or indexes to particular 
locatio~s within a segment. The addressing mode 
determines the specific registers used for operand 
address calculations. 


Status and Control 
Registers: 
The 3 16-bit special 
purpose registers in figure 3A record or control cer- 
tain aspects of the 80286 processor state including 
the Instruction Pointer, which contains the offset ad- 
dress of the next sequential instruction to be execut- 
ed. 
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Figure 3. Register 
Set 


Figure 3a., Status and Control 
Register 
Bit Functions 


Table 2 Flags Word Bit Functions 


The Flags word (Flags) records specific characteris- 
tics of the result of logical and arithmetic instructions 
(bits 0, 2, 4, 6, 7, and 11) and controls the operation 
of the 80286 within a given operating mode (bits 8 
and 9). Flags is a 16-bit register. The function of the 
flag bits is given in Table 2. 


The instruction set is divided into seven categories: 
data transfer, arithmetic, shift/rotate/logical, 
string 
manipulation, control transfer, high level instruc- 
tions, and processor control. These categories are 
summarized in Figure 4. 


An 80286 instruction can reference zero, one, or two 
operands; where an operand resides in a register, in 
the instruction itself, or in memory. Zero-operand in- 
structions (e.g. NOP and HLT) are usually one byte 
long. One-operand instructions (e.g. INC and DEC) 
are usually two bytes long but some are encoded in 
only one byte. One-operand instructions may refer- 
ence a register or memory location. Two-operand 
instructions permit the following six types of instruc- 
tion operations: 


-Register 
to Register 
-Memory 
to Register 
-Immediate 
to Register 
-Memory 
to Memory 
-Register 
to Memory 
-Immediate 
to Memory 


Bit 
Name 
Function 
Position 


0 
CF 
Carry Flag-Set 
on high-order 
bit 
carry or borrow; 
cleared 
otherwise 


2 
PF 
Parity Flag-Set 
if low-order 
8 bits 
of result contain 
an even number 
of 
1-bits; cleared 
otherwise 


4 
AF 
Set on carry from or borrow to the 
low order four bits of AL; cleared 
otherwise 
6 
ZF 
Zero Flag-Set 
if result is zero; 
cleared 
otherwise 
7 
SF 
Sign Flag-Set 
equal to high-order 
bit of result (0 if positive, 
1 if negative) 


11 
OF 
Overflow 
Flag-Set 
if result is a too- 
large positive 
number 
or a too-small 
negative 
number 
(excluding 
sign-bit) 
to fit in destination 
operand; 
cleared 
otherwise 


8 
TF 
Single Step Flag-Once 
set, a sin- 
gle step interrupt 
occurs 
after the 
next instruction 
executes. 
TF is 
cleared 
by the single step interrupt. 


9 
IF 
Interrupt-enable 
Flag-When 
set, 
maskable 
interrupts 
will cause the 
CPU to transfer 
control 
to an inter- 
rupt vector 
specified 
location. 


10 
OF 
Direction 
Flag-Causes 
string 
instructions 
to auto decrement 
the appropriate 
index registers 
when set. Clearing 
OF causes 
auto increment. 


Two-operand instructions (e.g. MOV and ADD) are 
usually three to six bytes long. Memory to memory 
operations are provided by a special class of string 
instructions requiring one to three bytes. For de- 
tailed instruction formats and encodings refer to the 
instruction set summary at the end of this document. 


For detailed operation and usage of each instruc- 
tion, see Appendix of 80286 Programmer's Refer- 
ence Manual (Order No. 210498) 


GENERAL 
PURPOSE 


MOV 
Move byte or word 


PUSH 
Push word onto stack 


POP 
Pop word off stack 


PUSHA 
Push all registers 
on stack 


POPA 
Pop all registers 
from stack 


XCHG 
Exchange 
byte or word 


XLAT 
Translate 
byte 


INPUT IOUTPUT 


IN 
I 
Input byte or word 


OUT 
I 
Output byte or word 


ADDRESS 
OBJECT 


LEA 
Load effective 
address 


LDS 
Load pointer 
using DS 


LES 
Load pointer 
using ES 


FLAG TRANSFER 


LAHF 
Load AH register from flags 


SAHF 
Store AH register 
in flags 


PUSHF 
Push flags onto stack 


POPF 
Pop flags off stack 


MOVS 
Move byte or word string 


INS 
Input bytes or word string 


OUTS 
Output 
bytes or word string 


CMPS 
Compare 
byte or word string 


SCAS 
Scan byte or word string 


LODS 
Load byte or word string 


STOS 
Store byte or word string 


REP 
Repeat 


REPE/REPZ 
Repeat while equal/zero 


REPNE/REPNZ 
Repeat 
while not equal/not 
zero 


ADDITION 


ADD 
Add byte or word 


ADC 
Add byte or word with carry 


INC 
Increment 
byte or word by 1 


AM 
ASCII adjust for addition 


DM 
Decimal 
adjust for addition 


SUBTRACTION 


SUB 
Subtract 
byte or word 


SBB 
Subtract 
byte or word with borrow 


DEC 
Decrement 
byte or word by 1 


NEG 
Negate 
byte or word 


CMP 
Compare 
byte or word 


AAS 
ASCII adjust for subtraction 


DAS 
Decimal 
adjust for subtraction 


MULTIPLICATION 


MUL 
Multiple 
byte or word unsigned 


IMUL 
Integer 
multiply 
byte or word 


MM 
ASCII adjust for multiply 


DIVISION 


DIV 
Divide byte or word unsigned 


IDIV 
Integer divide byte or word 


AAD 
ASCII adjust for division 


CBW 
Convert 
byte to word 


CWD 
Convert 
word to doubleword 


LOGICALS 


NOT 
"Not" 
byte or word 


AND 
"And" 
byte or word 


OR 
"Inclusive 
or" byte or word 


XOR 
"Exclusive 
or" byte or word 


TEST 
"Test" 
byte or word 


SHIFTS 


SHLISAL 
Shift logical/arithmetic 
left byte or word 


SHR 
Shift logical right byte or word 


SAR 
Shift arithmetic 
right byte or word 


ROTATES 


ROL 
Rotate 
left byte or word 


ROR 
Rotate 
right byte or word 


RCL 
Rotate through 
carry left byte or word 


RCR 
Rotate through 
carry right byte or word 
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CONDITIONAL 
TRANSFERS 
UNCONDITIONAL 
TRANSFERS 


JA/JNBE 
Jump if above/not 
below nor equal 
CALL 
Call procedure 


JAE/JNB 
Jump if above or equal/not 
below 
RET 
Return from procedure 


JB/JNAE 
Jump if below/not 
above nor equal 
JMP 
Jump 


JBE/JNA 
Jump if below or equal/not 
above 


JC 
Jump if carry 
ITERATION 
CONTROLS 


JE/JZ 
Jump if equal/zero 


JG/JNLE 
Jump if greater/not 
less nor equal 
LOOP 
Loop 


JGE/JNL 
Jump if greater or equal/not 
less 
LOOPE/LOOPZ 
Loop if equal/zero 


JLlJNGE 
Jump if less/not 
greater 
nor equal 
LOOPNE/LOOPNZ 
Loop if not equal/not 
zero 


JLE/JNG 
Jump if less or equal/not 
greater 
JCXZ 
Jump if register 
CX = 0 


JNC 
Jump if not carry 


JNE/JNZ 
Jump if not equal/not 
zero 
INTERRUPTS 


JNO 
Jump if not overflow 


JNP/JPO 
Jump if not parity/parity 
odd 
INT 
Interrupt 


JNS 
Jump if not sign 
INTO 
Interrupt 
if overflow 


JO 
Jump if overflow 
IRET 
Interrupt 
return 


JP/JPE 
Jump if parity/parity 
even 


JS 
Jump if sign 


FLAG OPERATIONS 


STC 
Set carry flag 


CLC 
Clear carry flag 


CMC 
Complement 
carry flag 


STD 
Set direction 
flag 


CLD 
Clear direction 
flag 


STI 
Set interrupt 
enable flag 


CLI 
Clear interrupt 
enable flag 


EXTERNAL 
SYNCHRONIZATION 


HLT 
Halt until interrupt 
or reset 


WAIT 
Wait for BUSY not active 


ESC 
Escape to extension 
processor 


LOCK 
Lock bus during next instruction 


NO OPERATION 


NOP 
No operation 


EXECUTION 
ENVIRONMENT 
CONTROL 


LMSW 
Load machine 
status word 


SMSW 
Store machine 
status word 


ENTER 
Format 
stack for procedure 
entry 


LEAVE 
Restore 
stack for procedure 
exit 


BOUND 
Detects 
values outside 
prescribed 
range 


Memory Organization 


Memory is organized as sets of variable length seg- 
ments. Each segment is a linear contiguous se- 
quence of up to 64K (216) 8-bit bytes. Memory is 
addressed using a two component address (a point- 
er) that consists of a 16-bit segment selector, and a 
16-bit offset. The segment selector indicates the de- 
sired segment in memory. The offset component in- 
dicates the desired byte address within the segment. 
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Memory 
Segment 
Register 
Implicit 
Segment 
Reference 
Needed 
Used 
Selection 
Rule 


Instructions 
Code(CS) 
Automatic 
with instruction 
prefetch 


Stack 
8tack 
(88) 
All stack pushes and pops. Any memory 
reference 
which uses BP 
as a base register. 


Local Data 
Data (D8) 
All data references 
except 
when relative 
to stack or 
string destination 


External 
(Global) 
Data 
Extra (E8) 
Alternate 
data segment 
and destination 
of string operation 


All instructions that address operands in memory 
must specify the segment and the offset. For speed 
and compact instruction encoding, segment selec- 
tors are usually stored in the high speed segment 
registers. An instruction need specify only the de- 
sired segment register and an offset in order to ad- 
dress a memory operand. 


Most instructions need not explicitly specify which 
segment register is used. The correct segment reg· 
ister is automatically chosen according to the rules 
of Table 3. These rules follow the way programs are 
written (see Figure 6) as independent modules that 
require areas for code and data, a stack, and access 
to external data areas. 


Special segment override instruction prefixes allow 
the implicit segment register selection rules to be 
overridden for special cases. The stack, data, and 
extra segments may coincide for simple programs. 
To access opertmds not residing in one of the four 
immediately available segments, a full 32-bit pointer 
or a new segment selector must be loaded. 


Addressing 
Modes 


The 80286 provides a total of eight addressing 
modes for instructions to specify operands. Two ad- 
dressing modes are provided for instructions that 
operate on register or immediate operands: 


Register Operand Mode: The operand is locat- 
ed in one of the 8 or 16·bit general registers. 
Immediate Operand Mode: The operand is in- 
cluded in the instruction. 


Six modes are provided to specify the location of an 
operand in a memory segment. A memory operand 
address consists of two 16-bit components: seg- 
ment selector and offset. The segment selector is 
supplied by a segment register either implicitly cho- 
sen by the addressing mode or explicitly chosen by 
a segment override prefix. The offset is calculated 
by summing any combination of the following three 
address elements: 
the displacement 
(an 8 or 16-bit immediate val- 
ue contained in the instruction) 
the base (contents of either the BX or BP base 
registers) 
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Figure 6. Segmented Memory Helps 
Structure Software 


the index (contents of either the Sl or 01 index 
registers) 


Any carry out from the 16-bit addition is ignored. 
Eight-bit displacements are sign extended to 16-bit 
values. 


Combinations of these three address elements de· 
fine the six memory addressing modes, described 
below. 


Direct Mode: The operand's offset is contained in 
the instruction as an 8 or 16-bit displacement ele- 
ment. 


Register Indirect Mode: The operand's offset is in 
one of the registers Sl, 01, BX, or BP. 


Based Mode: The operand's offset is the sum of an 
8 or 16-bit displacement and the contents of a base 
register (BX or BP). 
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Indexed 
Mode: The operand's offset is the sum of 
an 8 or 16-bit displacement and the contents of an 
index register (SI or 01). 


Based 
Indexed 
Mode: The operand's offset is the 
sum of the contents of a base register and an index 
register. 


Based 
Indexed 
Mode with Displacement: 
The op- 
erand's offset is the sum of a base register's con- 
tents, an index register's contents, and an 8 or 16-bit 
displacement. 


The 80286 
types: 


Integer: 
A signed binary numeric value con- 
tained in an 8-bit byte or a 16-bit 
word. All operations assume a 2's 
complement representation. Signed 
32 and 64-bit integers are supported 
using the Numeric Data Processor, 
the 80287. 
An unsigned binary numeric value 
contained in an 8-bit byte or 16-bit 
word. 
A 32-bit quantity, composed of a 
segment selector component and an 
offset component. Each component 
is a 16·bit word. 
A contiguous sequence of bytes or 
words. A string may contain from 1 
byte to 64K bytes. 
A byte representation of alphanu- 
meric and control characters using 
the ASCII standard of character rep- 
resentation. 
A byte (unpacked) representation of 
the decimal digits 0-9. 
A byte (packed) representation of 
two decimal digits 0-9 
storing one 
digit in each nibble of the byte. 
A signed 32, 64, or 80-bit real num- 
ber representation.. (Floating point 
operands are supported using the 
80287 Numeric Processor). 


Figure 7 graphically represents the data types sup- 
ported by the 80286. 


110 Space 


The I/O space consists of 64K 8-bit or 32K 16-bit 
ports. I/O instructions address the I/O space with 


either an 8-bit port address, specified in the instruc- 
tion, or a 16-bit port address in the OX register. 8-bit 
port addresses are zero extended such that A1s-Aa 
are LOW. I/O 
port addresses 00F8(H) through 
OOFF(H)are reserved. 
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Interrupt 
Related 
Does Return Address 
Function 
Point to Instruction 
Number 
Instructions 
Causing 
Exception? 


Divide error exception 
0 
DIV,IDIV 
Yes 


Single step interrupt 
1 
All 


NMI interrupt 
2 
INT 2 or NMI pin 


Breakpoint interrupt 
3 
INT3 


INTO detected overflow exception 
4 
INTO 
No 


BOUND range exceeded exception 
5 
BOUND 
Yes 


Invalid opcode exception 
6 
Any undefined opcode 
Yes 


Processor extension not available exception 
7 
ESCorWAIT 
Yes 


Intel reserved-do not use 
8-15 


Processor extension error interrupt 
16 
ESCorWAIT 


Intel reserved-do not use 
17-31 


User defined 
32-255 


Interrupts 


An interrupt transfers execution to a new program 
location. The old program address (CS:IP) and ma- 
chine state (Flags) are saved on the stack to allow 
resumption of the interrupted program. Interrupts fall 
into three classes: hardware initiated, INT instruc- 
tions, and instruction exceptions. Hardware initiated 
interrupts occur in response to an external input and 
are classified as non-maskable or maskable. Pro- 
grams may cause an interrupt with an INT instruc- 
tion. Instruction exceptions occur when an unusual 
condition, which prevents further instruction pro- 
cessing, is detected while attempting to execute an 
instruction. The return address from an exception 
will always point at the instruction causing the ex- 
ception and include any leading instruction prefixes. 


A table containing up to 256 pointers defines the 
proper interrupt service routine for each interrupt. In- 
terrupts 0-31, some of which are used for instruc- 
tion exceptions, are reserved. For each interrupt, an 
8-bit vector must be supplied to the 80286 which 
identifies the appropriate table entry. Exceptions 
supply the interrupt vector internally. INT instructions 
contain or imply the vector and allow access to all 
256 interrupts. Maskable hardware initiated inter- 
rupts supply the 8-bit vector to the CPU during an 
interrupt acknowledge bus sequence. Non-maska- 
ble hardware interrupts use a predefined internally 
supplied vector. 


MASKABLE 
INTERRUPT 
(INTR) 


The 80286 provides a maskable hardware interrupt 
request pin, INTR. Software enables this input by 


setting the interrupt flag bit (IF) in the flag word. All 
224 user-defined interrupt sources can share this in- 
put, yet they can retain separate interrupt handlers. 
An 8-bit vector read by the CPU during the interrupt 
acknowledge sequence (discussed in System Inter- 
face section) identifies the source of the interrupt. 


Further maskable interrupts are disabled while serv- 
icing an interrupt by resetting the IF bit as part of the 
response to an interrupt or exception. The saved 
flag word will reflect the enable status of the proces- 
sor prior to the interrupt. Until the flag word is re- 
stored to the flag register, the interrupt flag will be 
zero unless specifically set. The interrupt return in- 
struction includes restoring the flag word, thereby 
restoring the original status of IF. 


A non-maskable interrupt input (NMI) is also provid- 
ed. NMI has higher priority than INTR. A typical use 
of NMI would be to activate a power failure routine. 
The activation of this input causes an interrupt with 
an internally supplied vector value of 2. No external 
interrupt acknowledge sequence is performed. 


While executing the NMI servicing procedure, the 
80286 will service neither further NMI requests, 
INTR requests, nor the processor extension seg- 
ment overrun interrupt until an interrupt return (IRET) 
instruction is executed or the CPU is reset. If NMI 
occurs while currently servicing an NMI, its presence 
will be saved for servicing after executing the first 
IRET instruction. IF is cleared at the beginning of an 
NMI interrupt to inhibit INTR interrupts. 


The 80286 
has an internal 
interrupt 
that allows 
pro- 
grams 
to 
execute 
one 
instruction 
at a time. 
It is 
called 
the single 
step interrupt 
and is controlled 
by 
the single 
step flag bit (TF) in the flag word. 
Once 
this 
bit is set, an internal 
single 
step 
interrupt 
will 
occur 
after the next instruction 
has been executed. 
The interrupt 
clears the TF bit and uses an internally 
supplied 
vector 
of 1. The IRET instruction 
is used to 
set the TF bit and transfer 
control to the next instruc- 
tion to be single stepped. 


When 
simultaneous 
interrupt 
requests 
occur, 
they 
are processed 
in a fixed order as shown in Table 5. 
Interrupt 
processing 
involves 
saving the flags, return 
address, 
and 
setting 
CS:IP to point 
at the first 
in- 
struction 
of the interrupt 
handler. 
If other 
interrupts 
remain 
enabled 
they are processed 
before 
the first 
instruction 
of the current 
interrupt 
handler 
is execut- 
ed. The last interrupt 
processed 
is therefore 
the first 
one serviced. 


Table 
5. Interrupt 
Processing 
Order 


Order 
Interrupt 


1 
Instruction 
exception 


2 
Single step 
3 
NMI 


4 
Processor 
extension 
segment 
overrun 
5 
INTR 


6 
INT instruction 


Processor 
initialization 
or start 
up is accomplished 
by driving the RESET input pin HIGH. RESET forces 
the 80286 
to termin~te 
all execution 
and local bus 
activity. 
No instruction 
or bus activity 
will occur 
as 
long as RESET is active. 
After 
RESET becomes 
in- 
active 
and an internal 
processing 
interval 
elapses, 
the 
80286 
begins 
execution 
in real address 
mode 
with the instruction 
at physical 
location 
FFFFFO(H). 
RESET 
also sets some 
registers 
to predefined 
val- 


ues as shown 
in Table 6. 
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Table 
6. 80286 Initial 
Register 
State 
after 
RESET 


Flag word 
0002(H) 
Machine 
Status Word 
FFFO(H) 
Instruction 
pointer 
FFFO(H) 
Code segment 
FOOO(H) 
Data segment 
OOOO(H) 
Extra segment 
OOOO(H) 
Stack segment 
OOOO(H) 


HOLD 
must not be active 
during 
the time from the 
leading edge of RESET to 34 CLKs after the trailing 
edge of RESET. 


Machine Status Word Description 


The 
machine 
status 
word 
(MSW) 
records 
when 
a 
task switch 
takes 
place and controls 
the operating 
mode of the 80286. It is a 16-bit register of which the 
lower four bits are used. One bit places the CPU into 
protected 
mode, while the other three bits, as shown 
in Table 7, control 
the processor 
extension 
interface. 
After 
RESET, 
this register 
contains 
FFFO(H) which 
places the 80286 
in 8086 real address 
mode. 


Table 
7. MSW Bit Functions 


Bit 
Name 
Function 
Position 


0 
PE 
Protected 
mode enable 
places the 
80286 into protected 
mode and cannot 
be cleared 
except 
by RESET. 


1 
MP 
Monitor 
processor 
extension 
allows 
WAIT instructions 
to cause a processor 
extension 
not present 
exception 
(number 
7). 


2 
EM 
Emulate 
processor 
extension 
causes 
a 
processor 
extension 
not present 
exception 
(number 
7) on ESC 
instructions 
to allow emulating 
a 
processor 
extension. 


3 
TS 
Task switched 
indicates 
the next 
instruction 
using a processor 
extension 
will cause exception 
7, allOWing software 
to test whether 
the current 
processor 
extension 
context 
belongs 
to the current 
task. 


The 
LMSW 
and 
SMSW 
instructions 
can 
load 
and 
store 
the 
MSW in real address 
mode. 
The 
recom- 
mended 
use of TS, EM, and MP is shown in Table 8. 


Instructions 
TS 
MP 
EM 
Recommended 
Use 
Causing 
Exception 
7 


0 
0 
0 
Initial encoding 
after RESET. 80286 operation 
is identical 
to 8086, 88. 
None 


0 
0 
1 
No processor 
extension 
is available. 
Software 
will emulate 
its function. 
ESC 
1 
0 
1 
No processor 
extension 
is available. 
Software 
will emulate 
its function. 
The current 
ESC 
processor 
extension 
context 
may belong to another 
task. 


0 
1 
0 
A processor 
extension 
exists. 
None 
1 
1 
0 
A processor 
extension 
exists. The current 
processor 
extension 
context 
may belong to 
ESCor 
another 
task. The Exception 
7 on WAIT allows software 
to test for an error pending 
WAIT 
from a previous 
processor 
extension 
operation. 


The HLT instruction stops program execution and 
prevents the CPU from using the local bus until re- 
started. Either NMI, INTR with IF = 1, or RESETwill 
force the 80286 out of halt. If interrupted, the saved 
CS:IP will point to the next instruction after the HLT. 


The 80286 executes a fully upward-compatible su- 
perset of the 8086 instruction set in real address 
mode. In real address mode the 80286 is object 
code compatible with 8086 and 8088 software. The 
real address mode architecture (registers and ad- 
dressing modes) is exactly as described in the 
80286 Base Architecture section of this Functional 
Description. 


Physical memory is a contiguous array of up to 
1,048,576 bytes (one megabyte) addressed by pins 
~ 
through A19and SHE. A20through A23should be 
ignored. 


In real address mode physical memory is a contigu- 
ous array of up to 1,048,576 bytes (one megabyte) 
addressed by pins ~ 
through A19 and BHE. Ad- 
dress bits A20-A23 may not always be zero in real 
mode. A20-A23 should not be used by the system 
while the 80286 is operating in Real Mode. 


The selector portion of a pointer is interpreted as the 
upper 16 bits of a 20-bit segment address. The lower 
four bits of the 20-bit segment address are always 
zero. Segment addresses, therefore, begin on multi- 
ples of 16 bytes. See Figure 8 for a graphic repre- 
sentation of address information. 


All segments in real address mode are 64K bytes in 
size and may be read, written, or executed. An ex- 
ception or interrupt can occur if data operands or 
instructions attempt to wrap around the end of a 
segment (e.g. a word with its low order byte at offset 
FFFF(H) and its high order byte at offset OOOO(H).If, 
in real address mode, the information contained in a 
segment does not use the full 64K bytes, the unused 
end of the segment may be overlayed by another 
segment to reduce physical memory requirements. 


The 80286 reserves two fixed areas of memory in 
real address mode (see Figure 9); system initializa- 


tion area and interrupt table area. Locations from 
addresses FFFFO(H) through 
FFFFF(H) are re- 


served for system initialization. Initial execution be- 
gins at 
location 
FFFFO(H). Locations 
OOOOO(H) 


through 003FF(H) are reserved for interrupt vectors. 


El 
-ooo 
1-.5--0-FF-S-E-T--OI 
OFFSET 


ADDRESS 
-------- 


Figure 8. 8086 Real Address Mode 
Address Calculation 


RESET 
BOOTSTRAP 
PROGRAM 
JUMP 
~:: 
· 
~:: 
·· 


INTERRUPT 
POINTER 
FOR VECTOR 
255 
~:: 
· 
~ 
·· 


INTERRUPT 
POINTER 
FOR VECTOR 
1 


INTERRUPT 
POINTER 
FOR VECTOR 
0 


Figure 9. 8086 Real Address Mode Initially 
Reserved Memory Locations 
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Interrupt 
Related 
Return Address 
Function 
Number 
Instructions 
Before 
Instruction? 


Interrupt 
table limit too small exception 
8 
INT vector is not within table limit 
Yes 


Processor 
extension 
segment 
overrun 
9 
ESC with memory operand 
extend- 
No 
interrupt 
ing beyond offset FFFF(H) 


Segment 
overrun exception 
13 
Word memory reference 
with offset 
Yes 
= FFFF(H) or an attempt to exe- 
cute past the end of a segment 


Table 9 shows the interrupt 
vectors 
reserved 
for ex- 
ceptions 
and interrupts 
which indicate 
an addressing 
error. The exceptions 
leave the CPU in the state ex- 
isting 
before 
attempting 
to 
execute 
the 
failing 
in- 
struction 
(except for PUSH, POP, PUSHA, or paPA). 
Refer to the next section 
on protected 
mode initiali- 
zation for a discussion 
on exception 
8. 


To prepare 
the 80286 for protected 
mode, the L1DT 
instruction 
is used to load the 24-bit 
interrupt 
table 
base and 16-bit limit for the protected 
mode interrupt 
table. This instruction 
can also set a base and limit 
for the interrupt 
vector 
table 
in real address 
mode. 
After 
reset, 
the interrupt 
table 
base 
is initialized 
to 
OOOOOO(H)and its size set to 03FF(H). 
These values 
are compatible 
with 8086, 88 software. 
L1DT should 
only be executed 
in preparation 
for protected 
mode. 


Shutdown 
occurs 
when 
a severe 
error 
is detected 
that 
prevents 
further 
instruction 
processing 
by the 
CPU. Shutdown 
and halt are externally 
signalled 
via 
a halt bus operation. 
They can be distinguished 
by 
A1 HIGH for halt and A1 LOW for shutdown. 
In real 
address 
mode, shutdown 
can occur 
under two con- 
ditions: 


• 
Exceptions 
8 or 13 happen and the IDT limit does 
not include 
the interrupt 
vector. 


• 
A CALL INT or PUSH instruction 
attempts 
to wrap 
around 
the stack segment 
when SP is not even. 


An NMI input can bring the CPU out of shutdown 
if 
the 
IDT limit is at least OOOF(H) and SP is greater 
than 0005(H), 
otherwise 
shutdown 
can only be exit- 
ed via the RESET input. 


PROTECTED 
VIRTUAL 
ADDRESS 
MODE 


The 80286 
executes 
a fully upward-compatible 
su- 
perset of the 8086 instruction 
set in protected 
virtual 
address 
mode 
(protected 
mode). 
Protected 
mode 
also provides 
memory 
management 
and protection 
mechanisms 
and associated 
instructions. 


The 
80286 
enters 
protected 
virtual 
address 
mode 
from 
real address 
mode 
by setting 
the PE (Protec- 
tion Enable) 
bit of the machine 
status word with the 
Load Machine 
Status Word (LMSW) instruction. 
Pro- 
tected 
mode 
offers 
extended 
physical 
and 
virtual 
memory 
address 
space, 
memory 
protection 
mecha- 


nisms, and new operations 
to support 
operating 
sys- 
tems and virtual memory. 


All registers, 
instructions, 
and addressing 
modes de- 
scribed 
in the 80286 
Base 
Architecture 
section 
of 
this 
Functional 
Description 
remain 
the 
same. 
Pro- 
grams for the 8086, 88, 186, and real address 
mode 
80286 can be run in protected 
mode; however, 
em- 
bedded 
constants 
for segment 
selectors 
are differ- 
ent. 


Memory Size 


The 
protected 
mode 
80286 
provides 
a 1 gigabyte 
virtual 
address 
space 
per task 
mapped 
into 
a 16 
megabyte 
physical address space defined 
by the ad- 
dress 
pin 
A23-AO 
and 
BHE. 
The 
virtual 
address 
space 
may 
be 
larger 
than 
the 
physical 
address 
space 
since 
any use of an address 
that 
does 
not 
map to a physical 
memory 
location 
will cause 
are- 
startable 
exception. 


As in real address 
mode, 
protected 
mode uses 32- 
bit pointers, 
consisting 
of 16-bit selector 
and offset 
components. 
The selector, 
however, 
specifies 
an in- 
dex into a memory 
resident 
table rather than the up- 
per 
16-bits 
of a real 
memory 
address. 
The 
24-bit 
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base address of the desired segment is obtained 
from the tables in memory. The 16-bit offset is add- 
ed to the segment base address to form the physical 
address as shown in Figure 10. The tables are auto- 
matically referenced by the CPU whenever a seg- 
ment register is loaded with a selector. All 80286 
instructions which load a segment register will refer- 
ence the memory based tables without additional 
software. The memory based tables contain 8 byte 
values called descriptors. 


1-- 


1 


SEQlllENT 


DESCRIPTOR 
TABLE 


DESCRIPTORS 
Descriptors define the use of memory. Special types 
of descriptors also define new functions for transfer 
of control and task switching. The 80286 has seg- 
ment descriptors for code, stack and data segments, 
and system control descriptors for special system 
data segments and control transfer operations. De- 
scriptor accesses are performed as locked bus op- 
erations to assure descriptor integrity in multi-proc- 
essor systems. 


CODE AND DATA 
SEGMENT 
DESCRIPTORS 
(S = 1) 
Besides segment base addresses, code and data 
descriptors contain other segment attributes includ- 
ing segment size (1 to 64K bytes), access rights 
(read only, read/write, execute only, and execute/ 
read), and presence in memory (for virtual memory 
systems) (See Figure 11). Any segment usage vio- 
lating a segment attribute indicated by the segment 
descriptor will prevent the memory cycle and cause 
an exception or interrupt. 


Code or Data Segment 
Descriptor 
., 


+7 
lNTEL 
RESERVED'" 
+1 


ACCESS 
+5 
RIGHTS 
BYTE 
8ASEn-l. 
+4 


+. 
BASEts-o 
+. 


+1 
UMIT,5-0 
" 


Bit 
Name 
Function 
Position 
7 
Present 
(P) 
P = 
1 
Segment 
is mapped 
into physical 
memory. 


p=o 
No mapping 
to physical 
memory 
exits, base and limit are 
not used. 


6-5 
Descriptor 
Privilege 
Segment 
privilege 
attribute 
used in privilege 
tests. 


Level (DPL) 
4 
Segment 
Descrip- 
S=1 
Code or Data (includes 
stacks) 
segment 
descriptor 
tor(S) 
S=O 
System 
Segment 
Descriptor 
or Gate Descriptor 
;3 
Executable 
(E) 
E=O 
Data segment 
descriptor 
type is: 


) 


If 
2 
Expansion 
Direc- 
ED = 0 
Expand 
up segment, 
offsets 
must be ,;; limit. 
Data 
tion(ED) 
ED = 
1 
Expand down segment, 
offsets 
must be > limit. 
Segment 
1 
Writeable 
(W) 
W = 0 
Data segment 
may not be written 
into. 
(S = 
1, 


W= 
1 
Data segment 
may be written 
into. 
E = 0) 
3 
Executable 
(E) 
E = 
1 
Code Segment 
Descriptor 
type is: 


} 


If 
2 
Conforming 
(C) 
C=1 
Code segment 
may only be executed 
Code 
when CPL ;;, DPL and CPL 
Segment 
remains 
unchanged. 


1 
Readable 
(R) 
R =0 
Code segment 
may not be read 
(S = 
1, 
R = 
1 
Code segment 
may be read. 
E = 
1) 


0 
Accessed 
(A) 
A=O 
Segment 
has not been accessed. 
A=1 
Segment 
selector 
has been loaded into segment 
register 
or used by selector 
test instructions. 


Type 
Field 
Definition 


• 


Code and data (including stack data) are stored in 
two types of segments: code segments and data 
segments. Both types are identified and defined by 
segment descriptors (S = 1). Code segments are 
identified by the executable (E) bit set to 1 in the 
descriptor access rights byte. The access rights byte 
of both code and data segment descriptor types 
have three fields in common: present (P) bit, De- 
scriptor Privilege Level (DPL), and accessed (A) bit. 
If P = 0, any attempted use of this segment will 
cause a not-present exception. DPL specifies the 
privilege level of the segment descriptor. DPL con- 
trols when the descriptor may be used by a task 
(refer to privilege discussion below). The A bit shows 
whether the segment has been previously accessed 
for usage profiling, a necessity for virtual memory 
systems. The CPU will always set this bit when ac- 
cessing the descriptor. 


Data segments (S = 1, E = 0) may be either read- 
only or read-write as controlled by the W bit of the 
access rights byte. Read-only (W = 0) data seg- 
ments may not be written into. Data segments may 
grow in two directions, as determined by the Expan- 
sion Direction (ED) bit: upwards (ED = 0) for data 
segments, and downwards (ED = 1) for a segment 
containing a stack. The limit field for a data segment 
descriptor is interpreted differently depending on the 
ED bit (see Figure 11). 


A code segment (S = 1, E = 1) may be execute- 
only or execute/read as determined by the Read- 
able (R) bit. Code segments may never be written 
into and execute-only code segments (R = 0) may 
not be read. A code segment may also have an attri- 
bute called conforming (C). A conforming code seg- 
ment may be shared by programs that execute at 
different privilege levels. The DPL of a conforming 
code segment defines the range of privilege levels 
at which the segment may be executed (refer to priv- 
ilege discussion below). The limit field identifies the 
last byte of a code segment. 


SYSTEM SEGMENT DESCRIPTORS (S = 0, 
TYPE = 1-3) 


In addition to code and data segment descriptors, 
the protected mode 80286 defines System Segment 
Descriptors. These descriptors define special sys- 
tem data segments which contain a table of descrip- 
tors (Local Descriptor Table Descriptor) or segments 
which contain the execution state of a task (Task 
State Segment Descriptor). 


Figure 12 gives the formats for the special system 
data segment descriptors. The descriptors contain a 
24·bit base address of the segment and a 16-bit Iim· 
it. The access byte defines the type of descriptor, its 
state and privilege level. The descriptor contents are 
valid and the segment is in physical memory if P = 1. 
If P = 0, the segment is not valid. The DPL field is 
only used in Task State Segment descriptors and 
indicates the privilege level at which the descrip- 
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tor may be used (see Privilege). Since the Local De- 
scriptor Table descriptor may only be used by a spe- 
cial privileged instruction, the DPL field is not used. 
Bit 4 of the access byte is 0 to indicate that it is a 
system control descriptor. The type field specifies 
the descriptor type as indicated in Figure 12. 


System Segment Descriptor 


07 


+7 
_YU RDIItVU· 
.1 


+1 
8AM»-11 
•• 


+I 
-... 
+2 


+. 
1JIlfT•••• 


11 
., 


Name 
Value 
Description 


TYPE 
1 
Available 
Task State Segment 
(TSS) 
2 
Local Descriptor 
Table 
3 
Busy Task State Segment 
(TSS) 


P 
0 
Descriptor 
contents 
are not valid 
1 
Descriptor 
contents 
are valid 


DPL 
0-3 
Descriptor 
Privilege 
Level 


BASE 
24-bit 
Base Address 
of special 
system 
data 
number 
segment 
in real memory 


LIMIT 
16-bit 
Offset 
of last byte in segment 
number 


GATE DESCRIPTORS (5 = 0, TYPE = 4-7) 


Gates are used to control access to entry points 
within the target code segment. The gate descrip- 
tors are call gates, task gates, interrupt gates and 
trap gates. Gates provide a level of indirection be- 
tween the source and destination of the control 
transfer. This indirection allows the CPUto automati- 
cally perform protection checks and control entry 
point of the destination. Call gates are used to 
change privilege levels (see Privilege), task gates 
are used to perform a task switch, and interrupt and 
trap gates are used to specify interrupt service rou- 
tines. The interrupt gate disables interrupts (resets 
IF) while the trap gate does not. 


Gate Descriptor 
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Name 
Value 
Description 


4 
-Call 
Gate 


TYPE 
5 
-Task 
Gate 
6 
-Interrupt 
Gate 
7 
-Trap 
Gate 


P 
0 
- Descriptor 
Contents 
are not 
valid 
1 
- Descriptor 
Contents 
are 
valid 


DPL 
0-3 
Descriptor 
Privilege 
Level 


WORD 
Number 
of words to copy 
COUNT 
0-31 
from callers stack to called 
procedures 
stack. Only used 
with call gate. 


Selector 
to the target code 


DESTINATION 
16-bit 
segment 
(Call, Interrupt 
or 


SELECTOR 
selector 
Trap Gate) 
Selector 
to the target task 
state segment 
(Task Gate) 


DESTINATION 
16-bit 
Entry point within the target 
OFFSET 
offset 
code segment 


Figure 13. Gate Descriptor Format 


Figure 13 shows the format of the gate descriptors. 
The descriptor contains a destination pointer that 
points to the descriptor of the target segment and 
the entry point offset. The destination selector in an 
interrupt gate, trap gate, and call gate must refer to a 
code segment descriptor. These gate descriptors 
contain the entry point to prevent a program from 
constructing and using an illegal entry point. Task 
gates may only refer to a task state segment. Since 
task gates invoke a task switch, the destination off- 
set is not used in the task gate. 


Exception 13 is generated when the gate is used if a 
destination selector does not refer to the correct de- 
scriptor type. The word count field is used in the call 
gate descriptor to indicate the number of parameters 
(0-31 words) to be automatically copied from the 
caller's stack to the stack of the called routine when 
a control transfer changes privilege levels. The word 
count field is not used by any other gate descriptor. 


The access byte format is the same for all gate de- 
scriptors. P = 1 indicates that the gate contents are 
valid. P = 0 indicates the contents are not valid and 
causes exception 11 if referenced. OPL is the de- 


scriptor privilege level and specifies when this de- 
scriptor may be used by a task (refer to privilege 
discussion below). Bit 4 must equal 0 to indicate a 
system control descriptor. The type field specifies 
the descriptor type as indicated in Figure 13. 


SEGMENT DESCRIPTOR CACHE REGISTERS 
A segment descriptor cache register is assigned to 
each of the four segment registers (CS, Ss, OS,ES). 
Segment 
descriptors 
are 
automatically 
loaded 
(cached) into a segment descriptor cache register 
(Figure 14) whenever the associated segment regis- 
ter is loaded with a selector. Only segment descrip- 
tors may be loaded into segment descriptor cache 
registers. Once loaded, all references to that seg- 
ment of memory use the cached descriptor informa- 
tion instead of reaccessing the descriptor. The de- 2 
scriptor cache registers are not visible to programs. 
No instructions exist to store their contents. They 
only change when a segment register is loaded. 


SELECTOR FIELDS 
A protected mode selector has three fields: descrip- 
tor entry index, local or global descriptor table indi- 
cator (TI), and selector privilege (RPL) as shown in 
Figure 15. These fields select one of two memory 
based tables of descriptors, select the appropriate 
table entry and allow highspeed testing of the selec- 
tor's privilege attribute (refer to privilege discussion 
below). 
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Figure 14. Descriptor Cache Registers 


LOCAL 
AND GLOBAL 
DESCRIPTOR 
TABLES 


Two tables 
of descriptors, 
called 
descriptor 
tables, 
contain 
all descriptors 
accessible 
by a task 
at any 
given time. A descriptor 
table is a linear array of up 
to 8192 descriptors. 
The upper 13 bits of the selec- 


tor value are an index into a descriptor 
table. 
Each 
table has a 24-bit base register to locate the descrip- 
tor table in physical 
memory 
and a 16-bit limit regis- 
ter that confine 
descriptor 
access to the defined 
lim- 
its of the table as shown 
in Figure 
16. A restartable 
exception 
(13) will occur 
if an attempt 
is made 
to 
reference 
a descriptor 
outside 
the table limits. 


One table, called the Global 
Descriptor 
table (GDT), 
contains 
descriptors 
available 
to all tasks. The other 
table, called 
the Local Descriptor 
Table 
(LDT), con- 
tains descriptors 
that can be private to a task. Each 
task 
may have its own private 
LDT. The GDT may 
contain 
all descriptor 
types except interrupt 
and trap 
descriptors. 
The 
LDT 
may 
contain 
only 
segment, 
task gate, and call gate descriptors. 
A segment 
can- 
not be accessed 
by a task if its segment 
descriptor 
does not exist in either descriptor 
table at the time of 
access. 


'~- 
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Figure 16. Local and Global 
Descriptor 
Table Definition 


The LGOT and LLOT instructions 
load the base and 
limit of the global and local descriptor 
tables. 
LGOT 
and LLOT are privileged, 
Le. they may only be exe- 
cuted 
by trusted 
programs 
operating 
at level O. The 
LGOT instruction 
loads a six byte field containing 
the 
16-bit table limit and 24-bit physical 
base address 
of 
the Global 
Descriptor 
Table as shown 
in Figure 
17. 


The LLOT instruction 
loads a selector 
which 
refers 
to a Local Descriptor 
Table descriptor 
containing 
the 
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base address 
and limit for an LDT, as shown 
in Fig- 
ure 12. 
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Figure 17. Global Descriptor 
Table and Interrupt 
Descriptor 
Table Data Type 


INTERRUPT 
DESCRIPTOR 
TABLE 


The 
protected 
mode 
80286 
has a third 
descriptor 
table, 
called 
the 
Interrupt 
Descriptor 
Table 
(IDT) 
(see Figure 18), used to define 
up to 256 interrupts. 


It may contain 
only task gates, 
interrupt 
gates 
and 
trap gates. The IDT (Interrupt 
Descriptor 
Table) 
has 
a 24-bit physical 
base and 16-bit limit register 
in the 
CPU. 
The 
privileged 
L10T instruction 
loads 
these 
registers 
with 
a six byte value 
of identical 
form 
to 
that of the LGDT instruction 
(see Figure 17 and Pro- 
tected 
Mode Initialization). 


GATEFOA 
INTERRUPT 
If" 


QATEFOR 
INTERRUPT 
#n-1 


INT£RRUPT 
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(lOT) 
GATEFOA 
INTERRUPT 
#1 


GATE FOR 
INTERRUPT 
#0 lid 


Figure 18. Interrupt 
Descriptor 
Table Definition 


References 
to IDT entries 
are made via INT instruc- 
tions, external 
interrupt 
vectors, 
or exceptions. 
The 
lOT must be at least 
256 bytes 
in size to allocate 
space for all reserved 
interrupts. 


Privilege 


The 80286 has a four-level 
hierarchical 
privilege 
sys- 
tem which controls 
the use of privileged 
instructions 
and access to descriptors 
(and their associated 
seg- 
ments) 
within 
a task. Four-level 
privilege, 
as shown 
in Figure 
19, is an extension 
of the user/supervisor 
mode commonly 
found 
in minicomputers. 
The privi- 
lege levels are numbered 
0 through 
3. Level 0 is the 
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Figure 19. Four-Level 
Privilege 


most privileged level. Privilege levels provide pr?t?c- 
tion within a task. (Tasks are isolated by providing 
private LOT's for each task.) Operating system rou- 
tines, interrupt handlers, and other system software 
can be included and protected within the virtual ad- 
dress space of each task using the four levels of 
privilege. Each task in the system has a separate 
stack for each of its privilege levels. 


Tasks, descriptors, and selectors have a privilege 
level attribute that determines whether the descrip- 
tor may be used. Task privilege effects the use of 
instructions and descriptors. Descriptor and selector 
privilege only effect access to the descriptor. 


TASK PRIVILEGE 
A task always executes at one of the four privilege 
levels. The task privilege level at any specific instant 
is called the Current Privilege Level (CPL) and is de- 
fined by the lower two bits of the CS register. CPL 
cannot change during execution in a single code 
segment. A task's CPL may only be changed by con- 
trol transfers through gate descriptors to a new code 
segment (See Control Transfer). Tasks begin exe- 
cuting at the CPL value specified by the ~o~~.seg- 
ment selector within TSS when the task IS Initiated 
via a task switch operation (See Figure 20). A task 
executing at Level 0 can access all data segments 
defined in the GOT and the task's LOT and is con- 
sidered the most trusted level. A task executing a 
Level 3 has the most restricted access to data and is 
considered the least trusted level. 


DESCRIPTOR 
PRIVILEGE 
Descriptor privilege is specified by the Descriptor 
Privilege Level (DPL) field of the descriptor ~c~ess 
byte. DPL specifies the least trusted task privilege 


level (CPL) at which a task may access the descrip- 
tor. Descriptors with DPL = 0 are the most protect- 
ed. 
Only tasks 
executing 
at 
privilege 
level 
0 
(CPL = 0) may access them. Descriptors with DPL 
= 3 are the least protected (Le. have the least re- 
stricted access) since tasks can access them when 
CPL = 0, 1, 2, or 3. This rule applies to all descrip- 
tors, except LOT descriptors. 


SELECTOR 
PRIVILEGE 
Selector privilege is specified by the Requested Priv- 
ilege Level (RPL)field in the least significant two bits 
of a selector. Selector RPL may establish a less 
trusted privilege level than the current privilege level 
for the use of a selector. This level is called the 
task's effective privilege level (EPL). RPL can only 
reduce the scope of a task's access to data with th!s 2 
selector. A task's effective privilege is the numeric 
maximum of RPL and CPL. A selector with RPL = 0 
imposes no additional restriction on its use while a 
selector with RPL = 3 can only refer to segments at 
privilege Level 3 regardless of the task's CPL. RPL 
is generally used to verify that pointer parameters 
passed to a more trusted procedure are not allowed 
to use data at a more privileged level than the caller 
(refer to pointer testing instructions). 


Descriptor 
Access 
and Privilege 
Validation 
Determining the ability of a task to access a seg- 
ment involves the type of segment to be accessed, 
the instruction used, the type of descriptor used and 
CPL, RPL,and DPL.The two basic types of segment 
accesses are control transfer (selectors loaded into 
CS) and data (selectors loaded into OS, ES or SS). 


DATA SEGMENT ACCESS 
Instructions that load selectors into OS and ES must 
refer to a data segment descriptor or readable code 
segment descriptor. The CPL of the task and the 
RPL of the selector must be the same as or more 
privileged (numerically equal to or lower than) than 
the descriptor DPL. In general, a task can only ac- 
cess data segments at the same or less privileged 
levels than the CPL or RPL (whichever is numerically 
higher) to prevent a program from accessing data it 
cannot be trusted to use. 


An exception to the rule is a readable conforming 
code segment. This type of code segment can be 
read from any privilege level. 


If the privilege checks fail (e.g. DPL is nume~ically 
less than the maximum of CPL and RPL) or an Incor- 
rect type of descriptor is referenced (e.g. gate de- 


scriptor 
or execute 
only code segment) 
exception 
13 
occurs. 
If the segment 
is not present, 
exception 
11 
is generated. 


Instructions 
that load selectors 
into SS must refer to 
data 
segment 
descriptors 
for 
writable 
data 
seg- 
ments. The descriptor 
privilege 
(DPL) and RPL must 
equal 
CPL. All other 
descriptor 
types 
or a privilege 
level violation 
will cause exception 
13. A not present 
fault causes 
exception 
12. 
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ence to a valid Task State Segment 
descriptor 
caus- 
es a task switch (see Task Switch Operation). 
Refer- 
ence to a Task State Segment 
descriptor 
at a more 
privileged 
level than the task's 
CPL generates 
ex- 
ception 
13. 


When 
an instruction 
or interrupt 
references 
a gate 
descriptor, 
the gate DPL must have the same or less 
privilege 
than the task CPL. If DPL is at a more privi- 
leged 
level than CPL, exeception 
13 occurs. 
If the 
destination 
selector 
contained 
in the 
gate 
refer- 
ences 
a code 
segment 
descriptor, 
the 
code 
seg- 
ment descriptor 
DPL must be the same or more priv- 


ileged than the task CPL. If not, Exception 
13 is is- 
sued. After 
the control 
transfer, 
the code 
segment 
descriptors 
DPL is the task's 
new CPL. If the desti- 


nation 
selector 
in the gate references 
a task 
state 
segment, 
a task 
switch 
is automatically 
performed 
(see Task Switch Operation). 


The privilege 
rules on control 
transfer 
require: 


- 
JMP 
or CALL 
direct 
to a code 
segment 
(code 
segment 
descriptor) 
can only be to a conforming 
segment 
with 
DPL of equal 
or greater 
privilege 
than 
CPL or a non-conforming 
segment 
at the 
same privilege 
level. 


- 
interrupts 
within 
the 
task 
or 
calls 
that 
may 
change 
privilege 
levels, can only transfer 
control 
through 
a gate at the same or a less privileged 
level than CPL to a code segment 
at the same or 
more privileged 
level than CPL. 


- 
return 
instructions 
that 
don't 
switch 
tasks 
can 
only 
return 
control 
to 
a code 
segment 
at the 
same or less privileged 
level. 


- 
task switch 
can be performed 
by a call, jump or 
interrupt 
which 
references 
either 
a task 
gate or 
task state segment 
at the same or less privileged 
level. 


CONTROL 
TRANSFER 


Four types of control 
transfer 
can occur when a se- 
lector is loaded 
into CS by a control 
transfer 
opera- 
tion (see Table 
10). Each transfer 
type can only oc- 
cur if the operation 
which 
loaded the selector 
refer- 
ences 
the correct 
descriptor 
type. 
Any violation 
of 
these descriptor 
usage rules (e.g. JMP through a call 
gate or RET to a Task 
State 
Segment) 
will cause 
exception 
13. 


The ability to reference 
a descriptor 
for control 
trans- 
fer is also subject 
to rules of privilege. 
A CALL 
or 
JUMP 
instruction 
may only 
reference 
a code 
seg- 
ment descriptor 
with DPL equal to the task CPL or a 
conforming 
segment 
with 
DPL of equal 
or greater 
privilege 
than CPL. The RPL of the selector 
used to 
reference 
the code 
descriptor 
must 
have as much 
privilege 
as CPL. 


RET and IRET instructions 
may only reference 
code 
segment 
descriptors 
with descriptor 
privilege 
equal 
to or less privileged 
than the task CPL. The selector 
loaded 
into CS is the return address 
from the stack. 
After 
the return, the selector 
RPL is the task's 
new 
CPL. If CPL changes, 
the old stack pointer is popped 
after the return address. 


When a JMP or CALL references 
a Task State Seg- 
ment 
descriptor, 
the 
descriptor 
DPL 
must 
be the 
same or less privileged 
than the task's 
CPL. Refer- 


Table 
10. Descriptor 
Types 
Used for Control 
Transfer 


Control Transfer Types 
Operation Types 
Descriptor 
Descriptor 
Referenced 
Table 


Intersegment 
within the same privilege 
level 
JMP, CALL, RET, IREP 
Code Segment 
GOT/LOT 


Intersegment 
to the same or higher privilege 
level Interrupt 
CALL 
Call Gate 
GOT/LOT 
within task may change 
CPL. 
Interrupt 
Instruction, 
Trap or 
lOT 
Exception, 
External 
Interrupt 
Interrupt 
Gate 


Intersegment 
to a lower privilege 
level (changes 
task CPL) 
RET,IRET· 
Code Segment 
GOT/LOT 


CALL,JMP 
Task State 
GOT 
Segment 


Task Switch 
CALL,JMP 
Task Gate 
GOT/LOT 


IREp· 
Interrupt 
Instruction, 
Task Gate 
lOT 
Exception, 
External 
Interrupt 


·NT 
(Nested 
Task bit of flag word) 
= 0 


··NT 
(Nested 
Task bit of flag word) = 1 


PRIVILEGE 
LEVEL 
CHANGES 


Any 
control 
transfer 
that 
changes 
CPL within 
the 
task, causes 
a change 
of stacks 
as part of the oper- 
ation. Initial values of SS:SP for privilege 
levels 0, 1, 
and 2 are kept in the task 
state 
segment 
(refer to 
Task Switch Operation). 
During a JMP or CALL con- 
trol transfer, 
the new stack pointer 
is loaded into the 
SS and SP registers 
and the previous 
stack 
pointer 


is pushed 
onto the new stack. 


When 
returning 
to 
the 
original 
privilege 
level, 
its 
stack is restored 
as part of the RET or IRET instruc- 
tion operation. 
For subroutine 
calls that pass param- 
eters on the stack and cross privilege 
levels, a fixed 
number 
of words, 
as specified 
in the gate, are cop- 


ied from the previous 
stack to the current stack. The 


inter-segment 
RET instruction 
with a stack 
adjust- 
ment value will correctly 
restore 
the previous 
stack 
pointer 
upon return. 


Protection 


The 80286 
includes 
mechanisms 
to protect 
critical 


instructions 
that affect the CPU execution 
state (e.g. 
HLT) and code or data segments 
from improper 
us- 
age. These protection 
mechanisms 
are grouped 
into 
three forms: 


Restricted 
usage 
of segments 
(e.g. no write 
al- 
lowed to read-only 
data segments). 
The only seg- 
ments 
available 
for use are defined 
by descrip- 
tors 
in the 
Local 
Descriptor 
Table 
(LOT) 
and 
Global 
Descriptor 
Table (GOT). 


Restricted 
access 
to segments 
via the 
rules 
of 
privilege 
and descriptor 
usage. 


Privileged 
instructions 
or 
operations 
that 
may 
only be executed 
at certain 
privilege 
levels as de- 
termined 
by the 
CPL 
and 
I/O 
Privilege 
Level 
(IOPL). The 10PL is defined 
by bits 14 and 13 of 
the flag word. 


These 
checks 
are performed 
for all instructions 
and 
can 
be 
split 
into 
three 
categories: 
segment 
load 
checks 
(Table 11), operand 
reference 
checks 
(Table 


12), and 
privileged 
instruction 
checks 
(Table 
13). 


Any violation 
of the rules shown 
will result in an ex- 
ception. 
A not-present 
exception 
related to the stack 
segment 
causes 
exception 
12. 


The 
IRET 
and 
POPF 
instructions 
do 
not 
perform 
some of their defined 
functions 
if CPL is not of suffi- 
cient privilege 
(numerically 
small enough). 
Precisely 
these are: 


• 
The IF bit is not changed 
if CPL > 10PL. 


• 
The 10PL field of the flag word is not changed 
if 
CPL> 
O. 


No exceptions 
or other 
indication 
are given 
when 
these conditions 
occur. 


Table 
11 
Segment 
Register 
Load Checks 


Error 
Description 
Exception 
Number 


Descriptor 
table limit exceeded 
13 


Segment 
descriptor 
not-present 
11 or 12 


Privilege 
rules violated 
13 


Invalid descriptor/segment 
type seg- 
ment register 
load: 


-Read 
only data segment 
load to 
SS 


-Special 
Control 
descriptor 
load to 
DS,ES,SS 
13 
-Execute 
only segment 
load to 
OS, ES,SS 
-Data 
segment 
load to CS 
-Read/Execute 
code segment 
load to SS 


Error 
Description 
Exception 
Number 


Write into code segment 
13 
Read from execute-only 
code 
segment 
13 
Write to read-only 
data segment 
13 
Segment 
limit exceeded1 
120r 
13 


NOTE: 
Carry out in offset 
calculations 
is ignored. 


Error 
Description 
Exception 
Number 


CPL 
if" 0 when executing 
the following 
instructions: 
13 
L1DT, LLDT, LGDT, LTR, LMSW, 
CTS,HLT 


CPL > IOPL when executing 
the fol- 
lowing instructions: 
13 
INS, IN, OUTS, OUT, STI, CLI, 
LOCK 


EXCEPTIONS 


The 80286 
detects 
several 
types of exceptions 
and 
interrupts, 
in protected 
mode 
(see Table 
14). Most 
are restartable 
after the exceptional 
condition 
is re- 
moved. 
Interrupt 
handlers 
for most exceptions 
can 
read an error 
code, 
pushed 
on the stack 
after 
the 
return 
address, 
that identifies 
the selector 
involved 
(0 if none). The return address 
normally 
points to the 
failing instruction, 
including 
all leading prefixes. 
For a 
processor 
extension 
segment 
overrun 
exception, 


the return address 
will not point at the ESC instruc- 
tion that caused the exception; 
however, 
the proces- 
sor extension 
registers 
may contain 
the address 
of 
the failing instruction. 


• 
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Return 
Always 
Error 
Interrupt 
Function 
Address 
Restart- 
Code 
Vector 
At Failing 
able? 
on5tack? 
Instruction? 
8 
Double exception 
detected 
Yes 
N02 
Yes 
9 
Processor 
extension 
segment 
overrun 
No 
N02 
No 
10 
Invalid task state segment 
Yes 
Yes 
Yes 
11 
Segment 
not present 
Yes 
Yes 
Yes 
12 
Stack segment 
overrun 
or stack segment 
not present 
Yes 
Yes1 
Yes 
13 
General 
protection 
Yes 
N02 
Yes 


NOTE: 
1. When 
a PUSHA 
or POPA instruction 
attempts 
to wrap around 
the stack 
segment, 
the machine 
state 
after the exception 
will not be restartable 
because 
stack 
segment 
wrap around 
is not permitted. 
This condition 
is identified 
by the value 
of the 
saved 
SP being either 
OOOO(H),0001 (H), FFFE(H), 
or FFFF(H). 
2. These 
exceptions 
indicate 
a violation 
to privilege 
rules or usage 
rules 
has occurred. 
Restart 
is generally 
not attempted 
under those 
conditions. 


These 
exceptions 
indicate 
a violation 
to 
privilege 
rules or usage rules has occurred. 
Restart 
is gener- 
ally not attempted 
under those 
conditions. 


All these 
checks 
are performed 
for all instructions 
and can be split into three categories: 
segment 
load 
checks 
(Table 11), operand 
reference 
checks 
(Table 
12), 
and 
privileged 
instruction 
checks 
(Table 
13). 
Any violation 
of the rules shown will result in an ex- 
ception. 
A not-present 
exception 
causes 
exception 
11 or 12 and is restartable. 


The 80286 
provides 
a built-in task switch 
operation 
which saves the entire 80286 execution 
state (regis- 
ters, address 
space, and a link to the previous 
task), 
loads a new execution 
state, 
and commences 
exe- 
cution 
in the new task. 
Like gates, 
the task switch 
operation 
is invoked 
by executing 
an inter-segment 
JMP 
or 
CALL 
instruction 
which 
refers 
to 
a Task 
State Segment 
(TSS) or task gate descriptor 
in the 
GOT or LOT. An INT n instruction, 
exception, 
or ex- 
ternal 
interrupt 
may also invoke 
the task switch 
op- 
eration 
by selecting 
a task gate descriptor 
in the as- 
sociated 
lOT descriptor 
entry. 


The TSS descriptor 
points at a segment 
(see Figure 
20) 
containing 
the 
entire 
80286 
execution 
state 
while a task gate descriptor 
contains 
a TSS selector. 
The limit field of the descriptor 
must be >002B(H). 


Each task must have a TSS associated 
with it. The 
current 
TSS is identified 
by a special 
register 
in the 
80286 
called 
the Task 
Register 
(TR). This register 
contains 
a selector 
referring 
to the task 
state 
seg- 
ment descriptor 
that defines 
the current 
T$S. A hid- 
den base and limit register 
associated 
with TR are 
loaded 
whenever 
TR is loaded 
with a new selector. 


The IRET instruction 
is used to return control 
to the 
task that called 
the current 
task or was interrupted. 
Bit 14 in the flag register 
is called 
the Nested 
Task 
(NT) bit. It controls 
the function 
of the IRET instruc- 
tion. 
If NT = 0, the 
IRET instruction 
performs 
the 
regular current task by popping 
values off the stack; 
when NT = 1, IRET performs 
a task switch 
opera- 
tion back to the previous 
task. 


When 
a CALL, 
JMP, 
or INT instruction 
initiates 
a 
task 
switch, 
the old (except 
for case 
of JMP) 
and 
new TSS will be marked 
busy and the back link field 
of the new TSS set to the old TSS selector. 
The NT 
bit of the new task 
is set by CALL 
or INT initiated 
task 
switches. 
An interrupt 
that 
does 
not cause 
a 
task 
switch 
will clear 
NT. NT may also 
be set or 
cleared 
by POPF or IRET instructions. 


The task state segment 
is marked 
busy by changing 
the descriptor 
type field from Type 1 to Type 3. Use 
of a selector 
that references 
a busy task state seg- 
ment causes 
Exception 
13. 


PROCESSOR 
EXTENSION 
CONTEXT 
SWITCHING 


The context 
of a processor 
extension 
(such as the 
80287 
numerics 
processor) 
is not changed 
by the 
task 
switch 
operation. 
A processor 
extension 
con- 
text need only be changed 
when a different 
task at- 
tempts 
to use the 
processor 
extension 
(which 
still 
contains 
the context 
of a previous 
task). The 80286 
detects 
the first use of a processor 
extension 
after a 
task switch 
by causing 
the processor 
extension 
not 
present 
exception 
(7). The 
interrupt 
handler 
may 
then decide whether 
a context 
change 
is necessary. 


Whenever 
the 80286 switches 
tasks, it sets the Task 
Switched 
(TS) bit of the MSW. TS indicates 
that a 
processor 
extension 
context 
may belong 
to a differ- 
ent task than the current one. The processor 
exten- 
sion 
not present 
exception 
(7) will occur 
when 
at- 
tempting 
to execute 
an ESC or WAIT 
instruction 
if 
TS = 1 and a processor 
extension 
is present 
(MP = 1 
in MSW). 


The 80286 provides several instructions to speed 
pointer testing and consistency checks for maintain- 
ing system i!"tegrity (see Table 15). These instruc- 
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tions use the memory management hardware to ver- 
ify that a selector value refers to an appropriate seg- 
ment without risking an exception. A condition flag 
(ZF) indicates whether use of the selector or seg- 
ment will cause an exception. 


TASK LDT SELECTOR 


DSSELECTOR 


SSSELECTOR 


CSSELECTOR 


ESSELECTOA 


DI 


51 


BP 


SP 


BX 


DX 


CX 


AX 


FUGWOAD 


IP (ENTRY 
POINT) 


SSFOACPL2 


SPFORCPL2 


SSFOR 
CPL, 


SPFOACPL 
1 


SSFOACPLO 


SPFOACPLO 


BACK 
UHK 
SELECTOR 
TO TSS 


TASK 
STATE 
SEGMENT 


TYPE 
DESCRIPTION 


1 
AN AVAILABLE 
TASK STATE 


SEGMENT. 
MAV BE USED AS 


THE DESTINATION 
OF A TASK 


SWITCH 
OPERATION. 


3 
A BUSY TASK STATE SEGMENT. 
CANNOT 
BE USED AS THE 


DEST1NATION 
OF A TASK 


SWITCH. 


BYTE 
o 
OFFSET 


42 


40 


:II 


:II 


:M 


32 


30 


21 
CURRENT 
TASK 
21 
STATE 
2. 


22 


20 


P 
DESCRIPTION 


1 
BASE 
AND UMIT FIELDS ARE VALID 


0 
SEGMENT 
IS NOT PRESENT 
IN 


~:ORY. 
BASE AND UMIT 
ARE NOT 


FINED 


12) 
10 


• 
IHITIAL 
STACKS 


: 
FOACPLO.l,2 


o 


• 


Instruction 
Operands 
Function 


ARPL 
Selector, 
Adjust Requested Privilege 
Register 
Level: adjusts the RPL of 
the selector to the numeric 
maximum of current selec- 
tor RPL value and the RPL 
value in the register. Set 
zero flag if selector RPL 
was changed by ARPL. 


VERR 
Selector 
VERify for Read: sets the 
zero flag if the segment re- 
ferred to by the selector 
can be read. 


VERW 
Selector 
VERify for Write: sets the 
zero flag if the segment re- 
ferred to by the selector 
can be written. 


LSL 
Register, 
Load Segment Limit: reads 
Selector 
the segment limit into the 
register if privilege rules 
and descriptor type allow. 
Set zero flag if successful. 


LAR 
Register, 
Load Access Rights: reads 
Selector 
the 
descriptor 
access 
rights byte into the register 
if privilege rules allow. Set 
zero flag if successful. 


DOUBLE 
FAULT 
AND SHUTDOWN 
If two separate exceptions are detected during a sin- 
gle instruction execution, the 80286 performs the 
double. fault exception (8). If an execution occurs 
during processing of the double fault exception, the 
80286 will enter shutdown. During shutdown no fur- 
ther instructions or exceptions are processed. Either 
NMI (CPU remains in protected mode) or RESET 
(CPU exits protected mode) can force the 80286 out 
of shutdown. Shutdown is externally signalled via a 
HALT bus operation with A1 LOW. 


PROTECTED 
MODE 
INITIALIZATION 
The 80286 initially executes in real address mode 
after RESET. To allow initialization code to be 
placed at the top of physical memory, A23-A20 will 
be HIGH when the 80286 performs memory refer- 
ences relative to the CS register until CS is changed. 
A23-A20 will be zero for references to the OS,ES, or 
SS segments. Changing CS in real address mode 
will force A23-A20 LOW whenever CS is used again. 
The initial CS:IP value of FOOO:FFFO 
provides 64K 
bytes of code space for initialization code without 
changing CS. 


Protected mode operation requires several registers 
to be initialized. The GOT and lOT base registers 
must refer to a valid GOT and lOT. After executing 
the LMSW instruction to set PE, the 80286 must im- 


mediately execute an intra-segment JMP instruction 
to clear the instruction queue of instructions decod- 
ed in real address mode. 


To force the 80286 CPU registers to match the initial 
protected mode state assumed by softWare,execute 
a JMP instruction with a selector referring to the ini- 
tial TSS used in the system. This will load the task 
register, local descriptor table register, segment reg- 
isters and initial general register state. The TR 
should point at a valid TSS since any task sWitch 
operation involves saving the current task state. 


SYSTEM 
INTERFACE 
The 80286 system interface appears in two forms: a 
local bus and a system bus. The local bus consists 
of address, data, status, and control signals at the 
pins of the CPU. A system bus is any buffered ver- 
sion of the local bus. A system bus may also differ 
from the local bus in terms of coding of status and 
control lines and/or timing and loading of signals. 
The 80286 family includes several devices to gener- 
ate standard system buses such as the IEEE 796 
standard MULTIBUS. 


Bus Interface 
Signals and Timing 
The 80286 microsystem local bus interfaces the 
80286 to local memory and I/O components. The 
interface has 24 address lines, 16 data lines, and 8 
status and control signals. 


The 80286 CPU, 82C284 clock generator, 82C288 
bus controller, tranceivers, and latches provide a 
buffered and decoded system bus interface. The 
82C284 generates the system clock and synchroniz- 
es READY and RESET. The 82C288 converts bus 
operation status encoded by the 80286 into com- 
mand and bus control signals. These components 
can provide the timing and electrical power drive lev- 
els required for most system bus interfaces including 
the Multibus. 


Physical Memory and I/O Interface 
A maximum of 16 megabytes of physical memory 
can be addressed in protected mode. One mega- 
byte can be addressed in real address mode. Memo- 
ry is accessible as bytes or words. Words consist of 
any two consecutive bytes addressed with the least 
significant byte stored in the lowest address. 


Byte transfers occur on either half of the 16-bit local 
data bus. Even bytes are accessed over 07-0 while 
odd bytes are transferred over 015-8. Even-ad- 
dressed words are transferred over 015-0 in one 
bus cycle, while odd-addressed word require two 
bus operations. The first transfers data on 015-8, 
and the second transfers data on 07-0. Both byte 
data transfers occur automatically, transparent to 
software. 
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Two bus signals, Ao and BHE, control transfers over 
the lower and upper halves of the data bus. Even 
address byte transfers are indicated by Ao LOW and 
BHE HIGH. Odd address byte transfers are indicat- 
ed by Ao HIGH and BHE LOW. Both Ao and BHE are 
LOW for even address word transfers. 


The I/O address space contains 64K addresses in 
both modes. The I/O space is accessible as either 
bytes or words, as is memory. Byte wide peripheral 
devices may be attached to either the upper or lower 
byte of the data bus. Byte-wide I/O devices attached 
to the upper data byte (015-8) 
are accessed with 
odd I/O addresses. Devices on the lower data byte 
are accessed with even I/O addresses. An interrupt 
controller such as Intel's 8259A must be connected 
to the lower data byte (07-0) for proper return of the 
interrupt vector. 


Bus Operation 
The 80286 uses a double frequency system clock 
(CLK input) to control bus timing. All signals on the 
local bus are measured relative to the system CLK 
input. The CPU divides the system clock by 2 to pro- 
duce the internal processor clock, which determines 
bus state. Each processor clock is composed of two 
system clock cycles named phase 1 and phase 2. 
The 82C284 clock generator output (PCLK) identi- 
fies the next phase of the processor clock. (See Fig- 
ure 21.) 


Figure 21. System and Processor 
Clock Relationships 


Six types of bus operations are supported; memory 
read, memory write, I/O read, I/O write, interrupt ac- 
knowledge, and halt/shutdown. Data can be trans- 
ferred at a maximum rate of one word per two proc- 
essor clock cycles. 


The 80286 bus has three basic states: idle (Ti),send 
status (Ts), and perform command (Td. The 80286 
CPU also has a fourth local bus state called hold 
(Th)· Th indicates that the 80286 has surrendered 
control of the local bus to another bus master in 
response to a HOLD request. 


Each bus state is one processor clock long. Figure 
22 shows the four 80286 local bus states and al- 
lowed transitions. 


Bus States 
The idle (Tj) state indicates that no data transfers 
are in progress or requested. The first active state 
Ts is signaled by status line S1 or SO going LOW 
and identifying phase 1 of the processor clock. Dur- 
ing Ts, the command encoding, the address, and 
data (for a write operation) are available on the 
80286 output pins. The 82C288 bus controller de- 
codes the status signals and generates Multibus 
compatible read/write command and local trans- 
ceiver control signals. 


After Ts, the perform command (Tcl state is en- 
tered. Memory or I/O devices respond to the bus 
operation during Tc, either transferring read data to 
the CPU or accepting write data. Tc states may be 
repeated as often as necessary to assure sufficient 
time for the memory or I/O device to respond. The 
READY signal determines whether Tc is repeated. A 
repeated Testate is called a wait state. 


During hold (Th), the 80286 will float all address, 
data, and status output pins enabling another bus 
master to use the local bus. The 80286 HOLD input 
signal is used to place the 80286 into the Th state. 
The 80286 HLDA output signal indicates that the 
CPU has entered Th. 


Pipelined Addressing 
The 80286 uses a local bus interface with pipeJined 
timing to allow as much time as possible for data 
access. Pipelined timing allows a new bus operation 
to be initiated ·everytwo processor cycles, while al- 
lowing each individual bus operation to last for three 
processor cycles. 


The timing of the address outputs is pipelined such 
that the address of the next bus operation becomes 
available during the current bus operation. Or in oth- 
er words, the first clock of the next bus operation is 
overlapped with the last clock of the current bus op- 
eration. Therefore, address decode and routing logic 
can operate in advance of the next bus operation. 


• 
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External address latches may hold the address sta- 
ble for the entire bus operation, and provide addi- 
tional AC and DC buffering. 


The 80286 does not maintain the address of the cur- 
rent bus operation during all Tc states. Instead, the 
address for the next bus operation may be emitted 
during phase 2 of any Tc. The address remains valid 
during phase 1 of the first Tc to guarantee hold time, 
relative to ALE, for the address latch inputs. 


Bus Control 
Signals 
The 82C288 bus controller provides control signals; 
address latch enable (ALE), ReadlWrite commands, 
data transmit/receive 
(DT/R), 
and data 
enable 
(DEN) that control the address latches, data trans- 
ceivers, write enable, and output enable for memory 
and 1/0 systems. 


The Address Latch Enable (ALE) output determines 
when the address may be latched. ALE provides at 
least one system CLK period of address hold time 
from the end of the previous bus operation until the 
address for the next bus operation appears at the 
latch outputs. This address hold time is required to 
support MULTIBUS and common memory systems. 


The data bus transceivers are controlled by 82C288 
outputs Data Enable (DEN) and Data Transmit/Re- 
ceive (DTIA). DEN enables the data transceivers; 
while DTIA controls tranceiver direction. DEN and 
DTIA are timed to prevent bus contention between 
the bus master, data bus transceivers, and system 
data bus transceivers. 


Command 
Timing Controls 
Two system timing customization options, command 
extension and command delay, are provided on the 
80286 local bus. 


Command extension allows additional time for exter- 
nal devices to respond to a command and is analo- 
gous to inserting wait states on the 8086. External 
logic can control the duration of any bus operation 
such that the operation is only as long as necessary. 
The READY input signal can extend any bus opera- 
tion for as long as necessary. 


Command delay allows an increase of address or 
write data setup time to system bus command active 
for any bus operation by delaying when the system 
bus command becomes active. Command delay is 
controlled by the 82C288 CMDLY input. After Ts, 
the bus controller samples CMDLY at each failing 
edge of CLK. If CMDLY is HIGH, the 82C288 will not 
activate the command signal. When CMDLY is LOW, 
the 82C288 will activate the command signal. After 
the command becomes active, the CMDLY input is 
not sampled. 


When a command is delayed, the available re- 
sponse time from command active to return read 
data or accept write data is less. To customize sys- 
tem bus timing, an address decoder can determine 
which bus operations require delaying the com- 
mand. The CMDLY i~ut 
does not affect the timing 
of ALE, DEN, or DTIA. 


intel~ 
80286 


READ 
BUS C"«:l£ 
N 
1 


Tc, 


eLK 


PROC 
ClK 


Aa-At 


!l.R 


AlE 


IIDlW 
• 
~~~ 
EXl 


COlDlY~.- 
EX. 


eMOU 


210253-24 


Figure 24. CMDL Y Controls 
the Leading 
Edge of Command 
Signal 


Figure 24 illustrates four uses of CMDl Y. Example 1 
of the READY signal, thereby requiring READY be 
shows delaying the read command two system 
synchronous to the system clock. 
ClKs for cycle N-1 and no delay for cycle N, and 
example 2 shows delaying the read command one 
system ClK for cycle 'N-1 and one system ClK de- 
lay for cycle N. 


Bus Cycle Termination 
At maximum transfer rates, the 80286 bus alternates 
between the status and command states. The bus 
status signals become inactive after Ts so that they 
may correctly signal the start of the next bus opera- 
tion after the completion of the current cycle. No 
external indication of Tc exists on the 80286 local 
bus. The bus master and bus controller enter Tc di- 
rectly after Ts and continue executing Tc cycles until 
terminated by READY. 


READY Operation 
The current bus master and 82C288 bus controller 
terminate each bus operation simultaneously to 
achieve maximum bus operation bandwidth. Both 
are informed in advance by READY active (open- 
collector output from 82C284) which identifies the 
last Tc cycle of the current bus operation. The bus 
master and bus controller must see the same sense 


Synchronous 
Ready 
The 82C284 clock generator provides READY syn- 
chronization from both synchronous and asynchro- 
nous sources (see Figure 25). The synchronous 
ready input (SRDY) of the clock generator is sam- 
pled with the falling edge of ClK at the end of phase 
1 of each Tc. The state of SRDY is then broadcast to 
the bus master and bus controller via the READY 
output line. 


Asynchronous 
Ready 
Many systems have devices or subsystems that are 
asynchronous to the system clock. As a result, their 
ready outputs cannot be guaranteed to meet the 
82C284 SRDY setup and hold time requirements. 
But the 82C284 asynchronous ready input (ARDY) is 
designed to accept such signals. The ARDY input is 
sampled at the beginning of each Tc cycle by 
82C284 synchronization logic. This provides one 
system ClK cycle time to resolve its value before 
broadcasting it to the bus master and bus controller. 
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NOTES: 
1. SRDYEN 
is active 
low. 


2. If SRDYEN 
is high, the state of SRDY will no affect 
READY. 
3. ARDYEN 
is active 
low. 


ARDY or ARDYEN must be HIGH at the end of Ts. 
ARDY cannot be used to terminate bus cycle with no 
wait states. 


Each ready input of the 82C284 has an enable pin 
(SRDYEN and ARDYEN) to select whether the cur- 
rent bus operation will be terminated by the synchro- 
nous or asynchronous ready. Either of the ready in- 
puts may terminate a bus operation. These enable 
inputs are active low and have the same timing as 
their respective ready inputs. Address decode logic 
usually selects whether the current bus operation 
should be terminated by ARDY or SRDY. 


Data Bus Control 


Figures 26, 27, and 28 show how the DTlA", DEN, 
data bus, and address signals operate for different 
combinations of read, write, and idle bus operations. 
DTlA" goes active (LOW) for a read operation. DT/A 
remains HIGH before, during, and between write op- 
erations. 


The data bus is driven with write data during the 
second phase of Ts. The delay in write data timing 
allows the read data drivers, from a previous read 
cycle, sufficient time to enter 3-state OFF before the 
80286 CPU begins driving the local data bus for 
write operations. Write data will always remain valid 
for one system clock past the last Tc to provide suffi- 
cient hold time for Multibus or other similar memory 
or I/O systems. During write-read or write-idle se- 
quences the data bus enters 3-state OFF during the 
second phase of the processor cycle after the last 
Tc. In a write-write sequence the data bus does not 
enter 3-state OFF between Tc and Ts. 


Bus Usage 


The 80286 local bus may be used for several func- 
tions: instruction data transfers, data transfers by 
other bus masters, instruction fetching, processor 
extension data transfers, interrupt acknowledge, and 
halt/shutdown. This section describes local bus ac- 
tivities which have special signals or requirements. 
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Figure 28. Back to Back Write-Write Cycles 


cycles other than 
Interrupt-Acknowledge cycles, 
Lock will be active for the first and subsequent cy- 
cles of a series of cycles to be locked. Lock will not 
be shown active during the last cycle to be locked. 
For the next-to-Iast cycle, Lock will become inactive 
at the end of the first Tc regardless of the number of 
wait-states inserted. For Interrupt-Acknowledge cy- 
cles, Lock will be active for each cycle, and will be- 
come inactive at the end of the first Tc for each cy- 
cle regardless of the number of wait-states inserted. 


HOLD AND HLDA allow another bus master to gain 
control of the local bus by placing the 80286 bus into 
the Th state. The sequence of events required to 
pass control between the 80286 and another local 
bus master are shown in Figure 29. 


In this example, the 80286 is initially in the Th state 
as signaled by HLDA being active. Upon leaving Th, 
as signaled by HLDA going inactive, a write opera- 
tion is started. During the write operation another 
local bus master requests the local bus from the 
80286 as shown by the HOLD signal. After complet- 
ing the write operation, the 80286 performs one Tj 
bus cycle, to guarantee write data hold time, then 
enters Th as signaled by HLDA going active. 


The CMDLY signal and ARDY ready are used to 
start and stop the write bus command, respectively. 
Note that SRDY must be inactive or disabled by 
SRDYEN to guarantee ARDY will terminate the cy- 
cle. 


HOLD must not be active during the time from the 
leading edge of RESET until 34 CLKs following the 
trailing edge of RESET. 


Lock 


The CPU asserts an active lock signal during Inter- 
rupt-Acknowledge cycles, the XCHG instruction, and 
during some descriptor accesses. Lock is also as- 
serted when the LOCK prefix is used. The LOCK 
prefix may be used with the following ASM-286 as- 
sembly instructions; MOVS, INS, and OUTS. For bus 


Instruction 
Fetching 


The 80286 Bus Unit (BU) will fetch instructions 
ahead of the current instruction being executed. This 
activity'is called prefetching. It occurs when the local 
bus would otherwise be idle and obeys the following 
rules: 


A prefetch bus operation starts when at least two 
bytes of the 6-byte prefetch queue are empty. 


The prefetcher normally performs word prefetches 
independent of the byte alignment of the code seg- 
ment base in physical memory. 


The prefetcher will perform only a byte code fetch 
operation for control transfers to an instruction be- 
ginning on a numerically odd physical address. 


Prefetching stops whenever a control transfer or 
HLT instruction is decoded by the IU and placed into 
the instruction queue. 


In real address mode, the prefetcher may fetch up to 
6 bytes beyond the last control transfer or HLT in- 
struction in a code segment. 
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In protected mode, the prefetcher will never cause a 
segment overrun exception. The prefetcher stops at 
the last physical memory word of the code segment. 
Exception 13 will occur if the program attempts to 
execute beyond the last full instruction in the code 
segment. 


If the last byte of a code segment appears on an 
even physical memory address, the prefetcher will 
read the nex1 physical byte of memory (perform a 
word code fetch). The value of this byte is ignored 
and any attempt to execute it causes exception 13. 
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NOTES: 
1. Status 
lines are not driven 
by 80286, 
yet remain 
high due to pull up resistors 
in 82C284 
during 
HOLD state. 
2. Address, 
M/io 
and COD/INTA 
may start 
floating 
during 
any Tc 
depending 
on when 
internal 
80286 
bus arbiter 
de- 
cides to release 
bus to external 
HOLD. The float starts 
in </>2of Tc. 


3. ElR"£ and LOCK 
may start floating 
after the end of any Tc depending 
on when 
internal 
80286 
bus arbiter 
decides 
to 
release 
bus to external 
HOLD. The float starts 
in </>1of TC. 


4. The minimum 
HOLD to HLDA time is shown. 
Maximum 
is one TH longer. 


5. The earliest 
HOLD time is shown. 
It will always 
allow 
a subsequent 
memory 
cycle 
if pending 
is shown. 
6. The 
minimum 
HOLD 
to HLDA 
time 
is shown. 
Maximum 
is a function 
of the instruction, 
type of bus cycle 
and other 
machine 
state 
(i.e., Interrupts, 
Waits, 
Lock, etc.). 


7. Asynchronous 
ready 
allows 
termination 
of the cycle. 
Synchronous 
ready 
does 
not signal 
ready 
in this example. 
Syn- 


chronous 
ready state is ignored 
after ready is signaled 
via the asynchronous 
input. 
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The processor extension interface uses I/O port ad- 
dresses 00F8(H), OOFA(H),and OOFC(H)which are 
part of the I/O port address range reserved by Intel. 
An ESC instruction with Machine Status Word bits 
EM = 0 and TS = 0 will perform I/O bus operations 
to one or more of these I/O port addresses indepen- 
dent of the value of 10PL and CPL. 


ESC instructions with memory references enable the 
CPU to accept PEREO inputs for processor exten- 
sion operand transfers. The CPU will determine the 
operand starting address and read/write status of 
the instruction. For each operand transfer, two or 
three bus operations are performed, one word trans- 
fer with I/O port address OOFA(H)and one or two 
bus operations with memory. Three bus operations 
are required for each word operand aligned on an 
odd byte address. 


NOTE: 
Odd-aligned numerics operands should be avoided 
when using an 80286 system running six or more 
memory-write wait states. The 80286 can,generate 
an incorrect numerics address if all the following 
conditions are met: 
- 
Two floating point (FP) instructions are fetched 


. and in the 80286 queue. 
- 
The first FP instruction is any floating point store 
except FSTSW AX. 
- 
The second FP instruction accesses memory. 
- 
The operand of the first instruction is aligned on 
an odd memory address. 
- 
Six or more wait states are inserted during either 
of the last two memory write (odd aligned oper- 
ands are transferred as two bytes) transfers of 
the first instruction. 


The second FP operand's address will be incre- 
mented by one if these conditions are met. These 
conditions are most likely to occur in a multi-master 
system. For a hardware solution, contact your local 
Intel representative. 


Commands to the numerics coprocessor should not 
be delayed by nine or more T-states. Excessive 
(nine or more) command-delays can cause the 
80286 and 80287 to lose synchronization. 


Interrupt Acknowledge 
Sequence 


Figure 30 illustrates an interrupt acknowledge se- 
quence performed by the 80286 in response to an 


INTR input. An interrupt acknowledge sequence 
consists of two INTA bus operations. The first allows 
a master 8259A Programmable Interrupt Controller 
(PIC) to determine which if any of its slaves should 
return the interrupt vector. An eight bit vector is read 
on 00-07 
of the 80286 during the second INTA bus 
operation to select an interrupt handler routine from 
the interrupt table. 


The Master Cascade Enable (MCE) signal of the 
82C288 is used to enable the cascade address driv- 
ers, during INTA bus operations (See Figure 30), 
onto the local address bus for distribution to slave 
interrupt controllers via the system address bus. The 
80286 emits the LOCK signal (active LOW) during T5 
of the first INTA bus operation. A local bus "hold" 
request will not be honored until the end of the sec- 
ond INTA bus operation. 


Three idle processor clocks are provided by the 
80286 between INTA bus operations to allow for the 
minimum INTA to INTA time and CAS (cascade ad- 
dress) out delay of the 8259A. The second INTA bus 
operation must always have at least one extra Tc 
state added via logic controlling READY. This is 
needed to meet the 8259A minimum INTA pulse 
width. 


Local Bus Usage Priorities 


The 80286 local bus is shared among several inter- 
nal units and external HOLD requests. In case of 
simultaneous requests, their relative priorities are: 
Any transfers which assert LOCK either 
explicitly (via the LOCK instruction prefix) 
or implicitly (Le. some segment descriptor 
accesses, 
interrupt 
acknowledge 
se- 
quence, or an XCHG with memory). 
The second of the two byte bus opera- 
tions required for an odd aligned word op- 
erand. 
The second or third cycle of a processor 
extension data transfer. 
Local bus request via HOLD input. 
Processor extension data operand trans- 
fer via PEREO input. 
Data transfer performed by EU as part of 
an instruction. 
An instruction prefetch request from BU. 
The EU will inhibit prefetching two proc- 
essor clocks in advance of any data 
transfers to minimize waiting by EU for a 
prefetch to finish. 
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NOTES: 
1. Data is Ignored, 
upper 
data bus, 08-015, 
should 
not change 
state dUring this time. 
2. First INTA cycle 
should 
have at least one wait state Inserted 
to meet 8259A minimum 
INTA pulse width. 


3. Second 
INTA cycle 
should 
have at least one wait state 
Inserted 
to meet 8259A minimum 
INTA pulse width. 


4. IOCK is active 
for the first INTA cycle 
to prevent 
the bus arbiter 
from 
releasing 
the bus between 
INTA cycles 
in a 


multi-master 
system. IOCK Is also active 
for the second 
INTA cycle. 
5. A23-Ao 
exits 3-state 
OFF during 4>2of the second 
Tc In the INTA cycle. 


6. Upper data bus should 
not change 
state dUring this time. 


Figure 30. Interrupt Acknowledge 
Sequence 


Halt or Shutdown Cycles 
not issue ALE, nor is READY required to terminate a 
halt or shutdown bus operation. 
The 80286 externally indicates halt or shutdown 
conditions as a bus operation. These conditions oc- 
cur due to a HLT instruction or multiple protection 
exceptions while attempting to execute one Instruc- 
tion. A halt or shutdown bus operation is signalled 
when ~, 
SO and COD/TNiA are LOW and M/TO is 
HIGH. A1 HIGH indicates halt, and A1 LOW indi- 
cates shutdown. The 82C288 bus controller does 


During halt or shutdown, the 80286 may service 
PEREQ or HOLD requests. A processor extension 
segment overrun exception during shutdown will in- 
hibit further service of PEREQ. Either NMI or RESET 
will force the 80286 out of either halt or shutdown. 
An INTR, if Interrupts are enabled, or a processor 
extension segment overrun exception will also force 
the 80286 out of halt. 
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The versatile bus structure of the 80286 microsys- 
tem, with a full complement of support chips, allows 
flexible configuration of a wide range of systems. 
The basic configuration, shown in Figure 31, is simi- 
lar to an 8086 maximum mode system. It includes 
the CPU plus an 8259A interrupt controller, 82C284 
clock generator, and the 82C288 Bus Controller. 


As indicated by the dashed lines in Figure 31, the 
ability to add processor extensions is an integral fea- 
ture of 80286 microsystems. The processor exten- 
sion interface allows external hardware to perform 
special functions and transfer data concurrent with 
CPU execution of other instructions. Full system in- 
tegrity is maintained because the 80286 supervises 
all data transfers and instruction execution for the 
processor extension. 


The 80287 has all the instructions and data types of 
an 8087. The 80287 NPX can perform numeric cal- 
culations and data transfers concurrently with CPU 
program execution. Numerics code and data have 
the same integrity as all other information protected 
by the 80286 protection mechanism. 


The 80286 can overlap chip select decoding and ad- 
dress propagation during the data transfer for the 
previous bus operation. This information is latched 
by ALE during the middle of a Ts cycle. The latched 
chip select and address information remains stable 
during the bus operation while the next cycle's ad- 
dress is being decoded and propagated into the sys- 
tem. Decode logic can be implemented with a high 
speed bipolar PROM. 


The optional decode logic ~hown in Figure 31 takes 
advantage of the overlap between address and data 
of the 80286 bus cycle to generate advanced mem- 
ory and la-select 
signals. This minimizes system 
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performance degradation caused by address propa- 
gation and decode delays. In addition to selecting 
memory and liD, the advanced selects may be used 
with configurations supporting local and system bus- 
es to enable the appropriate bus interface for each 
bus cycle. The COD/INTA and MilO signals are ap- 
plied to the decode logic to distinguish between in- 
terrupt, liD, code and data bus cycles. 


By adding the 82289 bus arbiter chip, the 80286 pro- 
vides a MUl TIBUS system bus interface as shown 
in Figure 32. The ALE output of the 82C288 for the 


MUl TIBUS bus is connected to its CMDl Y input to 
delay the start of commands one system ClK as 
required to meet MUl TIBUS address and write data 
setup times. This arrangement will add at least one 
extra Testate to each bus operation which uses the 
MUlTIBUS. 


A second 82C288 bus controller and additional 
latches and transceivers could be added to the local 
bus of Figure 32. This configuration allows the 
80286 to support an on-board bus for local memory 
and peripherals, and the MUl TIBUS for system bus 
interfacing. 


• 


Figure 33 shows the addition 
of dual ported dynamic 
memory 
between 
the 
MUL TIBUS 
system 
bus and 
the 80286 
local bus. The dual port interface 
is pro- 


vided 
by the 8207 Dual Port DRAM Controller. 
The 
8207 runs synchronously 
with the CPU to maximize 
throughput 
for local memory 
references. 
It also arbi- 
trates 
between 
requests 
from the local and system 
buses 
and 
performs 
functions 
such 
as 
refresh, 


Table 
16. 80286 Systems 
Recommended 
Pull Up ResIstor 
Values 


initialization 
of RAM, and read/modify/write 
cycles. 


The 8207 
combined 
with the 8206 
Error Checking 
and Correction 
memory 
controller 
provide 
for single 
bit error correction. 
The dual-ported 
memory 
can be 
combined 
with 
a standard 
MUL TIBUS 
system 
bus 
interface 
to maximize 
performance 
and protection 
in 
multiprocessor 
system 
configurations. 


80286 
Pin and Name 
PullupValue 
Purpose 
~ 
5-SO 
20 KO ±100/0 
Pull SO,~ 
and J5EAO( 
inactive 
dUring 80286 
hold periods(l) 


6-PEACK 


63-READY 
9100 
±50/0 
Pull REAOY 
inactive 
within required 
minimum 
time (CL = 150 pF, 


IR s; 7 mAl 


NOTE: 
1. Pull-up 
resistors 
are not required 
on SO and g'f when 
the corresponding 
pins of the 82C284 
are connected 
to SO and g'f. 


PACKAGE 
THERMAL 
SPECIFICATIONS 


The 80286 Microprocessor is specified for operation 
when case temperature (Tc> is within the range 
0°C-85°C. Case temperature, unlike ambient tem- 
perature, is easily measured in any environment to 
determine whether the 80286 Microprocessor is 
within the specified operating range. The case tem- 
perature should be measured at the center of the 
top surface of the component. 


The maximum ambient temperature (TA) allowable 
without violating Tc specifications can be calculated 
from the equations shown below. TJ is the 80286 
junction temperature. P is the power dissipated by 
the 80286. 


Values for 8JAand 8JCare given in Table 17. 8JA is 
given at various airflows. Table 18 shows the maxi- 
mum TA allowable (without exceeding Tc>at various 
airflows. Note that the 80286 PLCC package has an 
internal heat spreader. TA can be further improved 
by attaching "fins" or an external "heat sink" to the 
package. 


Junction temperature calculations should use an Ice 
value that is measured without external resistive 
loads. The external resistive loads dissipate addi· 
tional power external to the 80286 and not on the 
die. This increases the resistor temperature, not the 
die temperature. The full capacitive load (CL = 
100 pF) should be applied during the Icc measure- 
ment. 


8JA versus Airflow - 
ft/mln (m/sec) 


Package 
8JC 
0 
200 
400 
600 
800 
1000 
(0) 
(1.01) 
(2.03) 
(3.04) 
(4.06) 
(5.07) 


68-Lead PGA 
5.5 
28 
22 
16 
15 
14 
13 


68·Lead PLCC 
8 
28 
23 
21 
18 
16 
15 
wI Internal 
Heat Spreader 


TA ee) versus Airflow - 
ft/mln (m/sec) 


Package 
0 
200 
400 
600 
800 
1000 
(0) 
(1.01) 
(2.03) 
(3.04) 
(4.06) 
(5.07) 


68-Lead PGA 
34 
48 
61 
64 
66 
68 


68-Lead PLCC 
40 
51 
56 
63 
67 
69 
wllnternal 
Heat Spreader 


NOTE: 
The numbers 
in Table 
18 were calculated 
using a Vce of 5.0V, and an Ice of 450 mA, which 
is representative 
of the worst 
case 
Ice at Tc =; 85"C with the outputs 
unloaded. 


Typical Ice vs Frequency 
for Different 
Output 
Loads and Case Temperatures 


550 


ooc LOADED 


OOC UNLOADED 


250C 
LOADED 


250C 
UNLOADED 


850C 
LOADED 


NOTES: 
1. Vcc 
= 5.0V 
2. Loaded: 
IOL = 2.0 mA. IOH = -400 
/LA. CL = 100 pF. 


Unloaded: 
CL = 100 pF. 
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NOTICE: This is a production data sheet. The specifi- 
cations are subject to change without notice. 


'WARNING: 
Stressing the device beyond the "Absolute 
Maximum 
Ratings" 
may 
cause 
permanent 
damage. 


These are stress ratings only. Operation 
beyond 
the 


"Operating 
Conditions" 
is not recommended 
and ex- 


tended 
exposure 
beyond 
the 
"Operating 
Conditions" 


may affect device reliability. 


Ambient 
Temperature 
Under Bias .... 
O·C to + 70·C 


Storage Temperature 
- 6S·C to + 1S0·C 


Voltage 
on Any Pin with 
Respect 
to Ground 
-1.0V 
to + 7V 


Power Dissipation 
3.3W 


Symbol 
Parameter 
Mln 
Max 
Unit 
Test Condition 


Icc 
Supply Current (O·C Turn On) 
600 
mA 
(Note 1) 


CClK 
ClK 
Input Capacitance 
20 
pF 
(Note 2) 


CIN 
Other Input Capacitance 
10 
pF 
(Note 2) 


Co 
Input/Output 
Capacitance 
20 
pF 
(Note 2) 


NOTES: 
1. CL = 100 pF. Tested at maximum frequency without resistive loads on the outputs. 
2. These are not tested. They are guaranteed by design characterization. 


D.C. CHARACTERISTICS 
(VCC = sv ± S%, TCASE = O·C to + 8S·C)' 
Tested 
at the minimum 
operating 
frequency 
of the part. 


Symbol 
Parameter 
Mln 
Max 
Unit 
Test Condition 


Vil 
Input lOW 
Voltage 
-O.S 
0.8 
V 


VIH 
Input HIGH Voltage 
2.0 
VCC +O.S 
V 


VllC 
ClK 
Input lOW 
Voltage 
-O.S 
0.6 
V 


VIHC 
ClK 
Input HIGH Voltage 
3.8 
VCC +O.S 
V 


VOL 
Output 
lOW 
Voltge 
O.4S 
V 
IOl = 2.0mA 


VOH 
Output HIGH Voltage 
2.4 
V 
IOH = - 400 p.A 


III 
Input leakage 
Current 
±10 
p.A 
OV ~ VIN ~ VCC 


III 
Input Sustaining 
Current on 
-30 
-SOO 
p.A 
VIN = OV 
BUSY and ERROR Pins 


ILO 
Output leakage 
Current 
±10 
p.A 
OV ~ VOUT ~ VCC 


NOTE: 
'rA is guaranteed from O·Cto + SS'C as long as TCASE is not exceeded. 
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A.C. CHARACTERISTICS 
(Vcc = 5V ± 5%, 
T CASE = QOC to + 85°C)" 


AC 
timings 
are 
referenced 
to 
Q.8V 
and 
2.QV 
points 
of 
signals 
as 
illustrated 
in datasheet 
waveforms, 
unless 


otherwise 
noted. 


8MHz 
10 MHz 
12.5 MHz 


Symbol 
Parameter 
-8 
-8 
-10 
-10 
-12 
-12 
Unit 
Test 
Condition 


Mln 
Max 
Mln 
Max 
Mln 
Max 


1 
System 
Clock 
(ClK) 
Period 
62 
250 
50 
250 
40 
250 
ns 
, 


at 1.0V 
2 
System 
Clock 
(ClK) 
lOW 
Time 
15 
12 
11 
ns 


3 
System 
Clock 
(ClK) 
HIGH 
Time 
25 
16 
13 
ns 
at3.6V 


17 
System 
Clock 
(ClK) 
Rise Time 
10 
8 
- 
8 
ns 
1.0V to 3.6V, 
(Note 
7) 


18 
System 
Clock 
(ClK) 
Fall Time 
10 
8 
- 
8 
ns 
3.6V to 1.0V, 
(Note 
7) 


4 
Asynch. 
Inputs 
Setup 
Time 
20 
20 
15 
ns 
(Note 
1) 


5 
Asynch. 
Inputs 
Hold Time 
20 
20 
15 
ns 
(Note 
1) 


6 
RESET 
Setup 
Time 
28 
23 
18 
ns 


7 
RESET 
Hold Time 
5 
5 
5 
ns 


8 
Read 
Data Setup 
Time 
10 
8 
5 
ns 


9 
Read 
Data 
Hold Time 
8 
8 
6 
ns 


10 
READY 
Setup 
Time 
38 
26 
22 
ns 


11 
READY 
Hold Time 
25 
25 
20 
ns 


12 
Status/PEACK 
Valid 
Delay 
1 
40 
- 
- 
- 
- 
ns 
(Notes 
2, 3, 8) 


12a1 
Status 
Active 
Delay 
- 
- 
1 
22 
3 
18 
ns 
(Notes 
2, 3, 8) 


12a2 
PEACK 
Active 
Delay 
- 
- 
1 
22 
3 
20 
ns 
(Notes 
2, 3, 8) 


12b 
Status/PEACK 
Inactive 
Delay 
- 
- 
1 
30 
3 
22 
ns 
(Notes 
2, 3, 8) 


13 
Address 
Valid 
Delay 
1 
60 
1 
35 
1 
32 
ns 
(Notes 
2, 3, 8) 


14 
Write 
Data Valid 
Delay 
0 
50 
0 
30 
0 
30 
ns 
(Notes 
2, 3, 8) 


15 
Address/Status/Data 
Float 
Delay 
0 
50 
0 
47 
0 
32 
ns 
(Notes 
2, 4, 7) 


16 
HlDA 
Valid 
Delay 
0 
50 
0 
47 
0 
27 
ns 
(Notes 
2, 3, 8) 


19 
Address 
Valid 
To Status 
38 
27 
22 
ns 
(Notes 
3, 5, 6, 7) 
Valid 
Setup 
Time 


NOTES: 
1. Asynchronous 
inputs 
are 
INTR, 
NMI, 
HOLD, 
PEREa, 
EFi1'lOR, and imSY. 
This 
specification 
Is given 
only 
for testing 
purposes, 
to assure 
recognition 
at a specific 
CLK edge. 


2. Delay from 
1.0V on the CLK, to O.BV or 2.0V or float on the output 
as appropriate 
for valid or floating 
condition. 


3. Output 
load: CL = 100 pF. 


4. Float condition 
occurs 
when 
output 
current 
is less than ILO in magnitude. 
5. Delay 
measured 
from 
address 
either 
reaching 
O.BV or 2.0V 
(valid) 
to status 
going 
active 
reaching 
2.0V or status 
going 
inactive 
reaching 
O.BV. 
6. For load capacitance 
of 10 pF or more on STATUS/PEACK 
lines, subtract 
typically 
7 ns. 
7. These 
are not tested. 
They are guaranteed 
by design 
characterization. 


B. Minimum 
output 
delay timings 
are not tested, 
but are guaranteed 
by design 
characterization. 
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NOTE 8: 
AC Test Loading on Outputs 


NOTE 9: 
AC Drive and Measurement Point~LK 
Input 


OTHER 
DEVICE 
INPUT 


NOTE 
10: 
AC Setup, Hold and Delay Time Measurement--General 


III 


A23-Ao 


~ 
lI/iO, 
COO/INTA 


:il 


READY 


- 
-- 
SRDY+SRDYEN 


--- 
ARDY+ARDYEN 


PCLK 


ALE 


CWOLY 


.• 
IIWTC 
.• 
~.• 
IIROC 


DT/R 


DEN 


READ CYCLE 
ILLUSTRATED WITH ZERO 
WAIT STATES 


TS 
TC 


WRITE 
CYCLE 
ILLUSTRATED WITH ONE 


WAIT 
STATE 


TS 
TC 


NOTE: 
1. The modified 
timing 
is due to the CMDL Y signal 
being active. 
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WAVEFORMS 
(Continued) 


80286 
ASYNCHRONOUS 
INPUT 
SIGNAL 
TIMING 
80286 
RESET 
INPUT 
TIMING 
AND 
SUBSEQUENT 
PROCESSOR 
CYCLE 
PHASE 


NOTES: 
1. PClK indicates which processor cycle phase will occur 
on the next ClK. PClK may not indicate the correct phase 
until the first bus cycle is performed. 
2. These inputs are asynchronous. The setup and hold 
times shown assure recognition for testing purposes. 


NOTE: 
When RESET meets the setup time shown. the next ClK 
will start or repeat </>2of a processor cycle. 


PEACK 


SHE LOCK 
(SEE NOTE 5.) 


A23:'~~ 
VALID 
WL!Q, 


COD/INTA 


@ t(SEE 
NOTE 1.j 
:»»»»f 
--------------------- 


-I @t"""~,.) 


ALiD ~WRITE>»)) 
--------------------- 


g[ 
PCLK 
'__I 


NOTES: 
1. These signals may not be driven by the 80286 during the time shown. The worst case in terms of latest float time is 
shown. 
2. The data bus will be driven as shown if the last cycle before T, in the diagram was a write TC. 
3. The 80286 floats its status pins during TH. External 20 Kll resistors keep these signals high (see Table 16). 
4. For HOLD request set up to HlDA. refer to Figure 29. 
5. SHE and IOCR are driven at this time but will not become valid until Ts. 
6. The data bus will remain in 3-state OFF if a read cycle is performed. 
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WAVEFORMS 
(Continued) 


80286 
PEREQ/PEACK 
TIMING 
FOR ONE TRANSFER 
ONLY 


NOTES: 
1. J5"EACK always 
goes active 
during 
the first bus operation 
of a processor 
extension 
data operand 
transfer 
sequence. 
The 


first bus operation 
will be either 
a memory 
read at operand 
address 
or I/O 
read at port address 
OOFA(H). 


2. To prevent 
a second 
processor 
extension 
data 
operand 
transfer, 
the worst 
case 
maximum 
time 
(Shown 
above) 
is: 3 x 


<D-12a2max.-@min 
.. The actual. 
configuration 
dependent, 
maximum 
time is: 3x 
<D-12a2max.-@min. 
+ Ax2x 
<D. 
A is the number 
of extra TC states 
added to either the first or second 
bus operation 
of the processor 
extension 
data operand 


transfer 
sequence. 


BUS C"l'CU 
TYPE 


cu~ r4 t 


Va.'--' -l@r . 


o 
(SEE 
NOTE 3.) 


om »»»»»»>3 
------·n.--------. 
@t--- 


NOTES: 
1. Setup 
time for RESET t may be violated 
with the consideration 
that 
4>1 of the processor 
clock 
may begin 
one system 


eLK period 
later. 


2. Setup 
and 
hold 
times 
for RESET 
J. must 
be met for proper 
operation, 
but RESET 
J. may occur 
during 
4>1 or 4>2. If 


RESET J. occurs 
in 4>,the reference 
clock 
edge can be 4>2of the previous 
bus cycle. 
3. The data bus is only guaranteed 
to be in 3-state 
OFF at the time shown. 


-------T-------~-------~-------, 
I 
I 
I 
I 
LOWIlIIP_TA 
I 
- 
__ 
TA 
I 
LOWDATA 
I 
HIGHDATA 
I 
-------._------~-------~-------~ 


REGISTER OPEIWIDIlIEGlSTEIlI 
TO USE IN Ol'FSET CALCULATION 


REGISTER 0PE1WlOIUTEIISIOII 
OF 0l'C00E 
REGISTER ~ 
IIOOE WITHDlSPLACEIIEHTLEHGTH 
WOROI8VTEOPERATION 
DIRE~ 
IS TO REGlSTEMlIRE~ 
IS"- 
REGISTER 
OPERATION(lIlSTIlUCT1OIl COOE 


80286 INSTRUCTION 
SET SUMMARY 


Instruction 
Timing Notes 


The instruction clock counts listed below establish 
the maximum execution rate of the 80286. With no 
delays in bus cycles, the actual clock count of an 
80286 program will average 5% more than the cal- 
culated clock count, due to instruction sequences 
which execute faster than they can be fetched from 
memory. 


To 
calculate 
elapsed 
times 
for 
instruction 
se- 


quences, multiply the sum of all instruction clock 
counts, as listed in the table below, by the processor 
clock period. An 8 MHz processor clock has a clock 
period of 125 nanoseconds and requires an 80286 
system clock (CLK input) of 16 MHz. 


Instruction 
Clock Count Assumptions 


1. The instruction has been ~refetched, decoded, 
and is ready for execution. Control transfer in- 
struction clock counts include all time required to 
fetch, decode, and prepare the next instruction for 
execution. 


2. Bus cycles do not require wait states. 
3. There are no processor extension data transfer or 
local bus HOLD requests. 


4. No exceptions occur during instruction execution. 


Instruction 
Set Summary Notes 


Addressing displacements selected by the MOD 
field are not shown. If necessary they appear after 
the instruction fields shown. 


Above/below refers to unsigned value 
Greater refers to positive signed value 
Less refers to less positive (more negative) signed 


values 
if d = 1 
then to register; if d = 0 then from register 


if w = 1 then word instruction; if w = 0 then byte 


instruction 
if s = 0 
then 16-bit immediate data form the oper- 
and 
if s = 1 
then an immediate data byte is sign-ex- 
tended to form the 16-bit operand 
x 
don't care 
z 
used for string primitives for comparison with 
ZF FLAG 


If two clock counts are given, the smaller refers to a 
register operand and the larger refers to a memory 
operand 
• = 
add one clock if offset calculation requires 
summing 3 elements 
n = 
number of times repeated 
m = 
number of bytes of code in next instruction 


Level (L)-Lexical 
nesting level of the procedure 


• 


The following comments describe possible excep- 
tions, side effects, and allowed usage for instruc- 
tions in both operating modes of the 80286. 


REAL ADDRESS 
MODE 
ONLY 
1. This is a protected mode instruction. Attempted 
execution in real address mode will result in an 
undefined opcode exception (6). 
2. A segment overrun exception (13) will occur if a 
word operand reference at offset FFFF(H) is at- 
tempted. 
3. This instruction may be executed in real address 
mode to initialize the CPU for protected mode. 


4. The IOPL and NT fields will remain O. 
5. Processor extension segment overrun interrupt 
(9) will occur if the operand exceeds the seg- 
ment limit. 


EITHER 
MODE 
6. An exception may occur, depending on the value 
of the operand. 
7. LOCK is automatically asserted regardless of the 
presence or absence of the LOCK instruction 
prefix. 


8. LOCK does not remain active between all oper- 
and transfers. 


PROTECTED 
VIRTUAL 
ADDRESS 
MODE 
ONLY 
9. A general protection exception (13) will occur if 
the memory operand cannot be used due to ei- 
ther a segment limit or access rights violation. If 
a stack segment limit is violated, a stack seg- 
ment overrun exception (12) occurs. 
10. For segment load operations, the CPL, RPL, and 
OPL must agree with privilege rules to avoid an 
exception. The segment must be present to 
avoid a not-present exception (11). If the SS reg- 
ister is the destination, and a segment not-pres- 
ent violation occurs, a stack exception (12) oc- 
curs. 


11. All segment descriptor accesses in the GOT or 


LOT made by this instruction will automatically 
assert LOCK to maintain descriptor integrity in 
multiprocessor systems. 


12. JMP, CALL, INT, RET, IRET instructions refer- 
ring to another code segment will cause a gener- 
al protection exception (13) if any privilege rule is 
violated. 
13. A general protection exception (13) occurs if 


CPL"* 
O. 
14. A general protection exception (13) occurs if 
CPL> 
IOPL. 


15. The IF field of the flag word is not updated if CPL 
> 
IOPL. The IOPL field is updated only if 
CPL = O. 
16. Any violation of privilege rules as applied to the 
selector operand do not cause a protection ex- 
ception; rather, the instruction does not return a 
result and the zero flag is cleared. 


17. If the starting address of the memory operand 
violates a segment limit, or an invalid access is 
attempted, a general protection exception (13) 
will occur before the ESC instruction is execut- 
ed. A stack segment overrun exception (12) will 
occur if the stack limit is violated by the oper- 
and's starting address. If a segment limit is vio- 
lated during an attempted data transfer then a 
processor extension segment overrun exception 
(9) occurs. 
18. The destination of an INT, JMP, CALL, RET or 
IRET instruction must be in the defined limit of a 
code segment or a general protection exception 
(13) will occur. 
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80286 
INSTRUCTION 
SET SUMMARY 


CLOCK COUNT 
COMMENTS 


Real 
Protected 
Real 
Protected 


FORMAT 
Addreoa 
Virtual 
Addreoa 
Virtual 


Mode 
Addreoa 
Mode 
Addreoa 


Mode 
Mode 


agister to Register/Memory 
10001 
OOw I modreg 
rim 
2,3' 
2,3' 


agister Imemory 
to register 
1000101w 
I modreg 
rim 
2,5' 
2,5' 
9 


mmediate 
to register/memory 
1 1 0001 
1 w I mod 000 
rim 
data 
dataifw 
~ 1 
2,3' 
2,3' 
9 


mmediate 
to register 
1011 
w 
reg I 
data 
dataifw=1 
2 


emory to accumulator 
1010000wl 
addr-Iow 
addr-high 
2 


ccumulator 
to memory 
1010001Wl 
addr-Iow 
addr-high 
2 
9 • 


agister/memory 
to segment 
register 
10001110 
I mod 0 reg rim 
2,5' 
17,19' 
2 
9,10,11 


egment 
register 
to register/memory 
10001100 
I mod 0 reg rim 
2,3' 
2,3' 


USH~Pulh: 
I 11111111 
I mod 1 1 0 rim I 
5' 
5' 
I 01010 
reg 
I 000reg11 
0 I 
9 


1011010101 
data 
dataWe=O 
3 
3 
2 
9 
I 01100000 
I 
17 
17 
2 
9 


10001111 
ImodOOO 
r/ml 
5' 
5' 
2 
9 


01011 
reg 
2 
9 


OOOreg 111 
(reg"'Ol) 
20 
2 
9,10,11 


01100001 
19 
19 
2 
9 


1 000011 
w ImOdreg 
r/ml 
3,5' 
3,5' 
2,7 
7,9 


10010 
reg 
3 


111001 
Ow I 
port 
14 


111011 
Ow I 
14 


1110011 
w I 
port 
3 
14 


1110111 
w I 
14 


11010111 


EA ~ Load EA to register 
10001101 
Imod reg 
r/ml 
3' 
3' 


OS = Load pointer to OS 
11000101 
ImOd reg 
r/ml 
(mod"'ll) 
7' 
21' 
9,10,11 


ES ~ Load pointer to ES 
11000100 
Imod 
reg 
r/ml 
(mod'" 1) 
7' 
21' 
9,10,11 


Shaded areas indicate instructions 
not available in 8086, 88 microsystems. 


CLOCK COUNT 
COMMENTS 


fuNCTION 
AMI 
Protected 
AMI 
Protected 
FORMAT 
VIrlu8I 
VlrtUIII 
A__ 


AcIcIreM- 
AckI ••• 
- 
M_ - 
Mod. 


AT A TAANSFEA 
(Continued) 


.AHF Load AH wi1h Ilags 
I 10011111 
I 
2 
2 


lAHF - Store AH into flags 
I 10011110 
! 
2 
2 


USHF - Push flags 
I 10011100 
I 
3 
3 
2 
9 


'OPF = Pop flags 
1 10011101 
! 
5 
5 
2,4 
9,15 


AITHMETlC 


DO = Add: 


eg/memory 
with register to either 
1 OOOOOOdw I modreg 
rIm! 
2,7' 
2,7' 
2 
9 


mmediate to register/memory 
11 OOOOOsw I modOOO 
rIm 
1 
data 
Idatahw 
- 
011 
3,7' 
3,7' 
2 
9 


mmediata to accumulator 
1000001 
Ow I 
data 
I 
datanw-1 
! 
3 
3 


DC - Add with carry: 


eg/memory 
wi1h register to either 
I 000100dw 
1 modreg 
rIm 
1 
2,7' 
2,7' 
2 
9 


mmediate to register/memory 
I 1 OOOOOsw 
1 modO 1 0 rIm I 
data 
ldatanaw 
= 011 
3,7' 
3,7' 
2 
9 


mmediale 10accumulator 
I 0001010w 
I 
data 
datanw=1 
! 
3 
3 


NC = Increment: 


egisler/memOlY 
I 1111111 
w I modOOO 
rIm I 
2.7' 
2,7' 
2 
g 


agister 
I 
01000reg 
1 
2 
2 


UB = SUblnlct: 


eg/memory 
and register to either 
I 00101 
Odw 
1 modreg 
rIm 
1 
2,7' 
2,7' 
2 
9 


mmediate from register/memory 
I 1 OOOOOaw I mod 1 0 1 rIm I 
data 
Idatallsw 
= 01! 
3,7' 
3.7' 
2 
9 


mmediate from accumulator 
I 0010110wl 
data 
I 
datanw-1 
I 
3 
3 


BB = SUbtract 
with borrow: 


eg/memory 
and register to either 
I 00011 
Odw I mod reg 
rIm I 
2,7' 
2,7' 
2 
9 


mmediate from register/memory 
11 OOOOOsw I mod011 
rIm I 
data 
I datahw=01 
I 
3,7' 
3,7' 
2 
9 


mmediate from accumulator 
I 0001110wl 
data 
I 
datanw=1 
I 
3 
3 


EC = Decrement 


agister/memory 
I 1111111Wlmod001 
r/ml 
2,7' 
2.7' 
2 
9 


agister 
I 01001 
reg I 
2 
2 


MP-Compare 


agister/memory 
with register 
0011101w 
Imod reg 
rIm! 
2.6' 
2,6' 
2 
9 


agister with register lmemory 
00111 
OOw 
lmodreg 
r/ml 
2,7' 
2,7' 
2 
9 


mmediate with register/memory 
1 OOOOOsw 
Imod 111 
r/ml 
data 
I datailsw-Ol 
I 
3,6' 
3,6' 
2 
9 


mmediate with accumulator 
001111 
Ow 
! 
data 
1 
datailw=1 
I 
3 
:i 


EO-Change 
sign 
1111011W!mod011 
r/ml 
2 
7' 
2 
9 


'-'" 
= ASCII adjusl for add 
00110111 
I 
3 
3 
pM- Decimal adjust for add 
00100111 
I 
3 
3 


intel~ 
80286 


80286 
INSTRUCTION 
SET SUMMARY 
(Continued) 


CLOCK COUNT 
COMMENTS 


Real 
Protaeted 
Real 


Protected 


UNCTION 
FORMAT 
Virtual 
Virtual 
Addre •• 
Addre •• 
Addre •• 
Addre •• 
Mode 
Mode 
Mode 


Mode 


RITHMETIC (Continued) 


S = ASCII adjust lor subtract 
00111111 
3 
3 


00101111 


UL~ Multiply (unsigned): 
1111011w 
Imodl00 
r/ml 


13 
13 


21 
21 


16' 
16' 
2 


24' 
24' 
2 • 


1111011 
w 
1mod 1 0 1 
rlml 


13 
13 


21 
21 


16' 
16' 
2 
9 


24' 
24' 
2 
9 


2~,t.4· ".•.. 
I 
& 


IV - Divide (unsigned) 
1111011w 
Imod 110 
rlml 


110100owimodlTT 
rlml 


1101001 
w ImodlTT 
rlml 
11 IO()OOOw 
ImodlTT 
r/ml 


14 
14 
6 
6 


22 
22 
6 
6 


17' 
17' 
2,6 
6,9 


25' 
25' 
2,6 
6,9 


17 
17 
6 
6 


25 
25 
6 
6 


20' 
20' 
2,6 
6,9 


28' 
28' 
2,6 
6,9 


16 
16 


14 
14 


2 


2 
2 


2,7' 
2,7' 
2 
9 


5+n,8+0- 
5+0,8+0- 
2 
9 


6+n.!+n· 
5+J!.I!+n· 
2 
9 


lTT 


000 


001 


010 


011 


100 


101 


111 


Instruction 
ROL 
ROR 
RCL 
RCR 


SHLISAL 


SHR 


SAR 


intel~ 


CLOCK COUNT 
COMMENTS 


R.al 
Protected 
R.al 
Protected 
UNCTION 
FORMAT 
Ylrtual 
Vlrtuel 
Add •••• 
Add, ••• 
Add, ••• 
Add •••• 
Mod. 
Mod. 
Mod. 
Mod. 


~RITHMETIC (Continued) 


~ND=And: 


Reg/memory 
and register to either 
1001 
OOOdw 
I modreg 
rIm I 
2,7' 
2,7' 
2 
9 


mmediate to register/memory 
I 1 OOOOOOw 
I modI 
00 rIm 
I 
data 
I 
dataifw~1 
I 
3,r 
3,7' 
2 
9 


mmediate to accumulator 
I 0010010wl 
data 
I dataifw~11 
3 
3 


EST= And lunctlon 
to Ilage, no '.ault: 


Register/memory 
and register 
I 100001 
Ow I modreg 
rIm 
I 
2,6' 
2,6' 
2 
9 


mmediate data and register/memory 
I 1 1 11 01 1 w I mod 000 
rIm I 
data 
I 
data~w=1 
I 
3,6' 
3,6' 
2 
9 


mmediate data and accumulator 
I 1010100w 
I 
data 
I dataifw~1 I 
3 
3 


OR=Or: 


Reg/memory 
and register to either 
I 00001 
Odw 
I modreg 
rIm I 
2,7' 
2,7' 
2 
9 


mmediate to register/memory 
I 1000000w 
I modOOl 
rIm I 
data 
I 
dataifw-l 
I 
3,7' 
3,7' 
2 
9 


mmediate to accumulator 
I 0000110wl 
data 
I dataifw=11 
3 
3 


OR = Exclusive or: 


Reg/memory 
and register to either 
I 0011 
OOdw 
I modreg 
rIm I 
2,7' 
2,7' 
2 
9 


mmediate to register/memory 
I 1 OOOOOOw 
I mod 11 0 rIm I 
data 
I dala~w 
~ 1 I 
3,7' 
3,7' 
2 
9 


mmediate to accumulator 
I 0011010wl 
data 
Idataifw 
~ 11 
3 
3 


NOT= Invert register/memory 
I 1 1 1 1 0 1 1 w I mod 0 1 0 rIm I 
2,7' 
2,7' 
2 
9 


STRING MANIPULATION: 


MOYS=Move byte/word 
1010010w 
5 
5 
2 
9 


CMPS-Compare 
byte/wOfd 
1010011 
w 
8 
8 
2 
9 


SCAS-Scan 
byte/word 
1010111 
w 
7 
7 
2 
9 


ODS= Load byte/wd to All AX 
1010110w 
5 
5 
2 
9 


TOS= Stor byte/wd from ALl A 
1010101 
w 
3 
3 
2 
9 


INS- Input byte/wd from OX port 
10110110w 
5 
5 
2 
9,14 


OUTS- Output byte/wd to OX port 
I 0110111w 
I 
5 
5 
2 
9,14 


Repeated by count in ex 


MOY. = Move string 
11110011 
I 1010010wl 
5+4n 
5+4n 
2 
9 


CMPS= Compere string 
1111001 
z I 1010011 
wi 
5+9n 
5+9n 
2,8 
8,9 


SCAS= Scan siring 
1111001 
z 
I 1010111 
wi 
5+8n 
5+8n 
2,8 
8,9 


ODS = Load siring 
11110011 
I 101011 
Ow I 
5+4n 
5+4" 
2,8 
8,9 


TOS = Store string 
11110011 
I 1010101 
wi 
, 


4+3n 
4+3n 
2,8 
8,9 


NS-Input 
airing 
11110011 
I 0110110w 
I 
5+40 
5+40 
2 
9,14 


OUTS- Output atring 
I 11110011 
I 0110111w 
I 
5+40 
5+40 
2 
9,l.!- 


CLOCK COUNT 
COMMENTS 


Real 
Protected 
Real 
Protected 
FUNCTION 
FORMAT 
Virtual 
Virtual 
Addreal 
Addreea 
Addreea 
Addreea 
Mode 
Mode 
Mode 
Mode 


CONTROL TRANSFER 


CALL 
=Call: 


Direct within segment 
I 11101000 
I 
disp-Iow 
I 
disp-high 
I 
7+m 
7+m 
2 
18 


Register/memory 
I 11111111 
Imod010 
r/ml 
7+rn.11+m· 
7+m,11+m- 
2,8 
8,9,18 


indirect within segment 


Direct intersegment 
I 10011010 
I 
segment offset 
I 
13+m 
26+m 
2 
11,12,18 


Protected 
Mode Only (Direct 
Intereagment): 
I 
segment selector 
I 
Via call gate to same privilege level 
41+m 
8,11,12,18 


Via call gate to different privilege level, no parameters 
82+m 
8,11,12,18 


Via call gate to different privilege level, x parameters 
86 +4x+m 
8,11,12,18 


ViaTSS 
177+m 
8,11,12,18 


Via task gate 
182+m 
8,11,12,18 


Indirect intersegment 
I 11111111 
ImodOl1 
r/ml 
(mod"'11) 
16+m 
29+m· 
2 
8,9,11,12,18 


Protected 
Mode Only (Indirect 
Intereagment): 


Via call gat9 to same privilege level 
44+m· 
8,9,11,12,18 


Via call gate to different privilege level, no parameters 
83 +m· 
8,9,11,12,18 


Via call gate to different privilege level, x parameters 
9O+4x +m- 
8,9,11,12,18 


ViaTSS 
180+m- 
8,9,11,12,18 


Via task gate 
185+m- 
8,9,11,12,18 


JMP = Unconditional 
jump: 


Shortllong 
I 11101011 
I 
disp-Iow 
I 
7+m 
7+m 
18 


Direct within segment 
I 11101001 
I 
disp-Iow 
I 
disp-high 
I 
7+m 
7+ 
m 
18 


Register/memory 
indirect within segment I 11111111 
Imodl00 
r/ml 
7+m,11+m- 
7+m.11+m- 
2 
9,18 


Direct intersegment 
I 11101010 
I 
segment offset 
I 
11+m 
23+m 
11,12,18 


Protected 
Mode Only (Direct 
Intereegment): 
I 
segment selector 
I 


Via call gate to same privilege level 
38+m 
8,11,12,18 


ViaTSS 
175+m 
8,11,12,18 


Via task gate 
180+m 
8,11,12,18 


Indirect intersegment 
I 11111111 
Imod 1 0 1 
r/ml 
(mod"'11) 
15+m· 
26+m' 
2 
8,9,11,12,18 


Protected 
Mode Only (Indirect 
Intareagmant): 


Via call gate to same privilege level 
41+m· 
8,9,11,12,18 


Via TSS 
178+m· 
8,9,11,12,18 
Via task gate 
183+m· 
8,9,11,12,18 
RET = Return from 
CALL: 


Within segment 
I 11000011 
I 
11+m 
11+m 
2 
8,9,18 


Within seg adding immed to SP 
I 11000010 
I 
data-low 
I 
data-high 
I 
11+m 
11+m 
2 
8,9,18 


Intersegment 
I 11001011 
I 
15+m 
25+m 
2 
8,9,11,12,18 


Intersegment 
adding immediate to SP 
I 11001010 
I 
data~low 
I 
data-high 
I 
15+m 
2 
8,9,11,12,18 


Protected 
Mode Only (RET): 


To different privilege level 
55+m 
9,11,12,18 


• 


CLOCK COUNT 
COMMENTS 


R_I 
Protected 
R_I 
Protected 
FUNCTION 
FORMAT 
Vlrtulll 
Vlrtulll 
AcIcI•••• 
AcIcI•••• 
AcIcI•••• 
AcIcIreaa 
Mode 
Mode 
Mode 
Mode 


CONTROL TRANSFER 
(Continued) 


JEI JZ - Jump on equal zero 
01110100 
disp 
I 
7+mora 
7+mora 
18 


JLlJNGE = Jump on less/not greater or equal 
01111100 
disp 
I 
7+mora 
7+mora 
18 


JLElJNG-Jump 
on lessor equal/not greater 
01111110 
disp I 
.7+mora 
7+mora 
18 


JB/JNAE = Jump on below/not above or equal 
01110010 
disp 
7+mora 
7+mora 
18 


JBE/ JNA - Jump on below or equal/not above 
01110110 
disp 
7+mora 
7+mora 
18 


JP/JPE=Jump 
on perity/perity even 
01111010 
disp 
7+mora 
7+mora 
18 


JO=Jump 
on overflow 
01110000 
disp 
7 +mora 
7+mora 
18 


JS - Jump on sign 
01111000 
disp 
7+ mora 
7+mora 
18 


JNE/ JNZ - Jump on not equal/not zero 
01110101 
disp 
7+mora 
7+mor3 
18 


JNLlJGE-Jump 
on not less/greater or equal 
I 01111101 
disp 
7+mora 
7+mora 
18 


JNLElJG=Jump 
on not less or equal/greater 
I 01111111 
disp 
7+mora 
7+mora 
18 


JNB/JAE-Jump 
on not below/above 
or equal I 01110011 
disp 
7+mora 
7+mora 
18 


JNBE/JA=Jump 
on not below or equal/above 
I 01110111 
disp 
7+mora 
7+mora 
18 


JNP/JPO=Jump 
on not par/par odd 
01111011 
<lisp 
7+mora 
7+mora 
18 


JNO - Jump on not overflow 
01110001 
disp 
7+mora 
7+mora 
18 


JNS - Jump on not sign 
01111001 
disp 
7 +mora 
7+mor3 
18 


LOOP - Loop ex times 
11100010 
disp 
8+mor4 
8+mor4 
18 


LooPZlLooPE 
- Loop while zero/equal 
11100001 
dlsp 
8+mor4 
8+mor4 
18 


LOOPNZlLooPNE 
- Loop while not zero/equal 
11100000 
disp 
8+mor4 
8+mor4 
18 


JCXZ - Jump on ex zero 
11100011 
disp 
8 +mor4 
8+mor4 
18 


dlIIHlw I•••••I 
I,- 


ENTa-EnIIr PwooecMe 
11001000 
L 
2.8 
8,9 


L-O 
11 
11 
2.8 
U 
L-l 
15 
15 
L>1 
18+4(\.- 
1) 
18+4(\.-1) 
2.8 
8,8 
2.8 
8,9 


juAVE-LMw 
PwooecMe 
j 
11001001 
I 
5 
5 


INT-Interrupt: 


Type specified 
I 
11001101 
I 
type 
I 
2a+m 
2,7,8 


Type a 
I 
11001100 
I 
2a+m 
2,7,8 


INTO-Interrupt 
on overflow 
I 
11001110 
I 
24+mora 
2,8,8 
(a~no 
(a ~no 
interrupt) 
interrupt) 


intel~ 


CLOCK COUNT 
COMMENTS 


R.al 
Protected 
R.al 
Protected 


Addr ••• 
Virtual 
Addr ••• 
Virtual 


Addr ••• 
Addr ••• 
Mod. 
Mod. 
Mod. 
Mod. 


40+ 
m 
7,8,11,12,18 


78+ 
m 
7,8,11,12,18 


167+m 
7,8,11,12,18 


17+m 
31+ 
m 
2,4 
8,9,11,12,15,18 


55+m 
8,9,11,12,15,18 


169+m 
8,9,11,12,18 


t3' 
1S' 
2,6 
8.8.9,'1.'2,18 • 


(Uee INT clock 
oountK 


eJ<Ollllllor!5) 


2 


2 


2 


2 


2 


14 


14 


13 


3 


0 
14 


2 
2 
3 
13 


9-20' 
9-20" 
5,8 
8,17 


0 


rotected 
Mod. 
Only: 


Via interrupt or trap gate to same privilege level 


Via interrupt or trap gate to fit different privilege level 


Via Task Gate 


11110000 


1000011'1 
00000110 
I 


11,0,1 
TTT 
mod LLL 
rim 1 


(Tn LLL are opcode to processor extension) 


- Load global deea1ptor table register 
0000111' 
I 00000001 
ImodOl0 
r/ml 
11" 
,," 
2,3 
9,'3 


-Store 
global deea1ptor table register I 0000'1" 
I 00000001 
ImodOOO 
r/ml 
,," 
". 
2,3 
S 


- Load inlerrupl deacriplor table regiater I 0000' 
1 , 1 I 00000001 
ImodO' 
, 
rim I 
12- 
12" 
2.3 
9,13 


= Store InterNpt deea1ptor table register I 0000' 
1 1 1 I 00000001 
ImodOO' 
r/ml 
'2" 
12' 
2.3 
S 


- Load local deacriplor table ragl$ter 


from register memory 
I 00001111 
00000000 
ImodO 
1 0 
r/ml 
17.1S" 
S,11,'3 
= Store local deea1ptor table regIeIef 


to reglster/memory 
I 00001111 
I 00000000 
ImodOOO 
r/ml 
2,3" 
9 


Shaded 
areas 
indicate 
instructions 
not available 
in 8086, 
88 microsystems. 


CLOCKCOUNT 
COMMENTS 


Protected 
Real 
Protected 
FUNCTION 
FORMAT 
Real 
Virtual 
Virtual 
Addreaa 
Addreas 
Addreaa 
Addreaa 
Mode 
Moda 
Mode 
Mode 


PROTECTIONCON1'ROL{ConUnued) 


l.TR- Localtask regialer 


00000000 
ImodOll 
,I", I 
lron'Ireglster/lt18l'llOlY 
I 00001111 
I 
1'1,1.' 
1 
••11,13 


8TR -Store task regl$'" 
ImodOOl 
r/", I 
to reglater ffl81l1OlY 
I 00001111 
I 00000000 
?oS' 
1 
9 


LM3W- Load llllIChlnestatus ward 
lron'Iregister/lt18l'llOlY 
I 00001111 
I 00000001 
Imod 110 
rIm I 
3.$' 
3,6' 
2.3 
9.13 


SM8W••Store Illllchlne_ 
ward 
r 00001111 
I 000000011 
modl00 
,1lll1 
?OS' 
2,3' 
2.S 
9 


t.AR-l.08d acc.a 
r!ghls 


rim I 
!tom register/lt18l'llOlY 
I 00001111 
I 00000010 
Imodreu 
14.16' 
1 
9.11,16 


I.SL- Load eegm<lIltIImlt 
ImodA!9 
,I", I 
fromregl$ter/lt18l'llOlY 
I 0000111t 
I 00000011 
14.t6~ 
1 
9.11,16 


ARPL- Adjust,equested ptMIege level: 
I 01100011 
I mod', 
,1m I 
10·~11· 
2 
6,9 
lron'Ir•••• 
/1t18l'IlOIY 


YEAR=Verifyreed access: ,eglster/lt18l'llOlY 
0000 I mod 1 OOrfm I 
14,16' 
1 
0,11.16 


VEIlR-Vtlrifywrite 8C/l8$$: 
I 0000111 
t I 000000001 
modI 01 rIm I 
14,18' 
1 
9.11,16 


intel~ 


The Effective Address (EA) of the memory operand 
is computed according to the mod and rIm fields: 


if mod = 11 then rIm is treated as a REG field 
if mod = 00 then OISP = 0·, disp-Iow and disp-high 
are absent 
if mod = 01 then OISP = disp-Iow sign-extended to 
16 bits, disp-high is absent 
if mod = 10 then OISP = disp-high: disp-Iow 


if rIm = 000 then EA = (BX) + (SI) + OISP 
if rIm = 001 then EA = (BX) + (01) + OISP 
if rIm = 010 then EA = (BP) + (SI) + DISP 
if rIm = 011 then EA = (BP) + (01) + OISP 
if rIm = 100 then EA = (SI) + OISP 
if rIm = 101 then EA = (01) + OISP 
if rIm = 110 then EA = (BP) + DISp· 
if rIm = 111 then EA = (BX) + OISP 


OISP follows 2nd byte of instruction (before data if 
required) 


'except 
if mod 
~ 
00 and rIm ~ 110 then 
EO 
~ 
disp-high: 
disp-Iow. 


SEGMENT 
OVERRIDE 
PREFIX 


10 0 1 reg 1 1 01 


reg is assigned according to the following: 


segment 
reg 
Register 
00 
ES 
01 
CS 
10 
SS 
11 
DC 


REG is assigned according to the following table: 


16-Blt (w = 1) 
8·Blt (w = 0) 
000 
AX 
000 
AL 


001 
CX 
001 
CL 


010 
OX 
010 
OL 


011 
BX 
011 
BL 


100 
SP 
100 
AH 


101 
BP 
101 
CH 


110 
SI 
110 
OH 


111 
01 
111 
BH 


The physical addresses of all operands addressed 
by the BP register are computed using the SS seg- 
ment register. The physical addresses of the desti- 
nation operands of the string primitive operations 
(those addressed by the 01 register) are computed 
using the ES segment, which may not be overridden. 


The following differences exist between this data 
sheet 
(210253-017) 
and 
the 
previous 
version 


(210253-016): 
1. References to the 68-pin LCC (Leadless Chip 


Carrier) package have been removed. 


2. References to the 121CE-286support tool have 


been removed. 


The following list represents key differences be- 
tween the -016 and the -015 versions of this data 
sheet. Please review this summary carefully. 
1. Removed Input CLK, RESET Leakage Current 


(ILeA) specs. 


2. Updated output leakage current (ILO)specs. 


The following list represents key differences be- 
tween the -015 and the -014 versions of this data 
sheet. Please review this summary carefully. 
1. Removed the Range of Clock Rates bullet. 
2. The maximum ambient temperature (TA) vs Vari- 


ous Airflows Table has been updated. 


3. Removed the maximum values of System Clock 


(CLK) LOW period (t2) of 8 MHz, 10 MHz, and 
12.5 MHz parts in the A.C. Characteristics table. 


4. Removed the maximum values of System Clock 


(CLK) HIGH period (t3) of 8 MHz, 10 MHz, and 
12.5 MHz parts in the A.C. Characteristics table. 


5. Deleted the 82C284 and 82C288 A.C. Character- 


istics tables. 
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• 
Interfaces 
with 80286 and 80C286 
CPUs 


• 
Operates 
in Any Socket 
Designed 
for 
Intel 80287 or Intel287™ 
XL MCP up to 
12.5 MHz Clock Speeds 


• 
Implements 
ANSI/IEEE 
Standard 
754-1985 
for Binary Floating-Point 
Arithmetic 


• 
50% Higher Performance 
than Intel 
80287 


• 
Low Power CHMOS 
III Technology 


• 
Upward 
Object Code Compatible 
from 
Intel 80287 and 8087 


• 
Expands 
Data Types to Include 
32-, 64-, 


80-Blt Floating 
Point, or Integers, 
and 
18 Digit BCD Operands 


• 
Extends 
CPU Instruction 
Set to Include 
Tlgonometrlc, 
Logarithmic, 
Exponential, 


and Arithmetic 
Instruction 


• 
Implements 
Intel387TM Transcendental 
Operations 
for SINE, COSINE, 


TANGENT 
ARCTANGENT 
and 
LOGARITHM 


• 
Eight 80-Blt Numeric 
Registers; 
for 
Stack use or Individual 
Access 


• 
Available 
In 40-pin DIP as Intel287TM XL 
MCP and 44-pln PLCC as Intel287™ 
XLT MCP 


(See Packaging 
Outlined 
and Dimensions, 
order 
#231369) 


The 
Intel287 
XL Math CoProcessor 
is an extension 
of the 
Intel 80286 
microprocessor 
architecture. 
When 
combined 
with an 80286 microprocessor, 
the Intel287 XL MCP dramatically 
increases 
the processing 
speed of 


computer 
application 
software 
which utilize floating 
point mathematical 
operations. 
This makes an ideal addi- 


tion to a computer 
workstation 
platform 
for applications 
such as financial 
modeling 
and spreadsheets, 
CAD/ 


CAM, or business 
graphics. 


The Intel287 
XL Math CoProcessor 
adds over seventy 
mnemonics 
to the Intel 80286 microprocessor 
instruc- 
tion set. The Intel287 
XL MCP is compatible 
with the Intel 80287 and 8087 Math CoProcessors. 
The Intel287 


XL MCP increases 
performance 
by over 50% 
in typical 
floating-point 
tests, such as a Whetstone 
test, com- 


pared to the Intel 80287. The Intel287 XL MCP supports 
integer, floating 
point and BCD data formats 
and fully 
conforms 
to the ANSI/IEEE 
754-1985 
Floating 
Point Standard. 


There 
are two versions 
of Intel287 
XL MCP: the Intel287 
XL MCP in a 40-pin 
DIP package 
and the Intel287 
XLT MCP in a 44-pin 
PLCC package 
for small footprint 
applications 
such as portable 
personal 
computers. 


Each 
supports 
a clock 
speed 
up to 12.5 MHz which 
enables 
operation 
in any Math 
CoProcessor 
socket 


designed 
for the Intel 80287-6/8/10 
or Intel 80C287A-12. 
Both versions 
are manufactured 
with low-power, 


CHMOS 
III technology. 
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The Intel287 XL Math CoProcessor provides arith- 
metic instructions for a variety of numeric data types. 
It also executes numerous built-in transcendental 
functions (e.g. tangent, sine, cosine, and log func- 
tions). The Intel287 XL MCP effectively extends the 
register and instruction set of its CPU for existing 
data types and adds several new data types as well. 
Figure 1.1 shows the additional registers visible to 
programs in a system that includes the Intel287 XL 
MCP. Essentially, the Intel287 XL MCP can be treat- 
ed as an additional resource or an extension to the 
CPU. The CPU together with an Intel287 XL Math 
CoProcessor can be used as a single unified sys- 
tem. 


The Intel287 XL MCP has two operating modes. Af- 
ter reset, the Intel287 XL MCP is in the real-address 
mode. It can be placed into protected mode by exe- 
cuting the FSETPM instruction. It can be switched 
back 
to 
real-address 
mode 
by 
executing 
the 
FRSTPM instruction (note that this feature is useful 
only with CPU's that can also switch back to real-ad- 
dress mode). These instructions control the format 
of the administrative instructions FLDENV, FSTENV, 
FRSTOR, and FSAVE. Regardless of operating 
mode, all references to memory for numerics data or 
status information are performed by the CPU, and 
therefore obey the memory-management and pro- 
tection rules of the CPU. 


In real-address mode, a system that includes the In- 
tel287 XL MCP is completely upward compatible 
with software for the 8086/8087 
and for 802861 
80287 or 80C287A real-address mode. 


In protected mode, a system that includes the In- 
tel287 XL MCP is completely upward compatible 
with software for 80286/80287 or 80C287A protect- 
ed mode systems. The only differences of operation 


that may appear when 8086/8087 
programs are 
ported to a protected-mode Intel287 XL MCP sys- 
tem are in the format of operands for the administra- 
tive instructions FLDENV, FSTENV, FRSTOR, and 
FSAVE. These instructions are normally used only 
by exception handlers and operating systems, not by 
applications programs. 


The Intel287 XL MCP adds to the CPU additional 
data types, registers, instructions, and interrupts 
specifically designed to facilitate high-speed numeri- 
cs processing. To use the Intel287 XL MCP requires 
no special programming tools, because all new in- 
structions and data types are directly supported by 
the assembler and compilers for high-level lan- 
guages. All 8086/8088 development tools that sup- 
port the 8087 can also be used to develop software 
for the 80286/1ntel287 XL MCP in real-address 
mode. All 80286 development tools that support the 
80287180C287A can also be used to develop soft- 
ware for the 80286/1ntel287 XL MCP and 80C2861 
Intel287 XL MCP. The Intel287 XL MCP supports all 
80387 instructions, producing the same binary re- 
sults. 


All communication between the CPU and the In- 
tel287 XL MCP is transparent to applications soft- 
ware. The CPU automatically controls the Intel287 
XL MCPwhenever a floating point instruction is exe- 
cuted. All physical memory and virtual memory of 
the CPU are available for storage of the instructions 
and operands of programs that use the Intel287 XL 
MCP. All memory addressing modes are available 
for addressing numerics operands. 


Section 6 at the end of this data sheet lists the in- 
structions that the Intel287 XL MCP adds to the 
80286 instruction set. 


• 


Table 2.1 lists the seven data types that the Intel287 
XL MCP supports and presents the format for each 
type. Operands are stored in memory with the least 
significant digit at the lowest memory address. Pro- 
grams retrieve these values by generating the low- 
est address. For maximum system performance, all 
operands should start at physical-memory address- 
es that correspond to the word size of the CPU; op- 
erands may begin at any other addresses, but will 
require extra memory cycles to access the entire op- 
erand. 


Internally, the Intel287 XL MCP holds all numbers in 
the extended-precision real format. Instructions that 
load operands from memory automatically convert 
operands represented in memory as 16-, 32-, or 64- 
bit integers, 32- or 64-bit floating-point numbers, or 
18-digit packed BCD numbers into extended-preci- 
sion real format. Instructions that store operands in 
memory perform the inverse type conversion. 


2.2 
Numeric Operands 


A typical MCP (Math CoProcessor) instruction ac- 
cepts one or two operands and produces one (or 
sometimes two) results. In two-operand instructions, 
one operand is the contents of an MCP register, 
while the other may be a memory location. The oper- 
ands of some instructions are predefined; for exam- 
ple, FSQRT always takes the square root of the 
number in the top stack element. 


2.3 
Register Set 


Figure 1.1 shows the Intel287 XL MCP register set. 
When an Intel287 XL MCP is present in a system, 
programmers may use these registers in addition to 
the registers normally available on the CPU. 


Intel287 XL MCP computations use the Intel287 XL 
MCP's data registers. These eight 80-bit registers 
provide the equivalent capacity of 20 32-bit regis- 
ters. Each of the eight data registers in the Intel287 
XL MCP is 80 bits wide and is divided into "fields" 
corresponding to the MCP's extended-precision real 
data type. 


The Intel287 XL MCP register set can be accessed 
either as a stack, with instructions operating on the 
top one or two stack elements, or as individually ad- 
dressable registers. The TOP field in the status word 
identifies the current top-of-stack register. A "push" 
operation decrements TOP by one and loads a value 
into the new top register. A "pop" operation stores 


intel~ 


the value from the current top register and then in- 
crements TOP by one. The Intel287 XL MCP register 
stack grows "down" toward lower-addressed regis- 
ters. 


Instructions may address the data registers either 
implicitly or explicitly. Many instructions operate on 
the register at the TOP of the stack. These instruc- 
tions implicitly address the register at which TOP 
points. Other instructions allow the programmer to 
explicitly specify which register to use. This explicit 
register addressing is also relative to TOP. 


The tag word marks the content of each numeric 
data register, as Figure 2.1 shows. Each two-bit tag 
represents one of the eight data registers. The prin- 
cipal function of the tag word is to optimize the 
MCP's performance and stack handling by making it 
possible to distinguish between empty and nonemp- 
ty register locations. It also enables exception han- 
dlers to identify special values (e.g. NaNs or denor- 
mals) in the contents of a stack location without the 
need to perform complex decoding of the actual 
data. 


The 16-bit status word (in the status register) shown 
in Figure 2.2 reflects the overall state of the Intel287 
XL MCP. It may be read and inspected by programs. 


Bit 15, the B-bit (busy bit) is included for 8087 com- 
patibility only. It always has the same value as the 
ES bit (bit 7 of the status word); it does not indicate 
the status of the BUSY# output of Intel287 XL MCP. 


Bits 13-11 (TOP) point to the Intel287 XL MCP reg- 
ister that is the current top-of-stack. 


The four numeric condition code bits (C3-CO) are 
similar to the flags in a CPU; instructions that per- 
form arithmetic operations update these bits to re- 
flect the outcome. The effects of these instructions 
on the condition code are summarized in Tables 2.2 
through 2.5. 


Bit 7 is the error summary (ES) status bit. This bit is 
set if any unmasked exception bit is set; it is clear 
otherwise. If this bit is set, the ERROR# signal is 
asserted. 


Bit 6 is the stack flag (SF). This bit is used to distin- 
guish invalid operations due to stack overflow or un- 
derflow from other kinds of invalid operations. When 
SF is set, bit 9 (C1) distinguishes between stack 
overflow (C1= 1) and underflow (C1= 0). 
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Molt 
Slgnlflcent 
Byte 
HIGHEST ADDRESSED 
BYTE 
Dlte 
Renge 
Preclelon 
017 0/7 0/7 0/7 0/7 017 017 0/7 017 0/ 
Formete 
7 


Word 
Inleger 
±104 
16 Bits 
IITWO 
S 
COMPLEMENT! 


15 
0 


Short 
Integer 
± 109 
32 Bits 
IITWO 
S 
COMPLEMENT. 


31 
0 


Long 
Integer 
±10'8 
~Bits 
I~TWO S 
COMPl£MENTI 


63 
0 


±10'8 
sl 
x 
lellI 


MAGNITUDE 
d"I 
Packed 
BCD 
18 Digits 
d,~ 
d'!l 
d'J 
d'J 
dl/.d, 
•• duJ 
d. 
d, 
d, 
d, 
d, -, 
d, -, 
d, 


" 
12 
0 


Single Precision 
± 10±38 
24 Bits 
sl 
"ASED 
I 
SIGNIFICAND 
I 
S 
EXPONENT 


31 
23'- .& 
0 


Double 
Precision 
± 10±308 
53 Bits 
sl 
.,ASED 
I 
SIGNIFICAND 
I 
EXPONENT 
U 
52'- I, 
0 


Extended 
± 10±4832 
~Bits 
sl 
"ASED 
101 
SIGNIF'CAND 
I 
Precision 
EXPONENT 


1t 
14U' 
0 


NOTES: 
1. S = Sign bit (0 = positive, 
1 = negative) 
2. dn = Decimal 
digit (two per byte) 
3. X = Bits have no significance: 
Intel287 
XL MCP ignores 
when 
loading, 
zeroes 
when 
storing 
4. • 
= Position 
of implicit 
binary point 
5. I = Integer 
bit of significand; 
stored 
in temporary 
real, implicit 
in single and double 
precision 
6. Exponent 
Bias (normalized 
values): 


Single: 
127 (7FH) 
Double: 
1023 (3FFH) 
Extended 
Real: 
16383 
(3FFFH) 
7. Packed 
BCD: (-1)8 
(017 ... 
Do) 
8. Real: (-1)8 
(2E.SIA8) (Fo Fl 
... 
) 
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TAG (7) 
o 


TAG (0) 


NOTE: 
The index i of tag (i) is not top-relative. 
A program 
typically 
uses the "top" 
field of Status 
Word 
to determine 
which 
tag(i) 


field refers 
to logical 
top of stack. 


TAG VALUES: 
00 = Valid 
01 = Zero 
10 = QNaN, 
SNaN, 
Infinity, 
Denormal 
and Unsupported 
Formats 
11 = Empty 


• 


Figure 2.2 shows the six exception flags in bits 5-0 
of the status word. Bits 5-0 are set to indicate that 
the Intel287 XL MCP has detected an exception 
while executing an instruction. A later section enti- 
tled "Exception Handling" explains how they are set 
and used. 


value of ES (bit 7) and its reflection in the B-bit (bit 
15) are not derived from the values loaded from 
memory but rather are dependent upon the values of 
the exception flags (bits 5-0) in the status word and 
their corresponding masks in the control word. If ES 
is set in such a case, the ERROR# output of the 
Intel287 XL MCP is activated immediately. 


Note that when a new value is loaded into the status 
word by the FLDENV or FRSTOR instruction, the 


BUSY 


rfffITf--------TOP 
Of 
STACK POINTER 
WHu---------- 
CONDITION CODE 


ERROR SUMMARY STATUS 
J} 


STACK fLAG 
- 


EXCEPTION fLAGS 


PRECISION 


UNDERfLOW 


OVERfLOW 


ZERO DIVIDE 


DENORMALIZED OPERAND -----------' 


INVALID OPERATION---------------1 


ES is set if any unmasked 
exception 
bit is set; cleared 
otherwise. 


See Table 
2.2 for interpretation 
of condition 
code. 


TOP Values: 


000 = Register 
0 is Top of Stack 
001 = Register 
1 is Top of Stack 
•• 


111 = Register 
7 is Top of Stack 
For definitions 
of exceptions, 
refer to the section 
entitled 
"Exception 
Handling." 


Instruction 
CO (5) 
I 
C3 (Z) 
C1 (A) 
C2 (C) 


FPREM, FPREM1 
Three Least Significant 
Bits 
Reduction 
(See Table 2.3) 
of Quotient 
0= 
Complete 
Q2 
QO 
Q1 
orO/UIF 
1 = Incomplete 


FCOM, FCOMP, 
FCOMPP, 
FTST, 
Result of Comparison 
Zero 
Operand 
is Not Comparable 
FUCOM, FUCOMP, 
(See Table 2.4) 
orO/UIF 
(Table 2.4) 
FUCOMPP, 
FICOM, 
FICOMP 


FXAM 
Operand 
Class 
Sign 
Operand 
Class 
(See Table 2.5) 
or O/UIF 
(Table 2.5) 


FCHS, FABS, FXCH, 
FINCTOP, 
FDECTOP, 


Constant 
Loads, 
UNDEFINED 
Zero 
UNDEFINED 
FXTRACT, 
FLD, 
orO/UIF 
FILD, FBLD, 
FSTP (Ext Real) 


FIST, FBSTP, 
FRNDINT, 
FST 
FSTP, FADD, FMUL, 
FDIV, FDIVR, 
UNDEFINED 
Roundup 
UNDEFINED 
FSUB, FSUBR, 
orO/UIF 
FSCALE, 
FSQRT, 
FPATAN, 
F2XM1, 
FYL2X, FYL2XP1 


FPTAN, FSIN, 
Roundup 
Reduction 
FCOS, FSINCOS 
UNDEFINED 
orO/UIF 
0= 
Complete 
Undefined 
ifC2 
= 1 
1 = Incomplete 


FLDENV, 
FRSTOR 
Each Bit Loaded from Memory 


FLDCW, FSTENV, 
FSTCW, FSTSW, 
UNDEFINED 
FCLEX, FINIT, 
FSAVE 


O/U# 
When both IE and SF bits of status word are set, indicating a stack exception, this bit distinguishes between 
stack overflow (C1 = 1) and underflow (C1 = 0). 


Reduction 
If FPREM or FPREM1 produces a remainder that is less than the modulus, reduction is complete. When 
reduction is incomplete the value at the top of the stack is a partial remainder, which can be used as input to 
further reduction. For FPTAN, FSIN, FCOS, and FSINCOS, the reduction bit is set if the operand at the top of 
the stack is too large. In this case the original operand remains at the top of the stack. 


Roundup 
When the PE bit of the status word is set, this bit indicates whether one was added to the least significant bit of 
the result during the last rounding. 


UNDEFINED Do not rely on finding any specific value in these bits. 
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Condition Code 
Interpretation 
after 


C2 
C3 
C1 
CO 
FPREM and FPREM1 


1 
X 
X 
X 
Incomplete Reduction: Further iteration required for complete 
reduction. 


Q1 
QO 
Q2 
QMOD8 
Complete Reduction: CO,C3, C1 contain three 


0 
0 
0 
0 
least significant bits of quotient. 


0 
1 
0 
1 


1 
0 
0 
2 


0 
1 
1 
0 
3 
0 
0 
1 
4 
0 
1 
1 
5 
1 
0 
1 
6 
1 
1 
1 
7 


Table 2.4. Condition Code 
Resulting from Comparison 


Order 
C3 
C2 
CO 


TOP> 
Operand 
0 
0 
0 
TOP < Operand 
0 
0 
1 


TOP = Operand 
1 
0 
0 
Unordered 
1 
1 
1 . 


Table 2.5. Condition Code 
Defining Operand Class 


C3 
C2 
C1 
CO 
Value at TOP 


0 
0 
0 
0 
+ Unsupported 
0 
0 
0 
1 
+NaN 
0 
0 
1 
0 
- Unsupported 
0 
0 
1 
1 
-Nan 
0 
1 
0 
0 
+ Normal 
0 
1 
0 
1 
+ Infinity 
0 
1 
1 
0 
-Normal 
0 
1 
1 
1 
-Infinity 
1 
0 
0 
0 
+0 
1 
0 
0 
1 
+ Empty 


1 
0 
1 
0 
-0 
1 
0 
1 
1 
-Empty 
1 
1 
0 
0 
+ Denormal 


1 
1 
1 
0 
-Denormal 


The MCP provides several processing options that 
are selected by loading a control word from memory 
into the control register. Figure 2.3 shows the format 
and encoding of fields in the control word. 


The low-order byte of this control word configures 
exception masking. Bits 5-0 
of the control word 


contain individual masks for each of the six excep- 
tions that the Intel287 XL MCP recognizes. 


The high-order byte of the control word configures 
the Intel287 XL MCP operating mode, including pre- 
cision, rounding, and infinity control. 
• The "infinity control bit" (bit 12) is not meaningful 


to the Intel287 XL MCP,'and programs must ig- 
nore its value. To maintain compatibility with the 
8087 and 80287, this bit can be programmed; 
however, regardless of its value, the Intel2B7 XL 
MCP always treats infinity in the affine sense 


(- 
00 < + 00). This bit is initialized to zero both 


after a hardware reset and after the FINIT instruc- 
tion. 


• The rounding control (RC) bits (bits 11-10) pro- 


vide for directed rounding and true chop, as well 
as the unbiased round to nearest even mode 
specified in the IEEE standard. Rounding control 
affects 
only 
those 
instructions 
that 
perform 


rounding at the end of the operation (and thus 
can generate a precision exception); namely, 
FST, FSTP, FIST, all arithmetic instructions (ex- 
cept FPREM, FPREM1, FXTRACT, FABS, and 
FCHS), and all transcendental instructions. 


• The precision control (PC) bits (bits 9-8) can be 


used to set the Intel287 XL MCP internal operat- 
ing precision of the significand at less than the 
default of 64 bits (extended precision). This can 
be useful in providing compatibility with early gen- 
eration arithmetic processors of smaller preci- 
sion. PC affects only the instructions ADD, SUB, 
DIV, MUL, and SORT. For all other instructions, 
either the precision is determined by the opcode 
or extended precision is used. 


Because the MCP operates in parallel with the CPU, 
any exceptions detected by the MCP may be report- 
ed after the CPU has executed the ESC instruction 
which caused it. To allow identification of the failing 
numeric instruction, the Intel287 XL MCP contains 
registers that aid in diagnosis. These registers sup- 
ply the opcode of the failing numeric instruction, the 
address of the instruction, and the address of its nu- 
meric memory operand (if appropriate). 


The instruction and data pointers are provided for 
user-written exception handlers. Whenever the In- 
tel287 XL MCP executes a new ESC instruction, it 
saves the address of the instruction (including any 
prefixes that may be present), the address of the 
operand (if present), and the opcode. CPUs with 


32-bit internal architectures contain 32·bit versions 
of these registers and do not use the contents of the 
MCP registers. This difference is not apparent to 
programmers, however. 


The instruction and data pointers appear in one of 
four formats depending on the operating mode of 
the system (protected mode or real-address mode) 
and (for CPUs with 32-bit internal architectures) de- 
pending on the operand-size attribute in effect (32- 
bit operand or 16-bit operand). (See Figures 2.4, 2.5, 
2.6, and 
2.7.) The 
ESC instructions 
FLDENV, 
FSTENV, FSAVE, and FRSTOR are used to transfer 
these values between the registers and memory. 
Note that the value of the data pointer is undefined 
if 
the prior ESC instruction did not have a memory op- 
erand. 
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Interrupt 
Cause of Interrupt 
Number 


7 
In a system with a CPU that has control 
registers, 
an ESC instruction 
was encountered 
when 
EM or TS of CPU control 
register zero (CRO) was set. EM = 1 indicates 
that software 
emulation 
of the instruction 
is required. When TS is set, either an ESC or WAIT instruction 
causes interrupt 
7. This indicates 
that the current MCP context 
may not belong to the current 
task. 


9 
In a protected-mode 
system, an operand 
of a coprocessor 
instruction 
wrapped 
around an 
addressing 
limit (OFFFFH for expand-up 
segments, 
zero for expand-down 
segments) 
and 
spanned 
inaccessible 
addresses 1. The failing numerics 
instruction 
is not restartable. 
The 
address of the failing numerics 
instruction 
and data operand 
may be lost; an FSTENV does 
not return reliable addresses. 
The segment 
overrun exception 
should be handled by 
executing 
an FNINIT instruction 
(Le., an FINIT without a preceding 
WAIT). The exception 
can 
be avoided 
by never allowing 
numerics 
operands 
to cross the end of a segment. 


13 
In a protected-mode 
system, the first word of a numeric operand 
is not entirely within the limit 
of its segment. 
The return address pushed onto the stack of the exception 
handler points at 
the ESC instruction 
that caused the exception, 
including any prefixes. The Intel287 XL MCP 
has not executed 
this instruction; 
t~e instruction 
pointer and data pointer register refer to a 
previous, 
correctly 
executed 
instruction. 


16 
The previous 
numerics 
instruction 
caused an unmasked 
exception. 
The address of the faulty 
instruction 
and the address of its operand 
are stored in the instruction 
pointer and data 
pointer registers. 
Only ESC and WAIT instructions 
can cause this interrupt. 
The CPU return 
address pushed onto the stack of the exception 
handler points to a WAIT or ESC instruction 
(including 
prefixes). This instruction 
can be restarted 
after clearing the exception 
condition 
in 
the MCP. FNINIT, FNCLEX, FNSTSW, 
FNSTENV, 
and FNSAVE cannot cause this interrupt. 


NOTE: 
1. An operand 
may wrap around 
an addressing 
limit when 
the segment 
limit is near an addressing 
limit and the operand 
is 
near the largest 
valid address 
in the segment. 
Because 
of the wrap-around, 
the beginning 
and ending 
addresses 
of such an 
operand 
will be at opposite 
ends 
of the segment. 
There 
are two 
ways 
that 
such 
an operand 
may also 
span 
inaccessible 
addresses: 
1) if the segment 
limit is not equal 
to the addressing 
limit (e.g. addressing 
limit is FFFFH 
and segment 
limit is 
FFFDH) 
the operand 
will span addresses 
that are not within 
the segment 
(e.g. an 8-byte 
operand 
that starts 
at valid offset 
FFFCH 
will span addresses 
FFFC-FFFFH 
and 0000-0003H; 
however 
addresses 
FFFEH 
and FFFFH 
are not valid, because 
they exceed 
the limit); 2) if the operand 
begins 
and ends in present 
and accessible 
segments 
but intermediate 
bytes 
of the 
operand 
fall in a not-present 
segment 
or page or in a segment 
or page to which 
the procedure 
does not have access 
rights. 


CPU interrupts 
are used to report exceptional 
condi- 
tions while executing 
numeric programs 
in either real 
or protected 
mode. Table 2.6 shows these interrupts 
and their functions. 


The Intel287 
XL MCP detects 
six different 
exception 
conditions 
that 
can occur 
during 
instruction 
execu- 


tion. Table 2.7 lists the exception 
conditions 
in order 
of precedence, 
showing 
for each the cause and the 


Default Action 
Exception 
Cause 
(If Exception 
Is Masked) 


Invalid 
Operation 
on a signalling 
NaN, 
Result is a quiet NaN, integer indefinite, 
Operation 
unsupported 
format, indeterminate 
form 
or BCD indefinite. 
(0'00,0/0, 
(+ 00) + (- 00), etc.), or 
stack overflow/underflow 
(SF is also 
set). 


Denormalized 
At least one of the operands 
is 
The operand 
is normalized, 
and normal 
Operand 
denormalized, 
Le., it has the smallest 
processing 
continues. 
exponent 
but a nonzero 
significand. 


Zero Divisor 
The divisor is zero while the dividend 
is a 
Result is 00. 
noninfinite, 
nonzero 
number. 


Overflow 
The result is too large in magnitude 
to fit 
Result is largest finite value or 00. 
in the specified 
format. 


Underflow 
The true result is nonzero 
but too small 
Result is denormalized 
or zero. 
to be represented 
in the specified 
format, and, if underflow 
exception 
is 
masked, de normalization 
causes loss of 
accuracy. 


Inexact 
The true result is not exactly 
Normal processing 
continues. 
Result 
representable 
in the specified 
format 


(Precision) 
(e.g. Va); the result is rounded according 
to the rounding 
mode. 


default 
action 
taken 
by the Intel287 
XL MCP if the 
exception 
is masked by its corresponding 
mask bit in 
the control 
word. 


Any 
exception 
that 
is not 
masked 
by the 
control 
word 
sets the corresponding 
exception 
flag of the 
status word, sets the ES bit of the status word, and 
asserts 
the 
ERROR # 
signal. 
When 
the 
CPU 
at- 
tempts 
to execute 
another 
ESC instruction 
or WAIT, 
exception 
16 occurs. 
The exception 
condition 
must 
be resolved 
via an interrupt 
service 
routine. The re- 
turn address 
pushed onto the CPU stack upon entry 
to the service 
routine 
does not necessarily 
point to 
the failing instruction 
nor to the following 
instruction. 


The Intel287 XL MCP saves the address of the float- 
ing-point 
instruction 
that caused 
the exception 
and 
the address of any memory operand 
required by that 
instruction. 


After 
FNINIT 
or RESET, 
the control 
word 
contains 
the value 
037FH 
(all exceptions 
masked, 
precision 
control 
64 bits, rounding 
to nearest) the same values 
as in an 80287 
after 
RESET. 
For compatibility 
with 
the 
8087 
and 80287, 
the 
bit that 
used to indicate 
infinity 
control 
(bit 12) is set to zero; 
however, 
reo 
gardless 
of its setting, 
infinity is treated 
in the affine 


sense. 
After 
FNINIT 
or RESET, 
the status 
word 
is 
initialized 
as follows: 


• 
All exceptions 
are set to zero. 


• 
Stack TOP is zero, so that after the first push the 
stack top will be register 
seven (111 B). 


• 
The condition 
code C3-CO is undefined. 


• 
The B-bit is zero. 


The 
tag word 
contains 
FFFFH 
(all stack 
locations 
are empty). 


80286/lnte1287 
XL 
MCP 
initialization 
software 
should 
execute 
an FNINIT 
instruction 
(Le an FINIT 
without 
a preceding 
WAIT) after RESET. The FNINIT 
is not strictly 
required 
for either 80287, 
80C287A 
or 
Intel287 XL MCP software, 
but Intel recommends 
its 
use to help ensure 
upward 
compatibility 
with other 
processors. 


Tl1is section 
summarizes 
the 
differences 
between 
the Intel287 
XL MCP and the 80287. 
Any migration 
from the 8087 directly 
to the Intel287 
XL MCP must 
also take into account 
the differences 
between 
the 
8087 
and 
the 
80287 
as 
listed 
in the 
80286 
and 
80287 
Programmer's 
Reference 
Manual. 
There 
are 
no compatibility 
differences 
between 
the Intel287 XL 
MCP and 80C287 A except 
the pinout configuration. 


• 


Many changes have been designed into the Intel287 
XL MCP to directly support the IEEE standard in 
hardware. These changes result in increased per- 
formance by eliminating the need for software that 
supports the standard. 


The Intel287 XL MCP supports only affine closure 
for infinity arithmetic, not projective closure. 


Operands for FSCALE and FPATAN are no longer 
restricted in range (except for ± 00); F2XM1 and 
FPTAN accept a wider range of operands. 


Software cannot change entries of the tag word to 
values (other than empty) that differ from actual reg- 
ister contents. 


After reset, FINIT, and incomplete FPREM, the In- 
tel287 XL MCP resets to zero the condition code bits 
C3-CO of the status word. 


In conformance with the IEEE standard, the Intel287 
XL MCP does not support the special data formats 
pseudozero, pseudo-N'aN, pseudoinfinity, and un.' 
normal. 


The denormal exception has a different purpose on 
the Intel287 XL MCP. A system that uses the denor- 
mal-exception handler solely to normalize the denor- 
mal operands, would better mask the denormal ex- 
ception on the Intel287 XL MCP. The Intel287 XL 
MCP automatically normalizes denormal operands 
when the denormal exception is masked. 


A number of differences exist due to changes in the 
IEEE standard and to functional improvements to 
the architecture of the Intel287 XL MCP: 
1. When the overflow or underflow exception is 
masked, the Intel287 XL MCP differs from the 
80287 in rounding when overflow or underflow 
occurs. The Intel287 XL MCP produces results 
that are consistent with the rounding mode. 


2. When the underflow exception is masked, the 
Intel287 XL MCP sets its underflow flag only if 
there is also a loss of accuracy during denormal- 
ization. 
3. Fewer invalid-operation exceptions due to de- 
normal 
operands, 
because 
the 
instructions 
FSQRT, FDIV, FPREM, and conversions to BCD 
or to integer normalize denormal operands be- 
fore proceeding. 


4. The FSQRT, FBSTP, and FPREM instructions 
may cause underflow, because they support de- 
normal operands. 
5. The denormal exception can occur during the 
transcendental instructions and the FXTRACT 
instruction. 
6. The denormal exception no longer takes prece- 
dence over all other exceptions. 


7. When the denormal exception is masked, the 
Intel287 XL MCP automatically normalizes de- 
normal operands. The 8087/80287 
performs 
unnormal arithmetic, which might produce an 
unnormal result. 


8. When the operand is zero, the FXTRACT in- 
struction reports a zero-divide exception and 
leaves - 
00 in ST(1). 


9. The status word has a new bit (SF) that signals 
when invalid-operation exceptions are due to 
stack underflow or overflow. 
10. FLD extended 
precision 
no longer reports de- 
normal exceptions, because the instruction is 
not numeric. 
11. FLD single/double 
precision 
when the operand 
is denormal converts the number to extended 
precision and signals the denormalized operand 
exception. When loading a signalling NaN, FLD 
single/double 
precision 
signals an invalid-oper- 
and exception. 
12. The Intel287 XL MCP only generates quiet 
NaNs (as on the 80287); however, the Intel287 
XL MCP distinguishes between quiet NaNs and 
signaling NaNs. Signaling NaNs trigger excep- 
tions when they are used as operands; quiet 
NaNs do not (except for FCOM, FIST, and 
FBSTP which also raise IE for quiet NaNs). 


13. When stack overflow occurs during FPTAN and 
overflow is masked, both ST(O)and ST(1) con- 
tain quiet NaNs. The 8087/80287 
leaves the 
original operand in ST(1) intact. 


14. When the scaling factor is ± 00, the FSCALE 
(ST(O), ST(1» instruction behaves as follows 
(ST(O)and ST(1) contain the scaled and scaling 
operands respectively): 


• FSCALE(O,00) generates the invalid opera- 


tion exception. 
• FSCALE(finite, - 00) generates zero with the 
same sign as the scaled operand. 


• FSCALE(finite, + 00) generates - 
00 with the 
same sign as the scaled operand. 


The 8087/80287 
returns zero in the first case 
and raises the invalid-operation exception in the 
other cases. 


15. The Intel287 XL MCP returns signed infinity/ 
zero as the unmasked response to massive 
overflow/underflow. The 8087 and 80287 sup- 
port a limited range for the scaling factor; within 
this range either massive overflow/underflow 
do not occur or undefined results are produced. 


In the following description of hardware interface, 
the II symbol at the end of a signal name indicates 
that the active or asserted state occurs when the 
signal is at a low voltage. When no II is present after 
the signal name, the signal is asserted when at the 
high voltage level. 


3.1 
Signal Description 


In the following signal descriptions, the Intel287 XL 
MCP pins are grouped by function as follows: 
1. Execution control-CLK, 
CKM, RESET 
2. MCP handshake-PEREQ, 
PEACKII, BUSYII, 


ERRORII 
3. Bus interface pins-D1S-DQ, NPWRII, NPRDII 
4. Chip/Port Select-NPS1 
II, NPS2, CMDO,CMD1 


5. Power supplies-Vcc, 
Vss 


Table 3.1 lists every pin by its identifier, gives a brief 
description of its function, and lists some of its char- 
acteristics. Figure 3.1 shows the locations of pins on 
the Ceramic package, while Figure 3.2 shows the 
locations of pins on the PLCC package. Table 3.2 _ 
helps to locate pin identifiers in Figures 3.1 and 3.2. _ 


Pin Name 
Function 
Active 
Input! 
State 
Output 


CLK 
CLocK 
I 
CKM 
ClocKing Mode 
I 
RESET 
System reset 
High 
I 


PEREQ 
Processor Extension REQuest 
High 
0 
PEACKII 
Processor Extension ACKnowledge 
Low 
I 
BUSYII 
Busy status 
Low 
0 
ERRORII 
Error status 
Low 
0 


D15-DO 
Data pins 
High 
I/O 
NPRDII 
Numeric Processor ReaD 
Low 
I 
NPWRII 
Numeric Processor WRite 
Low 
I 


NPS111 
MCPselect 111 
Low 
I 
NPS2 
MCPselect 112 
High 
I 
CMDO 
CoMmanDO 
High 
I 
CMD1 
CoMmanD 1 
High 
I 


Vcc 
System power 
I 
Vss 
System ground 
I 
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Pin 
Ceramic 
PLCC 
Name 
Package 
Package 


BUSY# 
25 
28 
CKM 
39 
44 
ClK 
32 
36 
CMOO 
29 
32 
CM01 
31 
35 
Do 
23 
26 
01 
22 
25 
02 
21 
24 
03 
20 
22 
04 
19 
21 
05 
18 
20 
06 
17 
19 
07 
16 
18 
De 
15 
17 
09 
14 
16 
010 
12 
14 
011 
11 
13 
012 
8 
9 
013 
7 
8 
014 
6 
7 
015 
5 
5 
ERROR# 
26 
29 
No Connect 
1,2,3,4,13,37,38,40 
6,11,23,33,40 
NPRO# 
27 
30 
NPS1# 
34 
38 
NPS2 
33 
37 
NPWR# 
28 
31 
PEACK# 
36 
41 
PEREO 
24 
27 
RESET 
35 
39 
Vcc 
9 
1,3,10,15,42 
Vss 
10,30 
2,4,12,34,43 


This input provides the basic timing for internal oper- 
ation. This pin does not require MOS-Ievel input; it 
will operate at either TTl or MOS levels up to the 
maximum allowed frequency. A minimum frequency 
must be provided to keep the internal logic properly 
functioning. Depending on the signal on CKM, the 
signal on ClK can be divided by two to produce the 
internal clock signal. 


3.1.2 CLOCKING MODE (CKM) 


This pin is a strapping option. When it is strapped to 
Vcc (HIGH), the ClK 
input is used directly; when 
strapped to Vss (lOW), the ClK input is divided by 


two to produce the internal clock signal. During the 
RESET sequence, this input must be stable at least 
four internal clock cycles (i.e. ClK clocks when CKM 
is HIGH; 2 x ClK clocks when CKM is lOW) before 
RESET goes lOW. 


3.1.3 SYSTEM RESET (RESET) 


A lOW to HIGH transition on this pin causes the 
Intel287 Xl MCPto terminate its present activity and 
to enter a dormant state. RESET must remain active 
(HIGH) for at least four ClK periods (i.e., the RESET 
signal presented to the Intel287 Xl MCP must be at 
least four Intel287 Xl MCP clocks long, regardless 
of the frequency of the CPU). Note that the Intel287 
Xl MCP is active internally for 25 clock cycles after 
the termination of the RESET signal (the HIGH to • 
lOW transition of RESET); therefore, the first in- 
struction should not be written to the Intel287 Xl 
MCP until 25 clocks after the falling edge of RESET. 
Table 3.3 shows the status of the output pins during 
the reset sequence. After a reset, all output pins re- 
turn to their inactive states. 


Output Pin Name 
Value During Reset 


BUSY# 
HIGH 


ERROR# 
HIGH 


PEREO 
lOW 


015-00 
Tristate OFF 


3.1.4 PROCESSOR EXTENSION REQUEST 
(PEREQ) 


When active, this pin signals to the CPU that the 
Intel287 Xl MCP is ready for data transfer to/from 
its data FIFO. With 80286 and 80C286 CPUs, 
PEREO can 
be 
deactivated 
after 
assertion 
of 
PEACK#-.These CPUs rely on the MCP to deassert 
PEREO when all operands have been transfered. 
When there are more than five data transfers, 
PEREO is deactiviated after the first three transfers 
and subsequently after every four transfers. This sig- 
nal always goes inactive before BUSY# goes inac- 
tive. 


3.1.5 BUSY STATUS (BUSY#-) 


When active, this pin signals to the CPU that the 
Intel287 Xl MCP is currently executing an instruc- 
tion. It should be connected to the CPU's BUSY# 
pin. During the RESET sequence this pin is HIGH. 


This pin reflects the ES bit of the status register. 
When active, it indicates that an unmasked excep- 
tion has occurred. This signal can be changed to 
inactive state only by the following instructions (with- 
out 
a 
preceding 
WAIT): 
FNINIT, 
FNCLEX, 
FNSTENV, 
FNSAVE, 
FLDCW, 
FLDENV, 
and 
FRSTOR. This pin should be connected to the ER- 
ROR# pin of the CPU. ERROR# can change state 
only when BUSY# is active. 


3.1.7 PROCESSOR EXTENSION 
ACKNOWLEDGE (PEACK#) 


During execution of escape instructions, an 80286 or 
80C286 CPU asserts PEACK# to acknowledge that 
the request signal (PEREQ) has been recognized 
and that data transfer is in progress. The 80286/ 
80C286 also drives this signal HIGH during RESET. 


This input may be asynchronous with respect to the 
Intel287 XL MCP clock except during a RESET se- 
quence, when it must satisfy setup and hold require- 
ments relative to RESET. 


These bidirectional pins are used to transfer data 
and opcodes between the CPU and Intel287 XL 
MCP. They are normally connected directly to the 
corresponding CPU data pins. Other buffers/drivers 
driving the local data bus must be disabled when the 
CPU reads from the MCP. HIGH state indicates a 
value of one. Do is the least significant data bit. 


3.1.9 NUMERIC PROCESSOR WRITE (NPWR#) 


A signal on this pin enables transfers of data from 
the CPU to the MCP. This input is valid only when 
NPS1# and NPS2 are both active. 


3.1.10 NUMERIC PROCESSOR READ (NPRD#) 


A signal on this pin enables transfers of data from 
the MCP to the CPU. This input is valid only when 
NPS1# and NPS2 are both active. 


3.1.11 NUMERIC PROCESSOR SELECTS 
(NPSH 
and NPS2) 


Concurrent assertion of these signals indicates that 
the CPU is performing an escape instruction and en- 
ables the Intel287 XL MCP to execute that instruc- 
tion. No data transfer involving the Intel287 XL MCP 
occurs unless the device is selected by these lines. 


3.1.12 COMMAND SELECTS (CMDO AND 
CMD1) 


These pins along with the select pins allow the CPU 
to direct the operation of the Intel287 XL MCP. 


3.1.13 SYSTEM POWER (Vcc) 


System power provides the + 5V± 10% DC supply 
input. All Vcc pins should be tied together on the 
circuit board and local decoupling capacitors should 
be used between Vcc and Vss. 


3.1.14 SYSTEM GROUND (Vss) 


All Vss pins should be tied together on the circuit 
board and local decoupling capacitors should be 
used between Vcc and Vss. 


As shown by the block diagram on the front page, 
the Intel287 XL MCP is internally divided into three 
sections: the bus control logic (BCL), the data inter- 
face and control unit, and the floating point unit 
(FPU).The FPU (with the support of the control unit 
which contains the sequencer and other support 
units) executes all numerics instructions. The data 
interface and control unit is responsible for the data 
flow to and from the FPU and the control registers, 
for receiving the instructions, decoding them, and 
sequencing the microinstructions, and for handling 
some of the administrative instructions. The BCL is 
responsible for CPU bus tracking and interface. 


The BCL communicates solely with the CPU using 
I/O bus cycles. The BCL appears to the CPU as a 
special peripheral device. It is special in two reo 
spects: the CPU initiates I/O automatically when it 
encounters ESC instructions, and the CPU uses re- 
served I/O addresses to communicate with the BCL. 
The BCL does not communicate directly with memo- 
ry. The CPU performs all memory access, transfer- 
ring input operands from memory to the Intel287 XL 
MCP and transferring outputs from the Intel287 XL 
MCP to memory. A dedicated communication proto- 
col makes possible high-speed transfer of opcodes 
and operands between the CPU and Intel287 XL 
MCP. 


3.2.2 DATA INTERFACE AND CONTROL UNIT 


The data interface and control unit latches the data 
and, subject to BCL control, directs the data to the 
FIFO or the instruction decoder. The instruction de- 
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NPSU 
NPS2 
CMDO 
CMD1 
NPRD# 
NPWR# 
Bus Cycle Type 


x 
0 
x 
x 
x 
x 
Intel287 XL MCP not selected 
1 
x 
x 
x 
x 
x 
Intel287 XL MCP not selected 
0 
1 
0 
0 
1 
0 
Opcode write to Intel287 XL MCP 
0 
1 
0 
0 
0 
1 
CW or SW read from Intel287 XL MCP 
0 
1 
1 
0 
0 
1 
Read data from Intel287 XL MCP 
0 
1 
1 
0 
1 
0 
Write data to Intel287 XL MCP 
0 
1 
0 
1 
1 
0 
Write exception pointers 
0 
1 
0 
1 
0 
1 
Reserved 
0 
1 
1 
1 
0 
1 . 
Reserved 
0 
1 
1 
1 
1 
0 
Reserved 


coder decodes the ESC instructions sent to it by the 
CPU and generates controls that direct the data flow 
in the FIFO. It also triggers the microinstruction se- 
quencer that controls execution of each instruction. 
If the ESC instruction is FINIT, FCLEX, FSTSW, 
FSTSW AX, FSTCW, FSETPM, or FRSTPM, the 
control executes it independent Iy of the FPU and 
the sequencer. The data interface and control unit is 
the one that generates the BUSY#, PEREa, and 
ERROR# signals that synchronize Intel287 XL ac- 
tivities with the CPU. 


The FPU executes all instructions that involve the 
register stack, including arithmetic, logical, transcen- 
dental, constant, and data transfer instructions. The 
data path in the FPU is 84 bits wide (68 significant 
bits, 15 exponent bits, and a sign bit) which allows 
internal operand transfers to be performed at very 
high speeds. 


3.3 
Bus Cycles 


The pins NPS1#, NPS2, CMDO, CMD1, NPRD#, 
and NPWR# identify bus cycles for the MCP. Table 
3.4 defines the types of Intel287 XL MCP bus cycles. 


3.3.1 
Intel287™ 
XL MCP ADDRESSING 


The NPS1#, NPS2, CMDO,and CMD1 signals allow 
the MCP to identify which bus cycles are intended 
for the MCP.The MCP responds to 1/0 cycles when 
the 1/0 address is OOF8H,OOFAH,OOFCH.The cor- 
respondence between 1/0 addresses and control 
signals is defined by Table 3.5. To guarantee correct 
operation of the MCP, programs must not perform 
any 1/0 operations to these reserved port address- 
es. 


110 Address 
Intel287 
XL MCP select 
and 


(Hexadecimal) 
Command 
Inputs 


NPS2 
NPSU 
CMD1 
CMDO 


OOF8 
1 
0 
0 
0 
OOFA 
1 
0 
0 
1 
OOFC 
1 
0 
1 
0 


3.3.2 
CPU/MCP 
SYNCHRONIZATION 


The pins BUSY#, PEREa, and ERROR# are used 
for various aspects of synchronization between the 
CPU and the MCP. 


BUSY# is used to synchronize instruction transfer 
from the CPU to the Intel287 XL MCP. When the 
Intel287 XL MCP recognizes an ESC instruction, it 
asserts BUSY# . For most ESC instructions, the 
CPU waits for the Intel287 XL MCP to deassert 
BUSY# before sending the new opcode. 


The MCP uses the PEREa pin of the CPU to signal 
that the MCP is ready for data transfer to or from its 
data FIFO. The MCP does not directly access mem- 
ory; rather, the CPU provides memory access serv- 
ices for the MCP.Thus, memory access on behalf of 
the MCP always obeys the rules applicable to the 
mode of the CPU, whether the CPU be in real-ad- 
dress mode or protected mode. 


Once the CPU initiates an Intel287 XL MCP instruc- 
tion that has operands, the CPU waits for PEREa 
signals that indicate when the Intel287 XL MCP is 
ready for operand transfer. Once all operands have 


• 


been transferred (or if the instruction has no oper- 
ands) the CPU continues program execution while 
the Intel287 XL MCP executes the ESC instruction. 


In 8086/8087 systems, WAIT instructions may be 
required to achieve synchronization of both com- 
mands and operands. In Intel287 XL MCP systems, 
however, WAIT instructions are required only for op- 
erand synchronization; namely, after MCP stores to 
memory (except FSTSW and FSTCW) or load from 
memory. (In 80286/1ntel287 XL MCP systems, WAIT 
is required before FLDENV and FRSTOR; with other 
CPU's, WAIT is not required in these cases.) Used 
this way, WAIT ensures that the value has already 
been written or read by the MCP before the CPU 
reads or changes the value. 


Once it has started to execute a numerics instruction 
and has transferred the operands from the CPU, the 
Intel287 XL MCP can process the instruction in par- 
allel with and independent of the host CPU. When 
the MCP detects an exception, it asserts the ER- 
ROR# signal, which causes a CPU interrupt. 


3.4 
Bus Operation 


With respect to bus interface, the Intel287 XL MCP 
is fully asynchronous with the CPU, even when it 
operates from the same clock source as the CPU. 
The CPU initiates a bus cycle for the MCPby activat- 
ing both NPS1# and NPS2, the MCP select signals. 
During the CLK period in which NPS1# and NPS2 
are activated, the Intel287 XL MCP also examines 
the NPRD# and NPWR# input signals to determine 
whether the cycle is a read or a write cycle and ex- 
amines the CMDO and CMD1 inputs to determine 
whether an opcode, operand, or control/status reg- 
ister transfer is to occur. The Intel287 XL MCP acti- 
vates its BUSY# output some time after the leading 
edge of the NPRD# or NPWR# signal. Input and 
output data are referenced to the trailing edges of 
the NPRD# and NPWR# signals. 


The Intel287 XL MCP activates the PEREa signal 
when it is ready for data transfer. In 80286/80C286 
systems, the CPU activates PEACK# when no more 
data transfers are required, which causes the In- 
tel287 XL MCP to deactivate PEREa, halting the 
data transfer. 
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3.5 
80286/1ntel287™ 
XL MCP, 
80C286/lnte1287™ 
XL MCP 
Interface 
and Socket Compatibilty 


The ceramic Intel287 XL MCP device can fit into ex- 
isting 80287 sockets since the pin configuration is 
identical. 


The CERDIP 80C287A utilizes a different pin config- 
uration with extra power and ground pins. However, 
the Intel287 XL MCP operates in 80C287A sockets 
also. The extra power and ground pins are not con- 
nected inside the Intel287 XL MCP and not used. 
Refer to 80C287A data sheet (Order #240347). 


Note that when the clock selection is CKM = 0, the 
Intel287 XL MCP divides the clock input by two, not 
by three as on the 80287. In this case, the Intel287 
XL MCP will operate faster. 


The interface between the Intel287 XL MCP and the 
80286/80C286 CPU (illustrated in Figure 3.3) has 
these characteristics: 
• The Intel287 XL MCP resides on the local data 
bus of the CPU. 


• The CPU and Intel287 XL MCP share the same 
RESET signals. They may also share the same 
clock input; however, for greatest performance, 
an external oscillator may be needed. 


• The corresponding BUSY#, ERROR#, PEREa, 


and PEACK# pins are connected together. 


• NPS2 is tied HIGH permanently, while NPS1#, 
CMD1, and CMDO come from the latched ad- 
dress pins. The 80286 generates I/O addresses 
00F8H, OOFAH,and OOFCHduring MCP bus cy- 
cles. Address OOFEHis reserved. 


• The Intel287 XL MCP NPRD# and NPWR# in- 


puts are connected to I/O read and write signals 
from local bus control logic. 


ADDRESS 
.. 
R£SET 
{ 


READY 
If 
A 
A 
A 
A 
A 


TA 


A 
A 
A 
A 
A ~p 


A 
.. 


ClK 
5 .. 3 7 
6 , , , , , , 9 a 
, 


82C2U 
5'_ ~ 
5 •• 3 
2 , 0 
so- t-- 
~ 
'-I 
'C 
) 


A15-AO 


RESET 
II 


READYIf 
READYIf 
6OC2ul 


ClK 
CLK 
80288 
l 


5'- 
5'_ 
015-00 - 
so- 
so- 
'If 
Wi'" 
w/'o- 
- 
ERRORIf 
PEREQ - 
-- 
BUSYIf 
PEACKIf 
C 
• 
A 
G2A_ 


COD/INU. 
74AS138 


12C288 
I 
G2BIf 
G, 
.7 
I 


DEN 
I 


DT/R- 
I D 
D 
D 


ALE 
I :LK 
'O'OC- 
IORC_ 
Q 
Q 


RESET 
PEACKIf 


~ 


PEREO - 


Intel2l7TW 
XL WCP 
-'---- 
ot- 


D1R 
•• 


D15-DO 
TRANS- 
DATA 
CEIYER 


NPS2 
T 
- 
NPRD. 


NPWR_ 
NPS1- 
- 
ERROf!_ 
CW01 
"- 
'--- 
BUSYIf 
CWDO 


CLK 
CKW 
I, 
CLOCK 
I 
,, 


GENERATOR I 
-b 


•• 


4.1 
Absolute 
Maximum Ratings 


NOTE 
Stresses 
above 
those 
listed 
may cause 
permanent 
damage 
to the device. 
This 
is a stress 
rating 
only 
and functional 
operation 
of the device 
at these 
or 
any other 
conditions 
above 
those 
indicated 
in the 
operational 
sections 
of this specification 
is not im- 
plied. 
Exposure 
to absolute 
maximum 
rating 
condi- 
tions 
for 
extended 
periods 
may affect 
device 
reli- 
ability. 


Case temperature 
TC under bias 
O·C to 85·C 


Storage temperature 
- 65·C to + 150·C 


Voltage 
on any pin 
with respect to ground 
-0.5 
to Vcc+0.5V 


Power dissipation 
1.5 Watt 


The 
typical 
relationship 
between 
Icc 
and 
the 
fre- 


quency 
of operation 
F is as follows: 


When the frequency 
is reduced 
below the minimum 
operating 
frequency 
specified 
in the AC Characteris- 


tics table, the internal 
states of the Intel287 
XL MCP 
may become 
indeterminate. 
The 
Intel287 
XL MCP 
clock 
cannot 
be stopped; 
otherwise, 
Ice would 
in- 
crease significantly 
beyond what the equation 
above 
indicates. 
Power dissipation 
decreases 
with frequen- 


cy for frequencies 
~ 4 MHz. 


NOTICE: This is a production data sheet. The specifi- 
cations are subject to change without notice. 


• WARNING: Stressing the device beyond the "Absolute 
Maximum 
Ratings" 
may 
cause 
permanent 
damage. 


These are stress ratings only. Operation 
beyond 
the 
"Operating 
Conditions" 
is not recommended 
and ex- 


tended 
exposure 
beyond 
the 
"Operating 
Conditions" 


may affect device reliability. 


Symbol 
Parameter 
Mln 
Max 
Units 
Test 
Conditions 


Vil 
Input LOW Voltage 
-0.5 
+0.8 
V 


VIH 
Input HIGH Voltage 
2.0 
Vce+0.5 
V 


VICl 
Clock Input LOW Voltage 
-0.5 
+0.8 
V 


VICH 
Clock Input HIGH Voltage 
2.0 
Vcc+0.5 
V 


VOL 
Output LOW Voltage 
0.45 
V 
IOL = 3.0 mA 
VOH 
Output HIGH Voltage 
2.4 
V 
IOH = -0.4 
mA 
Icc 
Power Supply Current 
135 
mA 
Note 1 


III 
Input Leakage Current 
±10 
IJoA 
Note 2 


ILO 
I/O Leakage Current 
±10 
IJoA 
Note 3 


CIN 
Input Capacitance 
10 
pF 
Note 4 
Co 
I/O or Output Capacitance 
12 
pF 
Note 4 


CClK 
Clock Capacitance 
20 
pF 
Note 4 


NOTES: 
1. 12.5 MHz operation, output load = 100 pF 
2.0V ,;; VIN ,;; Vcc 
3.0.45V ,;; VOUT,;; Vcc -0.45 
4. Fe = 1MHz 


Table 4.2. Timing Requirements 
Te = 0 to 85 deg C, Vee = 5V ± 10% 
All timings are measured 
at 1.5V unless otherwise 
specified 


12.5 MHz 
Test 
Symbol 
Parameter 
Mln 
Max 
Conditions 
(ns) 
(ns) 


Tdvwh (t6) 
Data setup to NPWR IF 
43 
Twhdx (t7) 
Data hold from NPWR IF 
14 


Trlrh (t8) 
NPRDIF active time 
59 
Twlwh (t9) 
NPWR IF active time 
59 
- 


Tavwl (t10) 
Command 
valid to NPWR IF 
0 
Tavrl (t11) 
Command 
valid to NPRDIF 
0 


Tmhrl (t12) 
Min delay from PEREa 
active 
40 
to NPRDIF active 


Tklkh (t33) 
PEACKIF active time 
55 
Tkhkl (t34) 
PEACK IF inactive time 
60 
Tkhch (t35) 
PEACK IF inactive to 
30 
NPRDIF, NPWRIF inactive 
Tklcl (t36) 
PEACK IF active setup to 
30 
NPRDIF, NPWRIF active 


Tchkl (t37) 
NPRDIF, NPWR IF inactive 
-30 
to PEACK IF active 


Twhax (t18) 
Command 
hold from NPWR IF 
12 
Trhax (t19) 
Command 
hold from NPRDIF 
12 


Tivcl (t20) 
NPRDIF, NPWR IF, RESET to 
46 
Note 1 
ClK 
setup time 
Tclih (t21) 
NPRDIF, NPWR IF, RESET from 
26 
Note 1 


ClK 
hold time 
Tpaksu 
(t38) 
PEACK IF setup to RESET 
80 
falling edge 
Tpakhd 
(t39) 
PEACK IF hold from RESET 
80 
falling edge 
Trscl (t24) 
RESET to ClK 
setup 
21 
Note 1 
Tclrs (t25) 
RESET from ClK 
hold 
14 
Note 1 


Tcmdi (t26) 
Command 
inactive time 
Write to write 
69 
Read to read 
69 
. 


Read to write 
69 
Write to read 
69 


NOTE: 
1. This is an asynchronous 
input. This specification 
is given for testing 
purposes 
only, to assure 
recognition 
at a specific elK 
edge 
(not tested). 


• 
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12.5 MHz 
Test 
Symbol 
Parameter 
Mln 
Max 
Conditions 
(ns) 
(ns) 


Trhqz (t27) 
NPRD# inactive to data float" 
18 
Note 2 
Trlqv (t28) 
NPRD# active to data valid 
50 
Note 3 


Tilbh (t29) 
ERROR# active to BUSY# inactive 
104 
Note 4 


Twlbv(t30) 
NPWR# active to BUSY# active 
80 
Note 4 


Tklml (t31) 
NPRD#, NPWR# or PEACK# 
80 
Note 5 
active to PEREa inactive 


Trhqh (t32) 
Data hold from NPRD# inactive 
2 
Note 3 


NOTES: 
• The data float delay is not tested. 
2. The float condition occurs when the measured output current is less than IOlon 015-00. 
3.015-00 
loading: Cl = 100pf. 


4. BUSY", loading: CL = 100pf. 
5. On last data transfer of numeric instruction. 


12.5 MHz 
Test 
Symbol 
Parameter 
Mln 
Max 
Conditions 
(ns) 
(ns) 


Tclcl 
(t1a) 
ClKperiod 
CKM=1 
80 
250 
(t1b) 
CKM=O 
40 
125 
Tclch (t2a) 
ClK low time 
CKM=1 
35 
(t2b) 
CKM=O 
9 
Note 6,10 
Tchcl (t3a) 
ClK high time 
CKM=1 
35 
Vcc= 
±10% 
CKM=1 
28 
Vcc = ±5%, Note 11 
(t3b) 
CKM=O 
13 
Note 7,10 
Tch1ch2 (t4) 
10 
Note 8 
Tch2ch1 (t5) 
10 
Note 9 


NOTES: 
6. At 0.8Y. 
7. At 2.0Y. 
8. CKM= 1: 3.5Y to 1.0Y 
9. CKM= 1: 1.0Y to 3.5Y 
10. Proper operation can also be achieved by meeting the CPU specification 
11. Provides compatibility for sockets designed for Intel 80287-6/8/10 MHz Math CoProcessors. 
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RESET, NPWR#, 
NPRD# 
inputs are asynchronous 


to ClK. Timing 
requirements 
in Figures 4.7 through 


4.10 are given for testing 
purposes 
only, to assure 


recognition 
at a specific ClK edge. 


• 


Intel287™ XL 
intel~ 


cwoo. CWOI 


NPS1.,NPS2 


NPRO- 


1 


OATA 
TRANSfER 
fROW Inl.1287T 
•• XL WCP 


00-0,5 


NPWR_ 


OATA 
TRANSfER 


00-0,5 
TO Inl.1287T 
•• XL WCP 


CWOO,CWOl ==1 


NPS11,NPS2 


NPRO" 
NPWR, 
--l 


PEREOr'" 


PEACK, ~ 
..... 
,f- 
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'''Jzf_t20 


NOTE: 
RESET 
must meet timing 
shown 
to guarantee 
known 
phase 
of internal 
divide by 2 circuit. 
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5.0 
Intel287TM XL MCP EXTENSIONS 
TO THE CPU'S INSTRUCTION 
SET 


Instructions for the Intel287 XL MCP assume one of 
the five forms shown in Table 5-1. In all cases, in- 
structions are at least two bytes long and begin with 
the bit pattern 11011B, which identifies the ESCAPE 
class of instruction. Instructions that refer to memory 
operands specify addresses using the CPU's ad- 
dressing modes. 


MOD (Mode field) and RIM (Register/Memory spec- 
ifier) have the same interpretation as the corre- 
sponding fields of CPU instructions (refer to Pro- 
grammer's Reference Manual for the CPU). The 
DISP (displacement) is optionally present in instruc- 


tions that have MOD and RIM fields. Its presence 
depends on the values of MOD and RIM, as for in- 
structions of the CPU. 


The instruction summaries that follow assume that 
the instruction has been prefetched, decoded, and is 
ready for execution; that bus cycles do not require 
wait states; that there are no local bus HOLD re- 
quests delaying processor access to the bus; and 
that no exceptions are detected during instruction 
execution. Timings are given in internal Intel287 XL 
MCP clocks and include the time for opcode and 
data transfer between the CPU and the MCP. If the 
instruction has MOD and RIM fields that call for 
both base and index registers, add one clock. 


Instruction 
Optional 


First Byte 
Second 
Byte 
Field 


11011 
OPA 
1 
MOD 
1 
I 
OPB 
RIM 
DISP 


11011 
MF 
OPA 
MOD 
OPB' 
RIM 
DISP 


11011 
d 
P 
OPA 
1 
1 
OPB' 
ST(i) 


11011 
0 
0 
1 
1 
1 
1 1 
OP 


11011 
0 
1 
1 
1 
1 
1 
I 
OP 


OP = Instructionopcode, possiblysplit into two fields OPA and OPB 


MF = MemoryFormat 
d = Destination 
00-32-bit real 
O-Destination is ST(O) 
01-32-bit integer 
1-Destination is ST(i) 
10- 64-bit real 
11-16-bit integer 
R XOR d = O-Destination(Op) Source 
R XOR d = 1-Source(Op) Destination 


'In FSUBand FDIV,the low-orderbit of the OPB is the R (reversed)bit 


P = Pop 
ST(i) = Registerstack element i 
O-Do not pop stack 
000 = Stack top 
1-Pop stack after operation 
001 = Second stack element 


ESe = 11011 
• 


• 
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I 
Encoding 
Clock Count Range 
Instruction 
Byte 
Byte 
Optional 
32-Blt I 
32-Blt I 
64-BII I 
16-Blt 
0 
1 
Bytes 2-3 
Resl 
Integer 
Real 
Integer 
DATA TRANSFER 
FLD ~ LoadS 
Integer/real memory to ST(O) 
I 
ESCMFI 
I MOD 000 RIM I 
SIB/DISP 
36 
61-68 
45 
61-65 


Long inleger memory 1oST(O) 
I 
ESClll 
I MOD 101 RIM I 
SIB/DISP 
76-87 


Extended real memory 1oST(O) 
I 
ESCOll 
I MOD 101 RIM I 
SIB/DISP 
48 


BCD memory 1oST(O) 
I 
ESClll 
I MOD 100 RIM I 
SIB/DISP 
270-279 


ST(i) 1oST(O) 
I 
ESCOOI 
I 
11000 ST(i) 
I 
21 


FST ~ Siore 


ST(O)1oinlegerlreal memory 
I 
ESCMFI 
I MOD010RIM 
I 
SIB/DISP 
51 
86-100 
56 
88-101 


ST(O)1oST(i) 
I 
ESC10l 
I 
11010ST(i) 
I 
18 


FSTP ~ Siore and Pop 


ST(O)to integer/real memory 
ESCMFI 
MODOll 
RIM 
SIB/DISP 
51 
86-100 
56 
88-101 


ST(O)to long integer memory 
ESClll 
MaDIll 
RIM 
SIB/DISP 
91-108 


ST(O)to extended real 
ESCOll 
MaDIll 
RIM 
SIB/DISP 
61 


ST(O)to BCD memory 
ESClll 
MODll0RIM 
SIB/DISP 
520-542 


ST(O)to ST(i) 
I 
ESC10l 
I 
11001 ST(i) 
I 
19 


FXCH = Exchange 


ST(i) and ST(O) 
I 
Ese 001 
I 
11001 ST(i) 
I 
25 


COMPARISON 


FCOM ~ Compare 


Integer/real memory to ST(O) 
I 
ESC MFO 
I MOD 010 RIM I 
SIB/DISP 
42 
72-79 
51 
71-75 


ST(i) to ST(O) 
I 
Ese 000 
I 
11010ST(i) 
I 
31 


FCOMP = Compare and pop 


Integer/real memory to ST 
ESC MFO 
I MOD 011 RIM I 
SIB/DISP 
42 
72-79 
51 
71-77 


ST(i) to ST(O) 
I 
ESCooo 
I 
11011 ST(i) I 
33 


FCOMPP = Compare and pop twice 


ST(I) to ST(O) 
I 
ESC110 
I 
11011001 
I 
33 


FTST ~ Test ST(O) 
I 
ESCOOI 
I 
11100100 
I 
35 


FUCOM - 
Unordered compare 
I 
ESC10l 
I 
111ooST~) 
I 
• 
31 


FUCOMP = Unordered compare 


and pop 
I 
ESC10l 
I 
11101 ST~) I 
33 


FUCOMPP - 
Unordered compare 
and pop twice 
I 
ESC010 
I 
11101001 
I 
33 


FXAM = Examine ST(O) 
I 
ESCool 
I 
11100101 
I 
37-45 


CONSTANTS 


FLDZ ~ Load +0.0 into ST(O) 
I 
ESCOOI 
I 
11101110 
I 
27 


FLDI = Load + 1.0 into ST(O) 
I 
ESCOOI 
I 
11101000 
I 
31 


FLDPI = Load pi into ST(O) 
I 
ESCool 
I 
11101011 
I 
47 


FLDL2T = Load 1092(10)into ST(O) 
I 
ESC001 
I 
11101001 
I 
47 


NOTE: 
a. When 
loading 
single- 
or double-precision 
zero from 
memory, 
add 5 clocks. 
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CONSTANTS 
(Continued) 


FLOUE 
~ 
Load I092(e) into ST(O) 


FLOLG2 
= Load 10910(2) into ST(O) 


FLOLN2 
~ 
Load 109.(2) into ST(O) 


ARITHMETIC 


FADD 
= Add 


Integer/real 
memory 
with ST(O) 


ST(i) and ST(O) 


FSUB = Subtract 


Integer/real 
memory 
with ST(O) 


ST(i) and ST(O) 


FMUL 
= Multiply 


Integer/real 
memory 
with ST(O) 


STQ) and ST(O) 


FDIV = Divide 


Integer/real 
memory 
with ST(O) 


STQ) and ST(O) 


FSQRTI = Square 
root 


FSCALE 
= Scale 
ST(O) by ST(l) 


FPREM 
= Partial 
remainder 
of 
ST(O) -.- ST(l) 
fIPIIlUI1 - P8I1I8lremainder 


(IEEE) 


ESC001 


ESC001 


ESC001 


11101010 


11101100 


11101101 


SIB/DISP 


ESCdPO 
11oooST(i) 


SIB/DISP 


ESCdPO 
1110 R R/M 


SIB/DISP 


ESCdPO 
1100 1 R/M 


SIB/DISP 


ESCdPO 
1111 RR/M 


ESC001 
11111010 


ESC001 
11111101 


ESC001 
11111000 


FRNDINT 
= Round 
ST(O) 
to integer 


FXTRACT 
= Extract 
components 
ofST(O) 


FABS = Absolute 
value of ST(O) 


FCHS 
~ Change 
sign of ST(O) 


40-48 
73-78 
49-79 
71-85 


30-38b 


40-48 
73-98 
49-77 
71-83°• 


33-41d 


43-51 
77-88 
52-77 
76-87 


25-53' 


136-143' 


95h 


129-136 


ESC001 


ESC001 


ESC001 


11110100 


11100001 


1110סס oo 


74-93 


81-162 


75-83 


29 


31-37 


NOTES: 
b. Add 3 clocks 
to the range when 
d = 1. 
c. Add 1 clock 
to each 
range when 
R = 1. 
d. Add 3 clocks 
to the range 
when d = O. 
e. Typical = 48 (When 
d = 0, 42-50. typical = 45). 
f. Add 1 clock 
to the range when 
R = 1. 


g. 135-141 
when 
R = 1. 
h. Add 3 clocks 
to the range when 
d = 1. 
i. -0 
s; ST(O) S; + 00. 
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TRANSCENDENTAL 


FCOS 
- 
Coline 
of ST(Ol 


FPT ANk = Partial tangent 
of ST(O) 


FPATAN 
= Partial 
arctangent 


FSIN 
- 
Sine of STeOl 


F8lNCOS 
- 
Sine and C08lne of ST(Ol 


F2XM1' 
~ 
2ST(O) - 
1 


FYL2xm 
= ST(1) 
'log2(ST(0)) 


FYL2XPln 
= ST(1) 
'log2(ST(0) 
+ 1.0) 


PROCESSOR 
CONTROL 


FINIT 
~ 
Initialize 
MCP 


FSETPM 
= Set protected 
mode 


FRSTPM 
~ 
Reset 
protected 
mode 


FSTSW 
AX = Store 
status 
word 


FLDCW 
= Load control 
word 


FSTCW 
= Store 
control 
word 


FSTSW = Store status 
word 


FCLEX = Clear exceptions 


FSTENV 
= Store environment 


FLDENV 
~ 
Load environment 


FSAVE 
= Save state 


FRSTOR 
= Restore 
state 


FINCSTP 
= Increment 
stack 
pointer 


FDECSTP 
~ 
Decrement 
stack 
pointer 


FFREE 
~ 
Free ST(i) 


FNOP 
~ 
No operations 


Optional 
Clock 
Count 
Range 


Byte. 
2-3 


11111111 
130-nlll 


11110010 
198-5041 


11110011 
321-494 


11111110 
118-7181 


11111011 
1-81" 


11110000 
215-483 


11110001 
127-545 


11111001 
264-554 


11100011 
25 


11100100 
12 


11110100 
12 


11100000 
18 


SIB/DISP 
33 


SIB/DISP 
18 


SIB/DISP 
18 


11100010 
8 


SIB/DISP 
192-193 


SIB/DISP 
85 


SIB/DISP 
521-522 


SIB/DISP 
396 


11110111 
28 


11110110 
29 


11000 
ST(i) 
25 


11010000 
19 


ESCOOl 


ESCOOl 


ESCOOl 


ESCOOl 


ESCOOl 


ESCOOl 


ESCOOl 


ESCOOl 


ESCOll 


ESCOll 


ESCOll 


ESClll 


ESCOOl 


ESCOOl 


ESC10l 


ESCOOl 


NOTES: 
j. These 
timings 
hold for operands 
in the range Ixl < 11'/4. For operands 
not in this range, 
up to 78 additional 
clocks 
may be 
needed 
to reduce 
the operand. 


k.O 
,;; I ST(O) 
1 < 263. 


I. -1.0 
,;; ST(O) ,;; 1.0. 


m.O 
,;; ST(O) < 00, - 
00 < ST(l) 
< + 00. 
n. 0 ,;; IST(O)I < (2 - 
SQRT(2))/2, 
- 
00 < ST(l) 
< + 00. 


82C288 
BUS CONTROLLER FOR 80286 PROCESSORS 
(82C288-12, 82C288-10, 82C288-8) 


• 
Provides 
Commands 
and Controls 
for 
Local and System 
Bus 


• 
Wide Flexibility 
In System 
Configurations 


• 
High Speed CHMOS 
III Technology 


• 
Fully Compatible 
with the HMOS 82288 


• 
Fully Static Device 


• 
Available 
in 20 Pin PLCC (Plastic 
Leaded 
Chip Carrier) 
and 20 Pin Cerdip 
Packages 


(See Packaging 
Spec, 
Order 
#231369) 


The Intel 82C288 Bus Controller is a 20-pin CHMOS III component for use in 80286 microsystems. The 
82C288 is fully compatible with its predecessor the HMOS 82288. The bus controller is fully static and 
supports a low power mode. The bus controller provides command and control outputs with flexible timing 
options. Separate command outputs are used for memory and I/O devices. The data bus is controlled with 
separate data enable and direction control signals. 


Two modes of operation are possible via a strapping option: MULTIBUS I compatible bus cycles, and high 
speed bus cycles. 


CLK 
CONTROL 
INPUTS 
CENIAEN 
CENL 


CMDLY 
iiEiiiY 
• 


P.C. Board Views-As 
viewed from the compo- 
nent side of the P.C. board. 


CENL 


CENfiEH 


DEN 


DT/R 
M/iO 


Component 
Pad Views-As 
viewed from under- 


side of component when mounted on the board. 


MRDC 


CMDLY 


MB 


ALE 


MCE 


MRDC 
8 


CMDLY 
7 


MB 6 


ALE 
5 


MCE 
~ 


I~:z 
is 
~ I~I~I~ 
c> Q Q ~ 
9 
10 11 12 13 


3 
2 
1 20 19 
I;;; d I~~Ili: 


1~ 
CENL 


15 
CEN/AEN 


16 
DEN 


17 DT/R 
18 M/iO 


Symbol 
Type 
Name and Function 


CLK 
I 
SYSTEM 
CLOCK 
provides the basic timing control 
for the 82C288 in an 80286 
microsystem. 
Its frequency 
is twice the internal processor 
clock frequency. 
The falling 
edge of this input signal establishes 
when inputs are sampled 
and command 
and control 
outputs 
change. 


SO, S1 
I 
BUS CYCLE STATUS 
starts a bus cycle and, along with MilO, 
defines the ty~ 
of bus 
cycle. These inputs are active LOW. A bus cycle is started when either S1 or SO is 
sampled 
LOW at the falling edge of CLK. Setup and hold times must be met for proper 
operation. 


80286 Bus Cycle 
Status 
Definition 


M/IO 
S1 
SO 
Type of Bus Cycle 


0 
0 
0 
Interrupt 
Acknowledge 
0 
0 
1 
1/0 Read 
0 
1 
0 
110 Write 
0 
1 
1 
None; Idle 
1 
0 
0 
Halt or Shutdown 
1 
0 
1 
Memory 
Read 
1 
1 
0 
Memory Write 
1 
1 
1 
None; Idle 


MilO 
I 
MEMORY 
OR I/O SELECT 
determines 
whether 
the current bus cycle is in the memory 
space or 1/0 space. When LOW, the current bus cycle is in the 1/0 space. Setup and 
hold times must be met for proper operation. 


MB 
I 
MUL TIBUS MODE SELECT 
determines 
timing of the command 
and control 
outputs. 
When HIGH, the bus controller 
operates 
with MUL TIBUS I compatible 
timings. When 
LOW, the bus controller 
optimizes 
the command 
and control 
output timing for short bus 
cycles. The function 
of the CENI AEN input pin is selected 
by this signal. This input is 
typically a strapping 
option and not dynamically 
changed. 


CENL 
I 
COMMAND 
ENABLE 
LATCHED 
is a bus controller 
select signal which enables the bus 
controller 
to respond to the current bus cycle being initiated. 
CENL is an active HIGH 
input latched internally 
at the end of each Ts cycle. CENL is used to select the 
appropriate 
bus controller 
for each bus cycle in a system where the CPU has more than 
one bus it can use. This input may be connected 
to Vcc to select this 82C288 for all 
transfers. 
No control 
inputs affect CENL. Setup and hold times must be met for proper 
operation. 


CMDLY 
I 
COMMAND 
DELAY 
allows delaying the start of a command. 
CMDLY is an active HIGH 
input. If sampled 
HIGH, the command 
output is not activated 
and CMDL Y is again 
sampled 
at the next CLK cycle. When sampled 
LOW the selected 
command 
is enabled. 
If 
READY is detected 
LOW before the command 
output is activated, 
the 82C288 will 
terminate 
the bus cycle, even if no command 
was issued. Setup and hold times must be 
satisfied 
for proper operation. 
This input may be connected 
to GND if no delays are 
required before starting a command. 
This input has no effect on 82C288 control 
outputs. 


READY 
I 
READY 
indicates 
the end of the current bus cycle. READY is an active LOW input. 


MUL TIBUS I mode requires at least one wait state to allow the command 
outputs to 
become 
active. READY must be LOW during reset, to force the 82C288 into the idle 
state. Setup and hold times must be met for proper operation. 
The 82C284 drives READY 
LOW during RESET. 
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Symbol 
Type 
Name and Function 


CEN/AEN 
I 
COMMAND 
ENABLE/ADDRESS 
ENABLE controls 
the command 
and DEN 
outputs 
of the bus controller. 
CEN/ AEN inputs may be asynchronous 
to CLK. 
Setup and hold times are given to assure a guaranteed 
response 
to 
synchronous 
inputs. This input may be connected 
to Vcc or GND. 


When MB is HIGH this pin has the AEN function. 
AEN is an active LOW input 
which indicates 
that the CPU has been granted 
use of a shared bus and the 
bus contoller 
command 
outputs may exit 3-state OFF and become 
inactive 
(HIGH). AEN HIGH indicates 
that the CPU does not have control 
of the shared 
bus and forces the command 
outputs into 3-state OFF and DEN inactive 
(LOW). 


When MB is LOW this pin has the CEN function. 
CEN is an unlatched 
active 
HIGH input which allows the bus controller 
to activate 
its command 
and DEN 
outputs. With MB LOW, CEN LOW forces the command 
and DEN outputs 
inactive but does not tristate them. 


ALE 
0 
ADDRESS 
LATCH ENABLE controls 
the address 
latches used to hold an 
address 
stable during a bus cycle. This control 
output is active HIGH. ALE will 
not be issued for the halt bus cycle and is not affected 
by any of the control 
inputs. 


MCE 
0 
MASTER 
CASCADE 
ENABLE signals that a cascade 
address from a master 
8259A interrupt 
controller 
may be placed onto the CPU address 
bus for 
latching by the address 
latches under ALE control. 
The CPU's address 
bus 
may then be used to broadcast 
the cascade 
address to slave interrupt 
controllers 
so only one of them will respond to the interrupt 
acknowledge 
cycle. 


This control 
output is active HIGH. MCE is only active during interrupt 
acknowledge 
cycles and is not affected 
by any control 
input. Using MCE to 
enable cascade 
address drivers requires latches which save the cascade 
address on the falling edge of ALE. 


DEN 
0 
DATA ENABLE controls 
when data transceivers 
connected 
to the local data 
bus should be enabled. 
DEN is an active HIGH control 
output. DEN is delayed 
for write cycles in the MUL TIBUS I mode. 


DT/R 
0 
DATA TRANSMIT/RECEIVE 
establishes 
the direction 
of data flow to or from 
the local data bus. When HIGH, this control 
output indicates 
that a write bus 
cycle is being perfQ!med. A LOW indicates 
a read bus cycle. DEN is always 
inactive wh~n DT /R changes 
states. This output is HIGH when no bus cycle is 
active. DT /R is not affected 
by any of the control 
inputs. 


10WC 
0 
110 WRITE COMMAND 
instructs 
an I/O device to read the data on the data 
bus. This command 
output is active LOW. The MB and CMDL Y inputs control 
when this output becomes 
active. READY controls 
when it becomes 
inactive. 


10RC 
0 
I/O READ COMMAND 
instructs 
an I/O device to place data onto the data bus. 


This command 
output is active LOW. The MB and CMDL Y inputs control when 
this output becomes 
active. READY controls 
when it becomes 
inactive. 


MWTC 
0 
MEMORY 
WRITE COMMAND 
instructs 
a memory device to read the data on 
the data bus. This command 
output is active LOW. The MB and CMDL Y inputs 
control 
when this output becomes 
active. READY controls 
when it becomes 
inactive. 


MRDC 
0 
MEMORY 
READ COMMAND 
instructs 
the memory device to place data onto 
the data bus. This command 
output is active LOW. The MB and CMDL Y inputs 
control when this output becomes 
active. READY controls 
when it becomes 
inactive. 
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Symbol 
Type 
Name and Function 


INTA 
0 
INTERRUPT 
ACKNOWLEDGE 
tells an interrupting 
device that its interrupt 
request is being acknowledged. 
This command 
output is active LOW. The MB 
and CMDL Y inputs control when this output becomes 
active. R"EA15Y controls 
when it becomes 
inactive. 


Vcc 
System 
Power: + 5V Power Supply 


GND 
System 
Ground: 
OV 


Type 
of 
M/iO 
S1 
SO 
Command 
DT/R 
ALE,DEN 
MCE 
Bus Cycle 
Activated 
State 
Issued? 
Issued? 


Interrupt 
Acknowledge 
0 
0 
0 
INTA 
LOW 
YES 
YES 


1/0 Read 
0 
0 
1 
i'ORC 
LOW 
YES 
NO 


1/0 Write 
0 
1 
0 
TOWC 
HIGH 
YES 
NO 


None; Idle 
0 
1 
1 
None 
HIGH 
NO 
NO 


Halt/Shutdown 
1 
0 
0 
None 
HIGH 
NO 
NO 


Memory 
Read 
1 
0 
1 
"M"R"OC 
LOW 
YES 
NO 


Memory Write 
1 
1 
0 
MWTC 
HIGH 
YES 
NO 


None; Idle 
1 
1 
1 
None 
HIGH 
NO 
NO 


Operating Modes 


Two types 
of buses 
are supported 
by the 82C288: 
MUL TIBUS 
I and 
non-MUL TIBUS 
I. When 
the 
MB 
input is strapped 
HIGH, MUL TIBUS 
I timing is used. 


In MUL TIBUS I mode, the 82C288 
delays command 
and data activation 
to meet IEEE-796 
requirements 
on address 
to command 
active 
and 
write 
data 
to 
command 
active 
setup 
timing. 
MUL TIBUS 
I mode 
requires at least one wait state in the bus cycle since 
the 
command 
outputs 
are 
delayed. 
The 
non- 
MUL TIBUS 
I mode does not delay any outputs 
and 
does 
not require 
wait states. 
The MB input affects 
the timing of the command 
and DEN outputs. 


Command and Control Outputs 


The type 
of bus cycle 
performed 
by the 
local 
bus 
master 
is encoded 
in the M/iC5, Sf, and &5 inputs. 
Different 
command 
and control 
outputs 
are activat- 
ed depending 
on the type of bus cycle. Table 2 indi- 
cates the cycle decode 
done by the 82C288 and the 
effect on command, 
DT /A", ALE, DEN, and MCE out- 
puts. 


Bus cycles 
come 
in three 
forms: 
read, 
write, 
and 
halt. 
Read 
bus 
cycles 
include 
memory 
read, 
1/0 
read, and interrupt 
acknowledge. 
The timing 
of the 
associated 
read 
command 
outputs 
(MRDC, 
i'ORC, 


and INTA), control 
outputs 
(ALE, DEN, DT/R) 
and 
control 
inputs 
(CENI AEN, CENL, CMDL Y, MB, and 
READY) 
are identical 
for all read bus cycles. 
Read 
cycles 
differ only in which 
command 
output 
is acti- 
vated. The MCE control 
output 
is only asserted 
dur- 


ing interrupt 
acknowledge 
cycles. 


Write bus cycles 
activate 
different 
control 
and com- 
mand outputs with different 
timing than read bus cy- 
cles. 
Memory 
write 
and 1/0 write 
are write 
bus cy- 
cles whose timing for command 
outputs 
(MWTC and 
TOWC), control 
outputs 
(ALE, DEN, DT/R) and con- 
trol 
inputs 
(CENI AEN, 
CENL, 
CMDL Y, 
MB, 
and 
READY) are identical. 
They differ only in which com- 
mand output 
is activated. 


Halt bus cycles 
are different 
because 
no command 
or control 
output 
is activated. 
All control 
inputs 
are 
~ored 
until the next bus cycle is started 
via Sf and 
SO. 


Static Operation 


All 82C288 circuitry 
is of static design. 
Internal 
regis- 
ters and logic are static 
and require 
no refresh 
as 
with dynamic 
circuit design. This eliminates 
the mini- 
mum operating 
frequency 
restriction 
placed 
on the 
HMOS 82288. 
The CHMOS 
III 82C288 
can operate 
from 
DC to the 
appropriate 
upper 
frequency 
limit. 


• 


Power dissipation is directly related to operating fre- 
quency. As the system frequency is reduced, so is 
the operating power. When the clock is stopped to 
the 82C288, power dissipation is at a minimum. This 
is useful for low-power and portable applications. 


The 82C288 bus controller is used in 80286 systems 
to provide address latch control, data transceiver 
control, and standard level-type command outputs. 
The command outputs are timed and have sufficient 
drive capabilities for large TTl buses and meet all 
IEEE-796 requirements for MUlTIBUS I. A special 
MUl TIBUS I mode is provided to satisfy all address/ 
data setup and hold time requirements. Command 
timing may be tailored to special needs via a CMDl Y 
input to determine the start of a command and 
READY to determine the end of a command. 


Connection to multiple buses are supported with a 
latched enable input (CENl). An address decoder 
can determine which, if any, bus controller should be 
enabled for the bus cycle. This input is latched to 
allow an address decoder to take full advantage of 
the pipelined timing on the 80286 local bus. 


VCH 
elK 


VCL 


ported. An AEN input prevents the bus controller 
from driving the shared bus command and data 
signals 
except 
when 
enabled 
by 
an 
external 
MUl TIBUS I type bus arbiter. 


Separate DEN and DT/R outputs control the data 
transceivers for all buses. Bus contention is eliminat- 
ed by disabling DEN before changing DT/R. The 
DEN timing allows sufficient time for tristate bus driv- 
ers to enter 3-state OFF before enabling other driv- 
ers onto the same bus. 


The term CPU refers to any 80286 processor or 
80286 support component which may become an 
80286 local bus master and thereby drive the 
82C288 status inputs. 


Any CPU which drives the local bus uses an internal 
clock which is one half the frequency of the system 
clock (ClK) (see Figure 3). Knowledge of the phase 
of the local bus master internal clock is required for 
proper operation of the 80286 local bus. The local 
bus master informs the bus controller of its internal 
clock phase when it asserts the status signals. 
Status signals are always asserted beginning in 
Phase 1 of the local bus master's internal clock. 
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Bus State Definition 


The 82C288 bus controller has three bus states (see 
Figure 4): Idle (TI) Status (Ts) and Command (Td· 
Each bus state is two ClK cycles long. Bus state 
phases correspond to the internal CPU processor 
clock phases. 


The T, bus state occurs when no bus cycle is cur- 
rently active on the 80286 local bus. This state may 
be repeated indefinitely. When control of the local 
bus is being passed between masters, the bus reo 
mains in the TI state. 


READY. 
NEW CYCLE 


Bus Cycle Definition 


The S1 and SOinputs signal the start of a bus cycle. 
When either input becomes lOW, a bus cycle is 
started. The Ts bus state is defined to be the two 
ClK cycles during which either S1 or SOare active 
(see Figure 5). These inputs are sampled by the 
82C288 at every falling edge of ClK. When either 
S1 or SOare sampled lOW, the next ClK cycle is 
considered the second phase of the internal CPU 
clock cycle. 


The local bus enters the Tc bus state after the Ts 
state. The shortest bus cycle may have one Ts state 
and one Testate. longer bus cycles are formed by 
repeating Testate. A repeated Tc bus state is called 
a wait state. 


The READY input determines whether the current 
Tc bus state is to be repeated. The READY input 
has the same timing and effect for all bus cycles. 
READY is sampled at the end of each Tc bus state 
to see if it is active. If sampled HIGH, the Tc bus 
state is repeated. This is called inserting a wait state. 
The control and command outputs do not change 
during wait states. 


When READY is sampled lOW, the current bus cy- 
cle is terminated. Note that the bus controller may 
enter the Ts bus state directly from Tc if the status 
lines are sampled active at the next falling edge of 
ClK. 


VOl 
CLK 
Va. 


• 


Figures 6 through 10 show the basic command and 
control output timing for read and write bus cycles. 
Halt bus cycles are not shown since they activate no 
outputs. The basic idle-read-idle and idle-write-idle 
bus cycles are shown. The signal label CMD repre- 
sents the appropriate command output for the bus 
cycle. For Figures 6 through 10, the CMDLY input is 
connected to GND and CENL to Vcc. The effects of 
CENl and CMDLYare described later in the section 
on control inputs. 


Figures 6, 7 and 8 show non-MULTIBUS I cycles. 
MB is connected to GND while CEN is connected to 
Vcc. Figure 6 shows a read cycle with no wait states 
while Figure 7 shows a write cycle with one wait 
state. The READY input is shown to illustrate how 
wait states are added. 


intel~ 


T, 


CLK 


51-SO 


AlE 


DEN 


DT/II 


CMD 


I 


--------WRITE 
BUS 
C'/Cl£----- 


T. 
Tc 


Bus cycles can occur back to back with no TI bus 
states between Tc and Ts. Back to back cycles do 
not affect the timing of the command and control 
outputs. 
Command and control 
outputs 
always 
reach the states shown for the same clock edge 
(within Ts. Tc or following bus state) of a bus cycle. 


1ST WRITE CYCLE-+- 2ND WRITE CYCLE 


To 
I 
T. 
I 
To 


A special case in control timing occurs for back to 
back write cycles with MB = O. In this case. DTfR 
and DEN remain HIGH between the bus cycles (see 
Figure 8). The command and ALE output timing 
does not change. 


Figures 9 and 10 show a MULTIBUS I cycle with MB 
= 1. AEN and CMDLYare connected to GND. The 
effects of CMDLY and AEN are described later in 
the section on control inputs. Figure 9 shows a read 
cycle with one wait state and Figure 10 shows a 
write cycle with two wait states. The second wait 
state of the write cycle is shown only fO 
example 
purposes and is not required. The REA Y input is 
shown to illustrate how wait states are added. 
• 


To 
T. 


eLK 


~.§O 


ALE 


DEN 


vO" 
DTIIl 


CiiD 


READY 
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The MB control input affects the timing of the com- 
mand and DEN outputs. These outputs are automat- 
ically delayed in MUl TIBUS I mode to satisfy three 
requirements: 
1) 50 ns minimum setup time for valid address be- 
fore any command output becomes active. 
2) 50 ns minimum setup time for valid write data 
before any write command output becomes ac- 
tive. 


3) 65 ns maximum time from when any read com- 
mand becomes inactive until the slave's read 
data drivers reach 3-state OFF. 


Three signal transitions are delayed by MB = 1 as 
compared to MB = 0: 
1) The HIGH to lOW transition of the read com- 
mand outputs (IORC, MRDC, and INTA) are de- 
layed one ClK cycle. 
2) The HIGH to lOW transition of the write com- 
mand outputs (IOWC and MWTC) are delayed 
two ClK cycles. 


3) The lOW to HIGH transition of DEN for write cy- 
cles is delayed one ClK cycle. 


Back to back bus cycles with MB = 1 do not change 
the timing of any of the command or control outputs. 
DEN always becomes inactive between bus cycles 
with MB = 1. 


Except for a halt or shutdown bus cycle, ALE will be 
issued during the second half of Ts for any bus cy- 
cle. ALE becomes inactive at the end of the Ts to 
allow latching the address to keep it stable during 
the entire bus cycle. The address outputs may 
change during Phase 2 of any TC bus state. ALE is 
not affected by any control input. 


Figure 11 shows how MCE is timed during interrupt 
acknowledlge (INTA) bus cycles. MCE is one ClK 
cycle longer than ALE to hold the cascade address 
from a master 8259A valid after the falling edge of 
ALE. With the exception of the MCE control output, 
an INTA bus cycle is identical in timing to a read bus 
cycle. MCE is not affected by any control input. 
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The control intputs can alter the basic timing of com- 
mand outputs, allow interfacing to multiple buses, 
and share a bus between different masters. For 
many 80286 systems, each CPU will have more than 
one bus which may be used to perform a bus cycle. 
Normally, a CPU will only have one bus controller 
active for each bus cycle. Some buses may be 
shared by more than one CPU (Le. MULTIBUS) re- 
quiring only one of them use the bus at a time. 


Systems with multiple and shared buses use two 
control input signals of the 82C288 bus controller, 
CENL and AEN (see Figure 12). CENL enables the 
bus controller to control the current bus cycle. The 
AEN input prevents a bus controller from driving its 
command outputs. AEN HIGH means that another 
bus controller may be driving the shared bus. 


In Figure 12, two buses are shown: a local bus and a 
MULTIBUS I. Only one bus is used for each CPU 
bus cycle. The CENL inputs of the bus controller 
select which bus controller is to perform the bus cy- 
cle. An address decoder determines which bus to 
use for each bus cycle. The 82C288 connected to 
the shared MULTIBUS I must be selected by CENL 
and be given access to the MULTIBUS I by AEN 
before it will begin a MULTIBUS I operation. 


CENL must be sampled HIGH at the end of the Ts 
bus state (see waveforms) to enable the bus control- 
ler to activate its command and control outputs. If 
sampled LOW the commands and DEN will not go 
active and DT/R' will remain HIGH. The bus control- 
ler will ignore the CMDLY, CEN, and READY inputs 
until another bus cycle is started via S1 and SO. 
Since an address decoder is commonly used to 
identify which bus is required for each bus cycle, 
CENL is latched to avoid the need for latching its 
input. 


The CENL input can affect the DEN control output. 
When MB = 0, DEN normally becomes active dur- 
ing Phase 2 of Ts in write bus cycles. This transition 
occurs before CENL is sampled. If CENL is sampled 
LOW, the DEN output will be forced LOW during TC 
as shown in the timing waveforms. 


When MB = 1, CEN/ AEN becomes AEN. AEN con- 
trols when the bus controller command outputs en- 
ter and exit 3-state OFF. AEN is intended to be driv- 
en by a MULTIBUS I type bus arbiter, which assures 
only one bus controller is driving the shared bus at 
any time. When AEN makes a LOW to HIGH tran- 
sition, the command outputs 
immediately enter 
3-state OFF and DEN is forced inactive. An inactive 
DEN should force the local data transceivers con- 
nected to the shared data bus into 3-state OFF (see 
Figure 12). The LOW to HIGH transition of AEN 
should only occur during TI or Ts bus states. 


The HIGH to LOW transition of AEN signals that the 
bus controller may now drive the shared bus com- 
mand signals. Since a bus ~ 
may be active or be 
in the process of starting, AEN can become active 
during any T-state. AEN LOW immediately allows 
DEN to go to the appropriate state. Three CLK edg- 
es later, the command outputs will go active (see 
timing waveforms). The MULTIBUS I requires this 
delay for the address and data to be valid on the bus 
before the command becomes active. 


When MB = 0, CEN/ AEN becomes CEN. CEN is an 
asynchronous input which immediately affects the 
command and DEN outputs. When CEN makes a 
HIGH to LOW transition, the commands and DEN 
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the command 
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control 
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outputs 
immediately 
go to the appropriate 
state (see 
timing waveforms). 
READY must still become 
active 
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selected 
bus controller 
(CENL was latched 
HIGH). 
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CMDl Y is first sampled on the falling edge of the 
ClK ending Ts. If sampled HIGH, the command out- 
put is not activated, and CMDl Y is again sampled 
on the next falling edge of ClK. 
Once sampled 
lOW, the proper command output becomes active 
immediately if MB = O. If MB = 1, the proper com- 
mand goes active no earlier than shown in Figures 9 
and 10. 


READY can terminate a bus cycle before CMDl Y 
allows a command to be issued. In this case no 
commands are issued an the bus controller will de- 
activate DEN and DTIA in the same manner as if a 
command had been issued. 


The waveforms show the timing relationships of in- 
puts and outputs and do not show all possible tran- 


sitions of all signals in all modes. Instead, all signal 
timing relationships are shown via the general cas- 
es. Special cases are shown when needed. The 
waveforms provide some functional descriptions of 
the 82C288; however, most functional descriptions 
are provided in Figures 5 through 11. 


To find the timing specification for a signal transition 
in a particular mode, first look for a special case in 
the waveforms. If no special case applies, then use 
a timing specification for the same or related func- 
tion in another mode. 
• 
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Ambient 
Temperature 
Under Bias 
O·C to + 70·C 


Storage Temperature 
- 65·C to + 150·C 


Voltage 
on Any Pin with 
Respect 
to GND 


Power Dissipation 


-0.5Vto 
+7V 


1 Watt 


NOTICE: This is a production data sheet. The specifi- 
cations are subject to change without notice. 


• WARNING: Stressing the device beyond the "Absolute 
Maximum 
Ratings" 
may 
cause 
permanent 
damage. 


These are stress ratings only. Operation 
beyond 
the 
"Operating 
Conditions" 
is not recommended 
and ex- 
tended 
exposure 
beyond 
the 
"Operating 
Conditions" 


may affect device reliability. 


Symbol 
Parameter 
Mln 
Max 
Units 
Test Conditions 


VIL 
Input lOW 
Voltage 
-0.5 
0.8 
V 


VIH 
Input HIGH Voltage 
2.0 
Vcc 
+ 0.5 
V 


VILC 
ClK 
Input lOW 
Voltage 
-0.5 
0.6 
V 


VIHC 
ClK 
Input HIGH Voltage 
3.8 
Vcc 
+ 0.5 
V 


VOL 
Output lOW 
Voltage 
Command 
Outputs 
0.45 
V 
IOL = 32 mA (Note 1) 
Control Outputs 
0.45 
V 
IOL = 16 mA (Note 2) 


VOH 
Output HIGH Voltage 
Command 
Outputs 
2.4 
V 
IOH = -5 
mA (Note 1) 
VCC - 
0.5 
V 
IOH = -1 
mA (Note 1) 
Control Outputs 
2.4 
V 
IOH = - 1 mA (Note 2) 
VCC - 
0.5 
V 
IOH = -0.2 
mA (Note 2) 


IlL 
Input leakage 
Current 
±10 
IJoA 
OV ~ VIN ~ Vcc 


ILO 
Output leakage 
Current 
±10 
IJoA 
0.45V 
~ VOUT ~ VCC 


ICC 
Power Supply Current 
75 
mA 


Iccs 
Power Supply Current (Static) 
3 
mA 
(Note 3) 


CCLK 
ClK 
Input Capacitance 
12 
pF 
FC = 1.MHz 


CI 
Input Capacitance 
10 
pF 
FC = 1 MHz 


Co 
Input/Output 
Capacitance 
20 
pF 
FC = 1 MHz 


'T A is guaranteed from O'c; to +70'C as long as TCASE is not exceeded. 


NOTES: 
1. Command Outputs are INTA, 1C5"RC, rowe, MFfDC 
and MWRC. 


2. Control Outputs are DT/A". DEN, ALE and MCE. 
3. Tested while outputs are unloaded, and inputs at Vcc or Vss. 


Vcc = 5V, ± 5%, TCASE = O°C to + 85°C.· 
AC timings 
are referenced 
to 0.8V and 2.0V points of signals as 


illustrated 
in data sheet waveforms, 
unless otherwise 
noted. 


8MHz 
10 MHz 
12.5 MHz 
Test 
Symbol 
Parameter 
-8 
-8 
·10 
·10 
·12 
-12 
Unit 
Condition 
Mln 
Max 
Mln 
Max 
Mln 
Max 


1 
ClK 
Period 
62 
250 
50 
250 
40 
250 
ns 


2 
ClK 
HIGH Time 
20 
16 
13 
ns 
at 3.6V 


3 
ClK 
lOW 
Time 
15 
12 
11 
ns 
at 1.OV 


4 
ClK 
Rise Time 
10 
8 
8 
ns 
1.0Vto 
3.6V 


5 
ClK 
Fall Time 
10 
8 
8 
ns 
3.6Vto 
1.OV 


6 
MfiO 
and Status 
22 
18 
15 
ns 
Setup Time 


7 
MfiO 
and Status 
1 
1 
1 
ns 
Hold Time 


8 
CENl 
Setup Time 
20 
15 
15 
ns 


9 
CENl 
Hold Time 
1 
1 
1 
ns 


10 
READY Setup Time 
38 
26 
18 
ns 


11 
READY Hold Time 
25 
25 
20' 
ns 


12 
CMDl Y Setup Time 
20 
15 
15 
ns 


13 
CMDl Y Hold Time 
1 
1 
1 
ns 


14 
AEN Setup Time 
20 
15 
15 
ns 
(Note 3) 


15 
AEN Hold Time 
0 
0 
0 
ns 
(Note 3) 


16 
ALE, MCE Active 
3 
20 
3 
16 
3 
16 
ns 
(Note 4) 
Delay from ClK 


17 
ALE, MCE Inactive 
25 
19 
19 
ns 
(Note 4) 
Delay from ClK 


18 
DEN (Write) 
35 
23 
23 
ns 
(Note 4) 
Inactive from CENl 


19 
DT fR lOW 
from ClK 
25 
23 
23 
ns 
(Note 4) 


20 
DEN (Read) ActiveR 
5 
35 
5 
21 
5 
21 
ns 
(Note 4) 
from DTf 


21 
DEN (Read) Inactive 
3 
35 
3 
21 
3 
19 
ns 
(Note 4) 
DlyfromClK 


22 
DT fR HIGH from 
5 
35 
5 
20 
5 
18 
ns 
(Note 4) 
DEN Inactive 


23 
DEN (Write) Active 
30 
23 
23 
ns 
(Note 4) 
Delay from ClK 


24 
DEN (Write) Inactive 
3 
30 
3 
19 
3 
19 
ns 
(Note 4) 
Diy from ClK 
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VCC = 5V, ±5%, 
TCASE = O·C to + 85·C.· 
AC timings 
are referenced 
to 0.8V and 2.0V points of signals as 
illustrated 
in data sheet waveforms, 
unless otherwise 
noted. 
(Continued) 


8MHz 
10MHz 
12.5 MHz 
Test 
Symbol 
Parameter 
·8 
·8 
·10 
·10 
·12 
·12 
Unit Condition 
Mln 
Max 
Mln 
Max 
Mln 
Max 


25 
DEN Inactive from 
30 
25 
25 
ns 
(Note 4) 
CEN 


26 
DEN Active from 
30 
24 
24 
ns 
(Note 4) 
CEN 


27 
DT fR HIGH from CLK 
35 
25 
25 
ns 
(Note 4) 
(when CEN = LOW) 


28 
DEN Active from AEN 
30 
26 
26 
ns 
(Note 4) 


29 
CMD Active Delay 
3 
25 
3 
21 
3 
21 
ns 
(Note 5) 
from CLK 


30 
CMD Inactive Delay 
5 
20 
5 
20 
5 
20 
ns 
(Note 5) 
fromCLK 


31 
CMD Active from 
25 
25 
25 
ns 
(Note 5) 
CEN 


32 
CMD Inactive from CEN ' 
25 
25 
25 
ns 
(Note 5) 


33 
CMD Inactive 
Enable from AEN 
40 
40 
40 
ns 
(Note 5) 


34 
CMD Float Delay from AEN 
40 
40 
40 
ns 
(Note 6) 


35 
MB Setup Time 
20 
20 
20 
ns 


36 
MBHoldTime 
0 
0 
0 
ns 


37 
Command 
Inactive Enable 
40 
40 
40 
ns 
(Note 5) 
from MB i 


38 
Command 
Float Time from MB t 
40 
40 
40 
ns 
(Note 6) 


39 
DEN Inactive from MB t 
30 
26 
26 
ns 
(Note 4) 


40 
DEN Active from MB i 
30 
30 
30 
ns 
(Note 4) 


·T A is guaranteed 
from O'C to + 70'C 
as long as TCASE is not exceeded. 


NOTES: 
3. AEN is an asynchronous 
input. 
This 
specification 
is for testing 
purposes 
only, 
to assure 
recognition 
at a specific 
ClK 
edge. 
4. Control 
output 
load: CI = 150 pF. 
5. Command 
output 
load: CI = 300 pF. 


6. Float condition 
occurs 
when 
output 
current 
is less than ILO in magnitude. 


OTHER 
DEVICE 
INPUT 


l 
CLI 
• 
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WAVEFORMS 
(Continued) 


STATUS, 
ALE, MCE, CHARACTERISTICS 


CLK 


MliO,ii,iO 


infel~ 


• 
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NOTE: 
1. AEN is an asynchronous 
input. AEN setup and hold time is specified 
to guarantee 
the response 
shown 
in the waveforms. 
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NOTES: 
1. MS is an asynchronous 
input. MS setup and hold times 
specified 
to guarantee 
the response 
shown 
in the waveforms. 


2. If the setup time. t35. is met two clock 
cycles 
will occur 
before CMl) becomes 
active 
after the falling 
edge of MS. 


The following 
list represents 
key differences 
between 
this and the -002 data sheet. Please review this summa- 


ry carefully. 


1. The Ices 
specification 
was changed 
from 1 mA to 3 mA maximum. 


2. The "PRELIMINARY" 
markings 
have been removed 
from the data sheet. 


\.rLU\.r~ \:i~N~HA I UH ANU HEADY INTERFACE 
FOR 80286 PROCESSORS 
(82C284-12, 82C284-10, 82C284-8) 


• 
Generates System Clock for 80286 
Processors 


• 
Uses Crystal or TTL Signal for 
Frequency Source 


• 
Provides Local READY and MULTIBUSI 
READY Synchronization 


• 
High Speed CHMOS III Technology 


• 
Generates System Reset Output 


• 
Available in 18-Lead Cerdlp and 20-Pln 
PLCC (Plastic Leaded Chip Carrier) 
Packages 


(See 
Packaging 
Spec. 
Order 
# 231369) 


The 82C284 is a clock generator/driver which provides clock signals for 80286 processors and support 
components. It also contains logic to supply READY to the CPU from either asynchronous or synchronous 
sources and synchronous RESET from an asynchronous input. 
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Figure 1. 82C284 Block Diagram 
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viewed from the compo- 
nent side of the P.C. Board. 


210453-2 
Component Pad Views-As 
viewed from under- 
side of component when mounted on the board. 
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Symbol 
Type 
Name and Function 


ClK 
0 
SYSTEM CLOCK is the signal used by the processor 
and support 
devices which must be synchronous 
with the processor. 
The frequency 
of the ClK 
output has twice the desired internal processor 
clock 
frequency. 
ClK 
can drive both TTl 
and MOS level inputs. 


F/C 
I 
FREQUENCY ICRYST AL SELECT 
is a strapping 
option to select the 
source for the ClK 
output. When F/C is strapped 
lOW, 
the internal 
crystal oscillator 
drives ClK. 
When F/C is strapped 
HIGH, the EFI 
input drives the ClK 
output. 


X1, X2 
I 
CRYSTAL 
IN are the pins to which a parallel resonant 
fundamental 
mode crystal is attached 
for the internal oscillator. 
When FIC is lOW, 
the internal oscillator 
will drive the ClK 
output at the crystal frequency. 


The crystal frequency 
must be twice the desired internal 
processor 
clock frequency. 


EFI 
I 
EXTERNAL 
FREQUENCY 
IN drives ClK 
when the FIC input is 
strapped 
HIGH. The EFI input frequency 
must be twice the desired 
internal processor 
clock frequency. 


PClK 
0 
PERIPHERAL 
CLOCK is an output which provides 
a 50% duty cycle 
clock with 112 the frequency 
of ClK. 
PClK 
will be in phase with the 
internal processor 
clock following 
tHe first bus cycle after the 
processor 
has been reset. 


ARDYEN 
I 
ASYNCHRONOUS 
READY ENABLE is an active lOW 
input which 
qualifies the ARDY input. ARDYEN 
selects ARDY as the source of 
ready for the current bus cycle. Inputs to ARDYEN 
may be applied 
asynchronously 
to ClK. 
Setup and hold times are given to assure a 
guaranteed 
response 
to synchronous 
inputs. 


ARDY 
I 
ASYNCHRONOUS 
READY is an active lOW 
input used to terminate 
the current bus cycle. The ARDY input is qualified 
by ARDYEN. 
Inputs 
to ARDY may be applied asynchronously 
to ClK. 
Setup and hold times 
are given to assure a guaranteed 
response 
to synchronous 
outputs. 


SRDYEN 
I 
SYNCHRONOUS 
READY ENABLE is an active lOW 
input which 
qualifies SRDY. SRDYEN 
selects SRDY as the source for READY to 
the CPU for the current bus cycle. Setup and hold times must be 
satisfied for proper operation. 


SRDY 
I 
SYNCHRONOUS 
READY is an active lOW 
input used to terminate 
the current bus cycle. The SRDY input is qualified 
by the SRDYEN 
input. Setup and hold times must be satisfied for proper operation. 


READY 
0 
READY is an active lOW 
output which Signa~ the current busEcle 
is 
to be completed. 
The SRDY, SRDYEN, 
ARD 
,ARDYEN, Sf, SO and 
RES inputs control 
READY as explained 
later in the READY generator 
section. 
READY is an open drain output requiring an external 
pull-up 
resistor. 
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Symbol 
Type 
Name and Function 


SO,S1 
I 
STATUS input prepare the 82C284 for a subsequent bus cycle. SO and 
Sf synchronize PClK to the internal processor clock and control 
READY.These inputs have internal pull-up resistors to keep them 
HIGH if nothing is driving them. Setup and hold times must be satisfied 
for proper operation. 


RESET 
a 
RESET is an active HIGH output which is derived from the RES input. 
RESET is used to force the system into an initial state. When RESET is 
active, READY will be active (lOW). 


RES 
I 
RESET IN is an active lOW ilut 
which generates the system reset 
signal, RESET.Signals to RE 
may be applied asynchronously to ClK. 


Setup and hold times are given to assure a guaranteed response to 
synchronous inputs. 


Vcc 
SYSTEM 
POWER: + 5V Power Supply 


GND 
SYSTEM 
GROUND: 
OV 


The 82C284 generates the clock, ready, and reset 
signals required for 80286 processors and support 
components. The 82C284 contains a crystal con- 
trolled oscillator, clock generator, peripheral clock 
generator, Multibus ready synchronization logic and 
system reset generation logic. 


The ClK output provides the basic timing control for 
an 80286 system. ClK 
has output characteristics 
sufficient to drive MaS devices. ClK is generated by 
either an internal crystal oscillator or an external 
source as selected by the F/C strapping option. 
When FIC is lOW, the crystal oscillator drives the 
ClK output. When FIC is HIGH, the EFI input drives 
the ClK output. 


The 82C284 provides a second clock output, PClK, 
for peripheral devices. PClK is ClK divided by two. 
PClK has a duty cycle of 50% and MaS output 
drive characteristics. PClK is normally synchronized 
to the internal processor clock. 


After reset, the PClK signal may be out of phase 
with the internal processor clock. The S1 and SO 
signals of the first bus cycle are used to synchronize 


PClK to the internal processor clock. The phase of 
the PClK output changes by extending its HIGH 
time beyond one system clock (see waveforms). 
PClK is forced HIGH whenever either SOor Sf were 
active (lOW) for the two previous ClK cycles. PClK 
continues to oscillate when both SO and S1 are 
HIGH. 


Since the phase of the internal processor clock will 
not change except during reset, the phase of PClK 
will not change except during the first bus cycle after 
reset. 


The oscillator circuit of the 82C284 is a linear Pierce 
oscillator which requires an external parallel reso- 
nant, fundamental mode, crystal. The output of the 
oscillator is internally buffered. The crystal frequency 
chosen should be twice the required internal proces- 
sor clock frequency. The crystal should have a typi- 
cal load capacitance of 32 pF. 


X1 and X2 are the oscillator crystal connections. For 
stable operation of the oscillator, two loading capac- 
itors are recommended, as shown in Table 2. The 
sum of the board capacitance and loading capaci- 
tance should equal the values shown. It is advisable 
to limit stray board capacitances (not including the 
effect of the loading capacitors or crystal capaci- 
tance) to less than 10 pF between the X1 and X2 
pins. Decouple Vcc 
and GND as close to the 
82C284 as possible. 
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210453-3 
Figure 3. Recommended 
Crystal 
and READY Connections 


Due to the ClK output having a very fast rise and fall 
time, it is recommended to properly terminate the 
ClK line at frequencies above 10 MHz to avoid sig- 
nal reflections and ringing. Termination is accom- 
plished by inserting a small resistor (typically 10fi- 
74fi) in series with the output, as shown in Figure 4. 
This is known as series termination. The resistor val- 
ue plus the circuit output impedance should be 
made equal to the impedance of the transmission 
line. 


Reset Operation 


The reset logic provides the RESET output to force 
the system into a known, initial state. When the RES 
input is active (lOW), the RESET output becomes 
active (HIGH). RES is synchronized internally at the 
falling edge of ClK before generating the RESET 
output (see waveforms). Synchronization of the RES 
input introduces a one or two ClK delay before af- 
fecting the RESET output. 


At power up, a system does not have a stable Vcc 
and ClK. To prevent spurious activity, RES should 


ating values. 80286 processors and support conipo- 
nents also require their RESET inputs be HIGH a 
minimum of 16 ClK 
cycles. A network such as 
shown in Figure 5 will keep RES lOW long enough 
to satisfy both needs. 


Ready Operation 


The 82C284 accepts two ready sources for the sys- 
tem ready signal which terminates the current bus 
cycle. Eithe~nchronous 
(SRDY) or asynchro- 
nous ready (ARDY) source may be used. Each ready 
input has an enable (SRDYEN and ARDYEN) for se- 
lecting the type of ready source required to termi- 
nate the current bus cycle. An address decoder 
would normally select one of the enable inputs. 


READY 
is enabled 
(lOW), 
if either 
SRDY + 
SRDYEN = 0 or ARDY + ARDYEN = 
0 when 
sampled by the 82C284 READY generation logic. 
READY will remain active for at least two ClK cy- 
cles. 


The READY output has an open-drain driver allow- 
ing other ready circuits to be wire or'ed with it, as 
shown in Figure 3. The READY signal of an 80286 
system requires an external pull-up resistor. To force 
the READY signal inactive (HIGH) at the start of a 
bu~ycle, 
the READY output floats when either 51 
or SOare sampled lOW at the falling edge of ClK. 
Two system clock periods are allowed for the pull-up 
resistor to pull the READY signal to VIH. When RE- 
SET is active, READY is forced active one ClK later 
(see waveforms). 


Figure 6 illustrates the operation of SRDY and 
SRDYEN. These i~ts 
ar~sampled 
on the falling 
edge of ClK when S1 and SOare inactive and PClK 


is HIGH. READY 
is forced 
active 
when 
both 5RDY 
and 5RDYEN 
are sampled 
as LOW. 


Figure 
7 
shows 
the 
operation 
of 
ARDY 
and 
ARDYEN. 
These 
inputs 
are sampled 
by an internal 
synchronizer 
at each falling edge of CLK. The output 
of the synchronizer 
is then sampled 
when 
PCLK is 
HIGH. 
If the synchronizer 
resolved 
both the ARDY 


and ARDYEN 
as active, the 5RDY 
and 5RDYEN 
in- 
puts are ignored. 
Either ARDY or ARDYEN 
must be 
HIGH at the end of Ts (see Figure 7). 


READY remains active until either 51 or 50 are sam- 
pled LOW, or the ready inputs are sampled 
as inac- 
tive. 


Crystal Frequency 
C1 Capacitance 
C2 Capacitance 
(Pin 7) 
(Pin 8) 


1 to 8 MHz 
60pF 
40pF 
8 to 20 MHz 
25 pF 
15 pF 
Above 20 MHz 
15 pF 
15 pF 


NOTE: 
Capacitance 
values 
must include 
stray board 
capacitance. 


V" 
AROYEN 


SAOYEN 
+ 
SAOY 


V" 
SAOYEN 


AROY 


+ 


AROYEN 
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NOTICE: This is a production data sheet. The specifi- 
cations are subject to change without notice. 


• WARNING: Stressing the device beyond the "Absolute 
Maximum 
Ratings" 
may 
cause permanent 
damage. 


These are stress ratings 
only. Operation 
beyond 
the 


"Operating 
Conditions" 
is not recommended 
and ex- 
tended 
exposure 
beyond 
the 
"Operating 
Conditions" 


may affect device reliability. 


Temperature 
Under Bias 
O"C to + 70·C 


Storage Temperature 
- 65·C to + 150·C 


All Output and Supply Voltages 
-0.5V 
to + 7V 


All Input Voltages 
-1.0Vto 
+5.5V 


Power Dissipation 
1 Watt 


Symbol 
Parameter 
Mln 
Max 
Unit 
Teat Condition 


VIL 
Input lOW 
Voltage 
0.8 
V 


VIH 
Input HIGH Voltage 
2.0 
V 


VIHR 
RES and EFI Input HIGH Voltage 
2.6 
V 


VOL 
RESET, PClK 
Output lOW 
Voltage 
0.45 
V 
IOL = 5mA 


VOH 
RESET, PClK 
Output 
2.4 
V 
IOH = -1 
mA 
HIGH Voltage 
Vcc-0.5 
V 
IOH = -0.2 
mA 


VOLR 
READY, Output lOW 
Voltage 
0.45 
V 
IOL = 9mA 


VOLC 
ClK 
Output lOW 
Voltage 
0.45 
V 
IOL = 5mA 


VOHC 
ClK 
Output HIGH Voltage 
4.0 
V 
IOH = - 
800 IJ-A 


IlL 
Input Sustaining 
Current 
-60 
-500 
IJ-A 
VIN = OV 
on SO and Sf Pins 


III 
Input leakage 
Current 
±10 
IJ-A 
o ~ VIN ~ Vce(1) 


Ice 
Power Supply Current 
75 
mA 
at 25 MHz Output 
ClK 
Frequency 


CI 
Input Capacitance 
10 
pF 
Fc = 1 MHz 


NOTE: 
1. Status 
lines SO and S1 excluded 
because 
they have internal 
pull-up 
resistors. 


intel~ 


Timings 
are referenced 
to 0.8V and 2.0V points of signals 
as illustrated 
in the datasheet 
waveforms, 
unless 
otherwise 
noted. 


8MHz 
10 MHz 
12.5 MHz 
Test 
Symbol 
Parameter 
Units 
Conditions 
Mln 
Max 
Mln 
Max 
Mln 
Max 


1 
EFI to ClK 
Delay 
25 
25 
25 
ns 
At 1.5V (1) 


2 
EFI lOW 
Time 
28 
22.5 
13 
ns 
At 1.5V (1, 7) 


3 
EFI HIGH Time 
28 
22.5 
22 
ns 
At 1.5V (1, 7) 


4 
ClK 
Period 
62 
500 
50 
500 
40 
500 
ns 


5 
ClK 
lOW 
Time 
15 
12 
11 
ns 
At 1.0V (1,2,7,8,9,10) 


6 
ClK 
HIGH Time 
25 
16 
13 
ns 
At 3.6V (1, 2, 7, 8, 9,10) 


7 
ClK 
Rise Time 
10 
8 
8 
ns 
1.0V to 3.6V (1, 2,10,11) 


8 
ClKFallTime 
10 
8 
8 
ns 
3.6V to 1.0V (1,9,10,11) 


9 
Status Setup Time 
22 
- 
- 
ns 
(Note 1) 


9a 
Status Setup Time for 
- 
20 
22 
ns 
(Note 1) 
Status Going Active 


9b 
Status Setup Time for 
- 
20 
18 
ns 
(Note 1) 
Status Going Inactive 


10 
Status Hold Time 
1 
1 
3 
ns 
(Note 1) 


11 
SRDY or SRDYEN 
20 
17.5 
17 
ns 
(Note 1) 
Setup Time 


12 
SRDY or SRDYEN 
0 
2 
2 
ns 
(Notes 1, 11) 
Hold Time 
- 


13 
ARDY or ARDYEN 
0 
0 
0 
ns 
(Notes 1, 3) 
Setup Time 


14 
ARDY or ARDYEN 
30 
30 
25 
ns 
(Notes 1, 3) 
Hold Time 


15 
RES Setup Time 
20 
20 
18 
ns 
(Notes 1, 3) 


16 
RES Hold Time 
10 
10 
8 
ns 
(Notes 1, 3) 


17 
READY Inactive 
Delay 
5 
5 
5 
ns 
At 0.8V (4) 


18 
READY Active Delay 
0 
24 
0 
24 
0 
18 
ns 
At 0.8V (4) 
, 


19 
PClK 
Delay 
0 
45 
0 
35 
0 
23 
ns 
(Note 5) 


20 
RESET Delay 
5 
34 
5 
27 
3 
22 
ns 
(Note 5) 


21 
PClK 
lOW 
Time 
t4-20 
t4-20 
t4-20 
ns 
(Notes 5, 6) 


22 
PClK 
HIGH Time 
t4-20 
t4-20 
t4-20 
ns 
(Notes 5, 6) 


NOTES: 
1. CLK loading: 
CL = 100 pF. The 82C284's 
X1 and X2 inputs 
are designed 
primarily 
for parallel·resonant 
crystals. 
Serial- 
resonant 
crystals 
may also 
be used, 
however, 
they 
may oscillate 
up to 0.01 % faster 
than 
their 
nominal 
frequencies 
when 
used with the 82C284. 
For either 
type of crystal, 
capacitive 
loading 
should 
be as specified 
by Table 
2. 


2. With the internal 
crystal 
oscillator 
using recommended 
crystal 
and capacitive 
loading; 
or with the EFt input meeting 
speci· 
fications 
t2 and t3. The 
recommended 
crystal 
loading 
for CLK frequencies 
of 8 MHz-20 
MHz 
are 25 pF from 
pin X1 to 
ground, 
and 15 pF from 
pin X2 to ground; 
for CLK frequencies 
above 
20 MHz 15 pF from 
pin X1 to ground, 
and 15 pF from 
pin X2 to ground. 
These 
recommended 
values 
are 
±5 
pF,and 
include 
all stray capacitance. 
Decouple 
Vcc 
and 
GND 
as 
close 
to the 82C284 
as possible. 
3. This is an asynchronous 
input. This specification 
is given for testing 
purposes 
only, to assure 
recognition 
at specific 
CLK 
edge. 
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NOTES: 
4. Pull-up Resistor values for READY Pin: 


CPU Frequency 
8MHz 
10MHz 
12.5 MHz 


Resistor 
910n 
700n 
600n 
Cl 
150 pF 
150 pF 
150 pF 
IOL 
7mA 
7mA 
9mA 


5. PClK and RESET loading: CL = 75 pF. 
6. t4 refers to any allowable ClK period. 
7. When driving the 82C284 with EFI, provide minimum EFI HIGH and lOW times as follows: 


ClK 
Output 
Frequency 
16 MHz 
20 MHz 
25 MHz 


Min. Required EFI HIGH Time 
28 ns 
22.5 ns 
22ns 
Min. Required EFI lOW Time 
28ns 
22.5 ns 
13 ns 


8. When using a crystal (with recommended capacitive loading per Table 2) appropriate for the speed of the 80286. ClK 
output HIGH and lOW times guaranteed to meet the 80286 requirements. 


Reset 
Drive EFI Drive and 
Measurement 
Points 
elK Output 
Measurement 
Points 


~ 


,ov 


1.5V 
1.5V 


O,45V 
210453-7 
\; 
1.0V 


210453-8 
~ 
.45 
- 
ClJ( 
OUTPUT 


OTHER 
DEVICE 
OUTf'IIT 


:"ao---l~I 


NOTE: 
The EFI input lOW and HIGH times 
as shown 
are required 
to guarantee 
the elK lOW and HIGH times 
shown. 


RESET and READY Timing 
as a Function 
of RES with S1, SO, ARDY + ARDYEN, 
and SRDY + 
SRDYEN 
High 


NOTE: 
1. This is an asynchronous 
input. The setup and hold times 
shown 
are required 
to guarantee 
the response 
shown. 
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NOTES: 
1. This is an asynchronous 
input. The setup and hold times 
shown 
are required 
to guarantee 
the response 
shown. 


2. If SRDY + SRDYEN 
or ARDY + ARDYEN 
are active 
before 
and/or 
during 
the first bus cycle 
after 
RESET. J=lEAI:5Y 
may not be deasserted 
until after the falling 
edge of </>2 of Tg. 


~ 
1.6 
~ 
'" 
1.5 
!< 
U 
S 
1.3 
N 
~ 
1.2 


~ 
1.1 
oz 
U 
..2 
0.9 


12 


1.04 
1.03 
1.02 
1.01 
1 
0.99 
0.98 
0.97 
0.96 
0.95 
0.94 
0.93 
0.92 
0.91 
0.9 
0.89 
o 


CASE TEMPERATURE. 
"C 
2310453-17 


The following 
list represents 
key differences 
between 
this and the -010 data sheet. Please review this summa- 


ry carefully. 


1. The DC Characteristics 
Input Sustaining 
Current on So and Sl pins (110 has been changed 
from 
- 30 p.A to 
-60 
/LA. 
' 


2. The AC Timing 
parameter 
SRDY or SRDYEN 
setup time (tll) 
has been changed 
to 17.5 ns for the 10 MHz 
and 17 ns for the 12.5 MHz parts. 
• 
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8086 
16-BIT HMOS MICROPROCESSOR 
8086/8086-2/8086-1 
• Direct Addressing 
Capability 
1 MByte 
• Range of Clock Rates: 
of Memory 
5 MHz for 8086, 
• Architecture 
Designed 
for Powerful 
8 MHz for 8086-2, 


Assembly 
Language 
and Efficient 
High 
10 MHz for 8086-1 


Level Languages 
• MUL TIBUS System 
Compatible 
• 14 Word, by 16-Blt Register 
Set with 
Interface 


Symmetrical 
Operations 
• Available 
In EXPRESS 
• 24 Operand 
Addressing 
Modes 
- 
Standard 
Temperature 
Range 
- 
Extended 
Temperature 
Range 
• Bit, Byte, Word, and Block Operations 
Available 
In 40-Lead 
Cerdlp and Plastic 
• 
• 8 and 16-Blt Signed and Unsigned 
Package 
Arithmetic 
In Binary or Decimal 
(See 
Packaging 
Spec. 
Order 
#231369) 
Including 
Multiply and Divide 


The Intel 8086 high performance 
16-bit CPU is available 
in three clock 
rates: 5, 8 and 10 MHz. The CPU is 3 


implemented 
in N-Channel, 
depletion 
load, 
silicon 
gate 
technology 
(HMOS-III), 
and packaged 
in a 40-pin 
CERDIP or plastic package. 
The 8086 operates 
in both single processor 
and multiple 
processor 
configurations 
to achieve 
high performance 
levels. 


IUS INTERFACE 
UNIT 


I 
AElOCATlON 
I 
REGISTER 
FILE 


DATA. 


POINTER. 
AND 
INDEX REGS 
"WORDS' 


(HOLD) 


(HLOA) 


(Wil) 
(w/iO) 


(DT/R) 


(DEN) 


(ALE) 


(lNTA) 


fEST-_ 
",-- 
...,-- 


~I~ 
2 


HOlD-- 
"LDA 


40 Lead 


Figure 2. 8086 Pin 
Configuration 


The fol/owing pin function 
descriptions 
are for 8086 systems 
in either minimum 
or maximum 
mode. 
The "Local 
Bus" 
in these 
descriptions 
is the direct 
multiplexed 
bus interface 
connection 
to the 8086 (without 
regard 
to 
additional 
bus buffers). 


Symbol 
Pin No. 
Type 
Name and Function 


AD15-ADo 
2-16.39 
1/0 
ADDRESS 
DATA BUS: These lines constitute 
the time multiplexed 
memoryllO 
address 
(T1), and data (T2, T3. Tw. T4) bus. Ao is 
analogous 
to SHE for the lower byte of the data bus, pins 07-00' 
It is 
lOW 
during T 1 when a byte is to be transferred 
on the lower portion 
of the bus in memory or I/O operations. 
Eight-bit oriented 
devices tied 
to the lower half would normally 
use Ao to condition 
chip select 
functions. 
(See SHE.) These lines are active HIGH and float to 3-state 
OFF during interrupt 
acknowledge 
and local bus "hold acknowledge". 


A19/S6. 
35-38 
0 
ADDRESS/STATUS: 
During T1 these are the four most significant 


A1S/S5, 
address lines for memory operations. 
During 1/0 operations 
these 


A17/S4. 
lines are lOW. 
During memory and I/O operations, 
status information 


A16/S3 
is available 
on these lines during T2, T3, Tw. T4. The status of the 
interrupt 
enable FLAG bit (S5) is updated 
at the beginning 
of each 
ClK 
cycle. A17/S4 
and A16/S3 
are encoded 
as shown. 
This information 
indicates 
which relocation 
register is presently 
being 
used for data accessing. 
These lines float to 3-state OFF during local bus "hold 
acknowledge." 


An/S4 
A16/Sa 
Characteristics 


o (lOW) 
0 
Alternate 
Data 
0 
1 
Stack 
1 (HIGH) 
0 
Code or None 
1 
1 
Data 
SaisO 
(lOW) 


SHE/S7 
34 
0 
BUS HIGH ENABLE/STATUS: 
During T1 the bus high enable signal 
(SHE) should be used to enable data onto the most significant 
half of 
the data bus. pins D15-Da. 
Eight-bit oriented 
devices tied to the upper 
half of the bus would normally use SHE to condition 
chip select 
functions. 
SHE is lOW 
during T1 for read, write. and interrupt 
acknowledge 
cycles when a byte is to be transferred 
on the high 
portion of the bus. The S7 status information 
is available 
during T2. 
T3, and T4. The signal is active lOW, 
and floats to 3-state OFF in 
"hold". 
It is lOW 
during T 1 for the first interrupt 
acknowledge 
cycle. 


BHE 
Ao 
Characteristics 


0 
0 
Whole word 
0 
1 
Upper byte fromlto 
odd address 
1 
0 
lower 
byte from/to 
even address 
1 
1 
None 


RD 
32 
0 
READ: Read strobe indicates 
that the processor 
is performing 
a 
memory or I/O read cycle. depending 
on the state of the S2 pin. This 
signal is used to read devices which reside on the 8086 local bus. RD 
is active lOW 
during T2, T3 and Tw of any read cycle. and is 
guaranteed 
to remain HIGH in T2 until the 8086 local bus has floated. 


This signal floats to 3-state OFF in "hold 
acknowledge". 


Symbol 
Pin No. 
Type 
Name and Function 


READY 
22 
I 
READY: is the acknowledgement 
from the addressed 
memory or I/O 
device that it will complete 
the data transfer. 
The READY signal from 
memory/IO 
is synchronized 
by the 8284A Clock Generator 
to form 
READY. This signal is active HIGH. The 8086 READY input is not 
synchronized. 
Correct operation 
is not guaranteed 
if the setup and hold 
times are not met. 


INTR 
18 
I 
INTERRUPT 
REQUEST: 
is a level triggered 
input which is sampled 
during the last clock cycle of each instruction 
to determine 
if the 
processor 
should enter into an interrupt 
acknowledge 
operation. 
A 
subroutine 
is vectored 
to via an interrupt vector lookup table located 
in 
system memory. 
It can be internally 
masked by software 
resetting 
the 
interrupt enable bit. INTR is internally 
synchronized. 
This signal is 
active HIGH. 


TEST 
23 
I 
TEST: input is examined 
by the "Wait" 
instruction. 
If the TEST input is 
LOW execution 
continues, 
otherwise 
the processor 
waits in an "Idle" 
state. This input is synchronized 
internally 
during each clock cycle on 
the leading edge of CLK. 


NMI 
17 
I 
NON-MASKABLE 
INTERRUPT: 
an edge triggered 
input which causes 
a type 2 interrupt. 
A subroutine 
is vectored 
to via an interrupt vector 
lookup table located in system memory. 
NMI is not maskable 
internally 
by software. 
A transition 
from LOW to HIGH initiates the interrupt 
at the 
end of the current instruction. 
This input is internally 
synchronized. 


RESET 
21 
I 
RESET: causes the processor 
to immediately 
terminate 
its present 
activity. The signal must be active HIGH for at least four clock cycles. 
It 
restarts execution, 
as described 
in the Instruction 
Set description, 
when 
RESET returns LOW. RESET is internally 
synchronized. 


CLK 
19 
I 
CLOCK: provides 
the basic timing for the processor 
and bus controller. 
It is asymmetric 
with a 33% duty cycle to provide optimized 
internal 
timing. 


Vro.c 
40 
Vcc: + 5V power supply pin. 


GND 
1,20 
GROUND 


MN/MX 
33 
I 
MINIMUM/MAXIMUM: 
indicates 
what mode the processor 
is to 
operate in. The two modes are discussed 
in the following 
sections. 


The following pin function descriptions are for the 8086/8288 system in maximum mode (i.e., MN/MX = VssJ. 
Only the pin functions which are unique to maximum mode are described; all other pin functions are as 
described above. 


52,51, 
So 
26-28 
0 
STATUS: 
active during T4, T 1, and T2 and is returned 
to the passive state 
(1, 1, 1) during T3 or during Tw when READY is HIGH. This status is used 
by the 8288 Bus Controller 
to generate 
all memory and I/O access control 
signals. Any change 
by 52, 51, or So during T4 is used to indicate the 
beginning 
of a bus cycle, and the return to the passive state in T3 or Tw is 
used to indicate the end of a bus cycle. 
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Symbol 
Pin No. 
Type 
Name and Function 


82,81,80 
26-28 
0 
These signals float to 3-state OFF in "hold 
acknowledge". 
These status 
(Continued) 
lines are encoded 
as shown. 


S2 
S1 
So 
Characteristics 


o (lOW) 
0 
0 
Interrupt 
Acknowledge 
0 
0 
1 
Read I/O Port 
0 
1 
0 
Write I/O Port 
0 
1 
1 
Halt 
1 (HIGH) 
0 
0 
Code Access 
1 
0 
1 
Read Memory 
1 
1 
0 
Write Memory 
1 
1 
1 
Passive 


RQ/GTo, 
30,31 
I/O 
REQUEST IGRANT: 
pins are used by other local bus masters to force 
RQ/GT1 
the processor 
to release the local bus at the end of the processor's 
current bus cycle. Each pin is bidirectional 
with RQ/GT 0 having higher 
priority than RQ/GT 1. RQ/GT 
pins have internal 
pull-up resistors 
and 
may be left unconnected. 
The request/grant 
sequence 
is as follows 
(see Page 2-24): 
1. A pulse of 1 ClK 
wide from another 
local bus master indicates 
a local 
bus request ("hold") 
to the 8086 (pulse 1). 
2. During aT 4 or T 1 clock cycle, a pulse 1 ClK 
wide from the 8086 to 
the requesting 
master (pulse 2), indicates 
that the 8086 has allowed the 
local bus to float and that it will enter the "hold 
acknowledge" 
state at 
the next ClK. 
The CPU's bus interface 
unit is disconnected 
logically 
from the local bus during "hold 
acknoWledge". 
3. A pulse 1 ClK 
wide from the requesting 
master indicates 
to the 8086 
(pulse 3) that the "hold" 
request is about to end and that the 8086 can 
reclaim the local bus at the next ClK. 
Each master-master 
exchange 
of the local bus is a sequence 
of 3 
pulses. There must be one dead ClK 
cycle after each bus exchange. 


Pulses are active lOW. 
\ 


If the request is made while the CPU is performing 
a memory cycle, it 
will release the local bus during T4 of the cycle when all the following 
conditions 
are met: 
1. Request occurs on or before T2. 
2. Current cycle is not the low byte of a word (on an odd address). 
3. Current cycle is not the first acknowledge 
of an interrupt 
acknowledge 
sequence. 
4. A locked instruction 
is not currently 
executing. 


If the local bus is idle when the request is made the two possible 
events 
will follow: 
1. local 
bus will be released 
during the next clock. 
2. A memory cycle will start within 3 clocks. 
Now the four rules for a 
currently 
active memory cycle apply with condition 
number 
1 already 
satisfied. 


lOCK 
29 
0 
LOCK: output indicates 
that otheo6istem 
bus masters are not to gain 
control 
of the system bus while L 
K is active lOW. 
The lOCK 
signal 
is activated 
by the "lOCK" 
prefix instruction 
and remains active until the 
completion 
of the next instruction. 
This signal is active lOW, 
and floats 
to 3-state OFF in "hold acknowledge". 


Symbol 
PIn No. 
Type 
Name and Function 


QS1, QSo 
24,25 
0 
QUEUE STATUS: 
The queue status is valid during the CLK cycle after 
which the queue operation 
is performed. 
QS1 and QSo provide status to allow external tracking 
of the internal 
8086 instruction 
queue. 


QS1 
QSo 
Characteristics 
o (LOW) 
0 
No Operation 
0 
1 
First Byte of Op Code from Queue 
1 (HIGH) 
0 
Empty the Queue 
1 
1 
Subsequent 
Byte from Queue 


The fol/owing 
pin function 
descriptions 
are for the 8086 in minimum 
mode (i.e., MN/MX 
= Vcd 
Only the pin 
funct(ons 
which are unique 
to minimum 
mode are described; 
aI/ other pin functions 
are as described 
above. 


M/iO 
28 
0 
STATUS 
LINE: logically equivalent 
to S2 in the maximum 
mode. It is used to 
distinguish 
a memory access from an 1/0 access. 
MIlO 
becomes 
valid in 
the T4 preceding 
a bus cycle and remains valid until the final T4 of the cycle 
(M = HIGH, 10= LOW). MilO 
floats to 3-state OFF in local bus "hold 
acknowledge" 
. 


WR 
29 
0 
WRITE: 
indicates 
that the processor 
is performing 
a write memory or write 
1/0 cycle, depending 
on the state of the MilO 
signal. WR is active for T2, T3 
and Tw of any write cycle. It is active LOW, and floats to 3-state OFF in 
local bus "hold 
aC,knowledge". 


INTA 
24 
0 
INTA: is used as a read strobe for interrupt 
acknowledge 
cycles. 
It is active 
LOW during T2, T3 and Tw of each interrupt 
acknowledge 
cycle. 


ALE 
25 
0 
ADDRESS 
LATCH 
ENABLE: 
provided 
by the processor 
to latch the 
address 
into the 8282/8283 
address 
latch. It is a HIGH pulse active during 
T1 of any bus cycle. Note that ALE is never floated. 


DT/R 
27 
0 
DATA TRANSMIT/RECEIVE: 
needed in minimum 
system that desires to 
use an 8286/8287 
data bus transceiver. 
It is used to control the direction 
of 
data flow through the transceiver. 
Logically 
DTIA is equivalent 
to S1 in the 
maximum 
mode, and its timing is the same as for MilO. 
(T = HIGH, R = 
LOW.) This signal floats to 3-state OFF in local bus "hold acknowledge". 


DEN 
26 
0 
DATA ENABLE: 
provided 
as an output enable for the 8286/8287 
in a 
minimum system which uses the transceiver. 
DEN is active LOW during 
each memory and 1/0 access and for INTA cycles. For a read or INTA cycle 
it is active from the middle of T 2 until the middle of T4, while for a write cycle 
it is active from the beginning 
of T2 until the middle of T4. DEN floats to 3- 
state OFF in local bus "hold acknowledge". 


HOLD, 
31,30 
1/0 
HOLD: indicates 
that another 
master is requesting 
a local bus "hold." 
To be 
HLDA 
acknowledged, 
HOLD must be active HIGH. The processor 
receiving 
the 
"hold" 
request will issue HLDA (HIGH) as an acknowledgement 
in the 
middle of a T4 or Tj clock cycle. Simultaneous 
with the issuance 
of HLDA 
the processor 
will float the local bus and control 
lines. After HOLD is 
detected 
as being LOW, the processor 
will LOWer the"HLDA, 
and when the 
processor 
nee9s to run another 
cycle, it will again drive the local bus and 
control 
lines. Hold acknowledge 
(HLDA) and HOLD have internal pull-up 
resistors. 
The same rules as for RQ/Gf 
apply regarding 
when the local bus will be 
released. 
HOLD is not an asynchronous 
input. External synchronization 
should be 
provided 
if the system cannot otherwise 
guarantee "the setup time. 
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The internal functions of the 8086 processor are 
partitioned logically into two processing units. The 
first is the Bus Interface Unit (BIU) and the second is 
the Execution Unit (EU) as shown in the block dia- 
gram of Figure 1. 


These units can interact directly but for the most 
part perform as separate asynchronous operational 
processors. The bus interface unit provides the func- 
tions related to instruction fetching and queuing, op- 
erand fetch and store, and address relocation. This 
unit also provides the basic bus control. The overlap 
of instruction pre-fetching provided by this unit 
serves to increase processor performance through 
improved bus bandwidth utilization. Up to 6 bytes of 
the instruction stream can be queued while waiting 
for decoding and execution. 


The instruction stream queuing mechanism allows 
the BIU to keep the memory utilized very efficiently. 
Whenever there is space for at least 2 bytes in the 
queue, the BIU will attempt a word fetch memory 
cycle. This greatly reduces "dead time" 
on the 
memory bus. The queue acts as a First-In-First-Out 
(FIFO) buffer, from which the EU extracts instruction 
bytes as required. If the queue is empty (following a 
branch instruction, for example), the first byte into 
the queue immediately becomes available to the EU. 


The execution unit receives pre-fetched instructions 
from the BIU queue and provides un-relocated oper- 
and addresses to the BIU. Memory operands are 
passed through the BIU for processing by the EU, 
which passes results to the BIU for storage. See the 
Instruction Set description for further register set 
and architectural descriptions. 


The processor provides a 20-bit address to memory 
which locates the byte being referenced. The memo- 
ry is organized as a linear array of up to 1 million 


bytes, addressed as OOOOO(H)to FFFFF(H). The 
memory is logically divided into code, data, extra 
data, and stack segments of up to 64K bytes each, 
with each segment falling on 16-byte boundaries. 
(See Figure 3a.) 


All memory references are made relative to base ad- 
dresses contained in high speed segment registers. 
The segment types were chosen based on the ad- 
dressing needs of programs. The segment register 
to be selected is automatically chosen according to 
the rules of the following table. All information in one 
segment type share the same logical attributes (e.g. 
code or data). By structuring memory into relocat- 
able areas of similar characteristics and by automati· 
cally selecting segment registers, programs are 
shorter, faster, and more structured. 


Word (16-bit) operands can be located on even or 
odd address boundaries and are thus not con- 
strained to even boundaries as is the case in many 
16-bit computers. For address and data operands, 
the least significant byte of the word is stored in the 
lower valued address location and the most signifi- 
cant byte in the next higher address location. The 
BIU automatically performs the proper number of 
memory accesses, one if the word operand is on an 
even byte boundary and two if it is on an odd byte 
boundary. Except for the performance penalty, this 
double access is transparent to the software. This 
performance penalty does not occur for instruction 
fetcjles, only word operands. 


Physically, the memory is organized as a high bank 
(015-08) 
and a low bank (07-00) 
of 512K 8-bit 
bytes addressed in parallel by the processor's ad- 
dress lines A19-A1. Byte data with even addresses 
is transferred on the 07-00 
bus lines while odd ad- 
dressed byte data (Ao HIGH) is transferred on the 
015-08 bus lines. The processor provides two en- 
able signals, BHE and Ao, to selectively allow read- 
irig from or writing into either an odd byte location, 
even byte location, or both. The instruction stream is 
fetched from memory as words and is addressed 
internally by the processor to the byte level as nec- 
essary. 


Memory 
Segment 
Register 
Segment 
Reference 
Need 
Used 
Selection 
Rule 


Instructions 
COOE(CS) 
Automatic with all instruction prefetch. 


Stack 
STACK (SS) 
All stack pushes and pops. Memory references relative to BP 
base register except data references. 


LocalOata 
OATA (OS) 
Oata references when: relative to stack, destination of string 
operation, or explicitly overridden. 


External (Global) Oata 
EXTRA (ES) 
Oestination of string operations: explicitly selected using a 
segment override. 
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Figure 3a. Memory Organization 


In referencing word data the BIU requires one or two 
memory cycles depending on whether or not the 
starting byte of the word is on 'an even or odd ad- 
dress, respectively. Consequently, in referencing 
word operands performance can be optimized by lo- 
cating data on even address boundaries. This is an 
especially useful technique for using the stack, since 
odd address references to the stack may adversely 
affect the context switching time for interrupt pro- 
cessing or task multiplexing. 


~ESET 
'OOTST~AP 
P~OO~AM 
JUMP 


INTERRUPT 
POINTER 
FO~ 
TYPE 255 
3 


7 
INTERRUPT 
POINTER 
FOA TYPE 
1 
• 
INTERRUPT 
POINTER 
3 


FOA TYPE 0 
0 


Figure 3b. Reserved Memory Locations 


Certain locations in memory are reserved for specific 
CPU operations (see Figure 3b). locations 
from 


address FFFFOHthrough FFFFFH are reserved for 
operations including a jump to the initial program 
loading routine. Following RESET, the CPU will al- 
ways begin execution at location FFFFOHwhere the 
jump must be. locations OOOOOHthrough 003FFH 
are reserved for interrupt operations. Each of the 
256 possible interrupt types has its service routine 
pointed to by a 4-byte pointer element consisting of 
a 16-bit segment address and a 16-bit offset ad- 
dress. The pointer elements are assumed to have 
been stored at the respective places in reserved 
memory prior to occurrence of interrupts. 


The requirements for supporting minimum and maxi- 
mum 8086 systems are sufficiently different that 
they cannot be done efficiently with 40 uniquely de- 
fined pins. Consequently, the 8086 is equipped with 
a strap pin (MN/MX) which defines the system con- 
figuration. The definition of a certain subset of the 3 
pins changes dependent on the condition of the 
strap pin. When MN/MX pin is strapped to GND, the 
8086 treats pins 24 through 31 in maximum mode. 
An 8288 bus controller interprets status information 
coded into SQ, 52, 52 to generate bus timing and 
control signals compatible with the MUl TIBUS ar- 
chitecture. When the MN/MX pin is strapped to Vcc, 
the 8086 generates bus control signals itself on pins 
24 through 31, as shown in parentheses in Figure 2. 
Examples of minimum mode and maximum mode 
systems are shown in Figure 4. 


The 8086 has a combined address and data bus 
commonly referred to as a time multiplexed bus. 
This technique provides the most efficient use of 
pins on the processor while permitting the use of a 
standard 40-lead package. This "local bus" can be 
buffered directly and used throughout the system 
with address latching provided on memory and 1/0, 
modules. In addition, the bus can also be demulti- 
plexed at the processor with a single set of address 
latches if a standard non-multiplexed bus is desired 
for the system. 


Each processor bus cycle consists of at least four 
ClK cycles. These are referred to as T1, T2, T3 and 
T4 (see Figure 5). The address is emitted from the 
processor during T1 and data transfer occurs on the 
bus during T3 and T4. T2 is used primarily for chang- 
ing the direction of the bus during read operations. In 
the event that a "NOT READY" indication is given 
by the addressed device, "Wait" states (Tw) are in- 
serted between T3 and T4. Each inserted "Wait" 
state is of the same duration as a ClK cycle. Periods 
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can occur between 8086 bus cycles. These are re- 
ferred to as "Idle" states (Ti) or inactive elK cycles. 
The processor uses these cycles for internal house- 
keeping. 


During T1 of any bus cycle the ALE (Address latch 
Enable) signal is emitted (by either the processor or 
the 8288 bus controller, depending on the MN/MX 
strap). At the trailing edge of this pulse, a valid ad- 
dress and certain status information for the cycle 
may be latched. 


Status bits SQ, 51, and S2 are used, in maximum 
mode, by the bus controller to identify the type of 
bus transaction according to the following table: 


52 
51 
50 
Characteristics 
o (lOW) 
0 
0 
Interrupt Acknowledge 


0 
0 
1 
Read I/O 


0 
1 
0 
Write I/O 


0 
1 
1 
Halt 


1 (HIGH) 
0 
0 
Instruction Fetch 


1 
0 
1 
Read Data from Memory 


1 
1 
0 
Write Data to Memory 


1 
1 
1 
Passive (no bus cycle) 


(4 + "wAlf! '" Tev-----1' 


T2 
TJ 
TWAlT 
I 
T. 


(4 + NwAITJ 
'" ley -----_.1 


T2 
T3 
T"",IT I 
T. 


\~- 


-----8__ 
D_AT_A_D_UT_'_D,_.-D_~ 
__ 
)-- 
~ 


\_-_/ 


• 


Status 
bits S3 through 
S7 are multiplexed 
with high- 
order 
address 
bits 
and 
the 
SHE 
signal, 
and 
are 
therefore 
valid during T2 through 
T4. S3 and S4 indi- 
cate which segment 
register 
(see Instruction 
Set de- 
scription) 
was used for this bus cycle in forming 
the 
address, 
according 
to the following 
table: 


S4 
S3 
Characteristics 
o (lOW) 
0 
Alternate 
Oata (extra segment) 


0 
1 
Stack 


1 (HIGH) 
0 
Code or None 


1 
1 
Oata 


S5 is a reflection 
of the 
PSW interrupt 
enable 
bit. 


S6 = 0 and S7 is a spare status bit. 


In the 
8086, 
I/O 
operations 
can 
address 
up to a 
maximum 
of 64K I/O byte registers 
or 32K I/O word 
registers. 
The I/O address 
appears 
in the same for- 
mat as the memory 
address 
on bus lines A15-Ao. 


The address 
lines A19-A16 
are zero in I/O 
opera- 
tions. The variable 
I/O instructions 
which 
use regis- 
ter OX as a pointer 
have full address 
capability 
while 
the 
direct 
I/O 
instructions 
directly 
address 
one 
or 
two of the 256 I/O 
byte locations 
in page 0 of the 
I/O address 
space. 


I/O 
ports 
are 
addressed 
in the 
same 
manner 
as 
memory 
locations. 
Even addressed 
bytes are trans- 
ferred 
on the 07-00 
bus lines and odd addressed 
bytes on 015-08. 
Care must be taken to assure that 
each 
register 
within 
an 8-bit 
peripheral 
located 
on 
the lower portion 
of the bus be addressed 
as even. 


Processor 
initialization 
or start 
up is accomplished 
with activation 
(HIGH) of the RESET 
pin. The 8086 
RESET 
is required 
to be HIGH for greater 
than 
4 
ClK 
cycles. 
The 8086 will terminate 
operations 
on 
the high-going 
edge of RESET and will remain 
dor- 
mant 
as long 
as RESET 
is HIGH. 
The 
low-going 
transition 
of 
RESET 
triggers 
an internal 
reset 
se- 
quence 
for approximately 
10 ClK 
cycles. 
After this 
interval 
the 8086 
operates 
normally 
beginning 
with 
the instruction 
in absolute 
location 
FFFFOH (see Fig- 
ure 3b). The details of this operation 
are specified 
in 
the Instruction 
Set description 
of the MCS-86 Family 
User's 
Manual. 
The 
RESET 
input 
is internally 
syn- 
chronized 
to the processor 
clock. At initialization 
the 
HIGH-to-lOW 
transition 
of RESET 
must 
occur 
no 
sooner than 50 /-Ls after power-up, 
to allow complete 
initialization 
of the 8086. 


NMI asserted 
prior to the 2nd clock after the end of 
RESET will not be honored. 
If NMI is asserted 
after 
that 
point 
and during 
the 
internal 
reset 
sequence, 


the 
processor 
may execute 
one 
instruction 
before 
responding 
to the 
interrupt. 
A hold 
request 
active 
immediately 
after RESET will be honored 
before the 
first instruction 
fetch. 


All 
3-state 
outputs 
float 
to 
3-state 
OFF 
during 
RESET. Status is active 
in the idle state for the first 
clock 
after 
RESET 
becomes 
active 
and then floats 
to 3-state 
OFF. ALE and HlOA 
are driven 
low. 


Interrupt 
operations 
fall into two classes; 
software 
or 
hardware 
initiated. 
The software 
initiated 
interrupts 
and 
software 
aspects 
of 
hardware 
interrupts 
are 
specified 
in the 
Instruction 
Set 
description. 
Hard- 
ware interrupts 
can be classified 
as non-maskable 
or 
maskable. 


Interrupts 
result in a transfer 
of control 
to a new pro- 
gram 
location. 
A 256-element 
table 
containing 
ad- 
dress pointers 
to the interrupt 
service 
program 
loca- 
tions 
resides 
in absolute 
locations 
0 through 
3FFH 
(see Figure 3b), which are reserved 
for this purpose. 
Each 
element 
in the 
table 
is 4 bytes 
in size and 
corresponds 
to an interrupt 
"type". 
An interrupting 
device 
supplies 
an 8-bit type number, 
during the in- 
terrupt 
acknowledge 
sequence, 
which 
is used 
to 
"vector" 
through the appropriate 
element 
to the new 
interrupt 
service 
program 
location. 


The processor 
provides 
a single non-maskable 
inter- 
rupt 
pin (NMI) 
which 
has 
higher 
priority 
than 
the 
maskable 
interrupt 
request 
pin (INTR). A typical 
use 
would 
be to activate 
a power 
failure 
routine. 
The 
NMI is edge-triggered 
on a lOW-to-HIGH 
transition. 


The activation 
of this pin causes 
a type 2 interrupt. 


(See Instruction 
Set description.) 


NMI is required to have a duration 
in the HIGH state 
of greater than two ClK 
cycles, but is not required to 
be synchronized 
to the clock. 
Any high-going 
tran- 
sition of NMI is latched 
on-chip 
and will be serviced 
at the 
end 
of 
the 
current 
instruction 
or between 
whole moves of a block-type 
instruction. 
Worst case 
response 
to NMI would 
be for multiply, 
divide, 
and 
variable 
shift 
instructions. 
There 
is no specification 
on the occurrence 
of the low-going 
edge; it may oc- 
cur before, 
during, or after the servicing 
of NMI. An- 
other high-going 
edge triggers 
another 
response 
if it 
occurs after the start of the NMI procedure. 
The sig- 
nal must be free of logical 
spikes 
in general 
and be 
free of bounces 
on the low-going 
edge to avoid trig- 


gering extraneous 
responses. 


The 8086 provides a single interrupt request input 
(INTR) which can be masked internally by software 
with the resetting of the interrupt enable FLAG 
status bit. The interrupt request signal is level trig- 
gered. It is internally synchronized during each clock 
cycle on the high-going edge of CLK. To be re- 
sponded to, INTR must be present (HIGH) during 
the clock period preceding the end of the current 
instruction or the end of a whole move for a block- 
type instruction. During the interrupt response se- 
quence further interrupts are disabled. The enable 
bit is reset as part of the response to any interrupt 
(INTR, NMI, software interrupt or single-step), al- 
though the FLAGS register which is automatically 
pushed onto the stack reflects the state of the proc- 
essor prior to the interrupt. Until the old FLAGS reg- 
ister is restored the enable bit will be zero unless 
specifically set by an instruction. 


During the response sequence (Figure 6) the proc- 
essor executes two successive (back-to-back) inter- 
rupt acknowledge cycles. The 8086 emits the LOCK 
signal from T2 of the first bus cycle until T2 of the 
second. A local bus "hold" request will not be hon- 
ored until the end of the second bus cycle. In the 
second bus cycle a byte is fetched from the external 
interrupt system (e.g., 8259A PIC) which identifies 
the source (type) of the interrupt. This byte is multi- 
plied by four and used as a pointer into the interrupt 
vector lookup table. An INTR signal left HIGH will be 
continually responded to within the limitations of the 
enable bit and sample period. The INTERRUPT RE- 
TURN instruction includes a FLAGS pop which re- 
turns the status of the original interrupt enable bit 
when it restores the FLAGS. 


When a software "HALT" instruction is executed the 
processor indicates that it is entering the "HALT" 
state in one of two ways depending upon which 
mode is strapped. In minimum mode, the processor 
issues one ALE with no qualifying bus control sig- 
nals. In maximum mode, the processor issues ap- 
propriate HALT status on 82, 81, and 80; and the 
8288 bus controller issues one ALE. The 8086 will 
not leave the "HALT" state when a local bus "hold" 
is entered while in "HALT". In this case, the proces- 
sor reissues the HALT indicator. An interrupt request 
or RESET will force the 8086 out of the "HALT" 
state. 


READ/MODIFY/WRITE 
(SEMAPHORE) 
OPERATIONS VIA LOCK 


The LOCK status information is provided by the 
processor when directly consecutive bus cycles are 
required 
during 
the 
execution 
of 
an 
instruc- 3 


tion. This provides the processor with the capability 
of 
performing 
read/modify/write 
operations 
on 
memory (via the Exchange Register With Memory 
instruction, for example) without the possibility of an- 
other system bus master receiving intervening mem- 
ory cycles. This is useful in multi-processor system 
configurations to accomplish "test and set lock" op- 
erations. The LOCK signal is activated (forced LOW) 
in the clock cycle following the one in which the soft- 
ware "LOCK" prefix instruction is decoded by the 
EU. It is deactivated at the end of the last bus cycle 
of the instruction following the "LOCK" 
prefix in- 
struction. While LOCK is active a request on a RO/ 
GT pin will be recorded and then honored at the end 
of the LOCK. 
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As an alternative to the interrupts and general 1/0 
capabilities, the 8086 provides a single software- 
testable input known as the TEST signal. At any time 
the program may execute a WAIT instruction. If at 
that time the TEST signal is inactive (HIGH), pro- 
gram execution becomes suspended while the proc- 
essor waits for TEST to become active. It must 
remain active for at least 5 elK 
cycles. The WAIT 
instruction is re-executed repeatedly until that time. 
This activity does not consume bus cycles. The 
processor remains in an idle state while waiting. All 
8086 drivers go to 3-state OFF if bus "Hold" is en- 
tered. If interrupts are enabled, they may occur while 
the processor is waiting. When this occurs the proc- 
essor fetches the WAIT instruction one extra time, 
processes the interrupt, and then re-fetches and re- 
executes the WAIT instruction upon returning from 
the interrupt. 


Typical system configurations for the processor op- 
erating in minimum mode and in maximum mode are 
shown in Figures 4a and 4b, respectively. In mini- 
mum mode, the MN/MX pin is strapped to Vcc and 
the processor emits bus control signals in a manner 
similar to the 8085. In maximum mode, the MN/MX 
pin is strapped to Vss and the processor emits cod- 
ed status information which the 8288 bus controller 
uses to generate MUl TISUS compatible bus control 
signals. Figure 5 illustrates the signal timing relation- 
ships. 
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The read cycle begins in T1 with the assertion of the 
Address latch Enable (ALE) signal. The trailing (Iow- 
going) edge of this signal is used to latch the ad- 
dress information, which is valid on the local bus at 
this time, into the address latch. The SHE and Ao 
signals address the low, high, or both bytes. From T1 
to T4 the MilO 
signal indicates a memory or 110 
operation. At T2 the address is removed from the 
local bus and the bus goes to a high impedance 
state. The read control signal is also asserted at T2. 
The read (RO) signal causes the addressed device 
to enable its data bus drivers to the local bus. Some 
time later valid data will be available on the bus and 
the addressed device will drive the READY line 
HIGH. When the processor returns the read signal to 
a HIGH level, the addressed device will again 3- 
state its bus drivers. If a transceiver is required to 
buffer the 8086 local bus, signals OT/Fi and DEN 
are provided by the 8086. 


A write cycle also begins with the assertion of ALE 
and the emission of the address. The M/iO signal is 
again asserted to indicate a memory or 1/0 write 
operation. In the T2 immediately following the ad- 
dress emission the processor emits the data to be 
written into the addressed location. This data re- 
mains valid until the middle of T4. During T2, T3, and 
Tw the processor asserts the write control signal. 
The write (WR) signal becomes active at the begin- 
ning of T2 as opposed to the read which is delayed 
somewhat into T2 to provide time for the bus to float. 


The SHE and Ao signals are used to select the prop- 
er byte(s) of the memoryllO word to be read or writ- 
ten according to the follOWingtable: 


BHE 
AO 
Characteristics 


0 
0 
Whole word 
0 
1 
Upper byte fromlto 
odd address 
1 
0 
lower byte fromlto 
even address 
1 
1 
None 


110 ports are addressed in the same manner as 
memory location. Even addressed bytes are trans- 
ferred on the 07-00 bus lines and odd addressed 
bytes on 015-08. 


The basic difference between the interrupt acknowl- 
edge cycle and a read cycle is that the interrupt ac- 
knowl~e 
signal (INTA) is asserted in place of the 
read (RO) signal and the address bus is floated. 
(See Figure 6.) In the second of two successive 
INTA cycles, a byte of information is read from bus 
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lines 07-00 as supplied by the inerrupt system logic 
(Le., 8259A Priority Interrupt Controller). This byte 
identifies the source (type) of the interrupt. It is multi- 
plied by four and used as a pointer into an interrupt 
vector lookup table, as described earlier. 


For medium size systems the MN/MX pin is con- 
nected to Vss and the 8288 Bus Controller is added 
to the system as well as a latch for latching the sys- 
tem address, and a transceiver to allow for bus load- 
ing greater than the 8086 is capable of handling. 
Signals ALE, DEN, and DT/R" are generated by the 
8288 instead of the processor in this configuration 
although their timing remains relatively the same. 
The 8086 status outputs (52, 51, and So) provide 
type-of-cycle information and become 8288 inputs. 
This bus cycle information specifies read (code, 
data, 
or 
I/O), 
write 
(data 
or 
I/O), 
interrupt 


acknowledge, or software halt. The 8288 thus issues 
control signals specifying memory read or write, I/O 
read or write, or interrupt acknowledge. The 8288 
provides two types of write strobes, normal and ad- 
vanced, to be applied as required. The normal write 
strobes have data valid at the leading edge of write. 
The advanced write strobes have the same timing 
as read strobes, and hence data isn't valid at the 
leading edge of write. The transceiver receives the 
usual DIR and G inputs from the 8288's DT/A and 
DEN. 


The pointer into the interrupt vector table, which is 
passed during the second INTA cycle, can derive 
from an 8259A located on either the local bus or the 
system bus. If the master 8259A Priority Interrupt 
Controller is positioned on the local bus, a TTL gate 
is required to disable the transceiver when reading 
from the master 8259A during the interrupt acknowl- 
edge sequence and software "poll". • 
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• WARNING: Stressing the device beyond the "Absolute 
Maximum 
Ratings" 
may 
cause 
permanent 
damage. 
These are stress ratings 
only. Operation 
beyond 
the 


"Operating 
Conditions" 
is not recommended 
and ex· 


tended 
exposure 
beyond 
the 
"Operating 
Conditions" 


may affect device reliability. 


Ambient 
Temperature 
Under Bias 
O·C to 70·C 


Storage Temperature 
- 65·C to + 150·C 


Voltage 
on Any Pin with 
Respect 
to Ground 
-1.0V 
to + 7V 


Power Dissipation 
2.5W 


D.C. CHARACTERISTICS 
(8086: 
TA = OOCto 70·C, Vee = 5V ±10%) 
(8086·1:TA 
= 0·Ct070·C, 
Vee = 5V ±5%) 
(8086·2: TA = O·C to 70·C, Vee = 5V ± 5%) 


Symbol 
Parameter 
Min 
Max 
Units 
Test Conditions 


VIL 
Input Low Voltage 
--':0.5 
+0.8 
V 
(Note 1) 


VIH 
Input High Voltage 
2.0 
Vee + 0.5 
V 
(Notes 1. 2) 


VOL 
Output Low Voltage 
0.45 
V 
IOL = 2.5 mA 


VOH 
Output High Voltage 
2.4 
V 
IOH = - 
400 /LA 


Ice 
Power Supply Current: 8086 
340 
8086·1 
360 
mA 
TA = 25·C 
8086·2 
350 


III 
Input Leakage Current 
±10 
/LA 
OV ::;;VIN ::;;Vee (Note 3) 


ILO 
Output Leakage Current 
±10 
/LA 
0.45V 
::;;Your ::;;Vee 


VeL 
Clock Input Low Voltage 
-0.5 
+0.6 
V 


VeH 
Clock Input High Voltage 
3.9 
Vee + 1.0 
V 


CIN 
Capacitance 
of Input Buffer 
15 
pF 
fc = 1 MHz 
(All input except 


ADo-AD1S' 
RQ/GT) 


CIO 
Capacitance 
of I/O Buffer 
15 
pF 
fc = 1 MHz 
(ADo-AD1S. 
RQ/GT) 


NOTES: 
1. VIL tested with MN/MX Pin = OV.VIH tested with MN/MX Pin = SV. MN/MX Pin is a Strap Pin. 
2. Not applicable to RO/GTO and RO/GTI 
(Pins 30 and 31). 


3. HOLD and HLDA III min = 30 /-LA,max = SOO/-LA. 
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A.C. CHARACTERISTICS 
(8086: 
TA = 0·Ct010·C, 
VCC = 5V ± 10%) 
(8086-1: TA = O·C to 70·C, VCC = 5V ± 5%) 
(8086-2: TA = O·C to 70·C, VCC = 5V ± 5%) 


Symbol 
Parameter 
8086 
8086·1 
8086·2 
Units 
Test Conditions 
Min 
Max 
Mln 
Max 
Mln 
Max 


TClCl 
ClK 
Cycle Period 
200 
500 
100 
500 
125 
500 
ns 


TClCH 
ClKlowTime 
118 
53 
68 
ns 


TCHCl 
ClK 
High Time 
69 
39 
44 
ns 


TCH1CH2 
ClK 
Rise Time 
10 
10 
10 
ns 
From 1.0V to 3.5V 


TCL2Cl1 
ClK 
Fall Time 
10 
10 
10 
ns 
From 3.5V to 1.0V 


TDVCl 
Data in Setup Time 
30 
5 
20 
ns 


TClDX 
Data in Hold Time 
10 
10 
10 
ns 


TR1VCl 
ROY Setup Time 
35 
35 
35 
ns 
into 8284A (See 
Notes 1, 2) 


TClR1X 
ROY Hold Time 
0 
0 
0 
ns 
into 8284A (See 
Notes 1, 2) 


TRYHCH 
READY Setup 
118 
53 
68 
ns 
Time into 8086 


TCHRYX 
READY Hold Time 
30 
20 
20 
ns 
into 8086 


TRYlCl 
READY Inactive to 
-8 
-10 
-8 
ns 
ClK 
(See Note 3) 


THVCH 
HOLD Setup Time 
35 
20 
20 
ns 


TINVCH 
INTR, NMI, TEST 
30 
15 
15 
ns 
Setup Time (See 
Note 2) 


TILIH 
Input Rise Time 
20 
20 
20 
ns 
From 0.8V to 2.0V 
(Except ClK) 


TIHll 
Input Fall Time 
12 
12 
12 
ns 
From 2.0V to 0.8V 
(Except ClK) 
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Symbol 
Parameter 
8086 
8086-1 
8086·2 
Units 
Test 


Mln 
Max 
Mln 
Max 
Mln 
Max 
Conditions 


TCLAV 
Address Valid Delay 
10 
110 
10 
50 
10 
60 
ns 


TCLAX 
Address Hold Time 
10 
10 
10 
ns 


TCLAZ 
Address Float 
TCLAX 
80 
10 
40 
TCLAX 
50 
ns 
Delay 


TLHLL 
ALE Width 
TCLCH-20 
TCLCH-10 
TCLCH-10 
ns 


TCLLH 
ALE Active Delay 
80 
40 
50 
ns 


TCHLL 
ALE Inactive Delay 
85 
45 
55 
ns 


TLLAX 
Address Hold Time 
TCHCL-10 
TCHCL-10 
TCHCL-10 
ns 


TCLDV 
Data Valid Delay 
10 
110 
10 
50 
10 
60 
ns 
·CL = 20-100 
pF 


TCHDX 
Data Hold Time 
10 
10 
10 
for all 8086 
ns 
Outputs (In 


TWHDX 
Data Hold Time 
TCLCH-30 
TCLCH-25 
TCLCH-30 
ns 
addition to 8086 
AfterWA 
selfload) 


TCVCTV 
Control Active 
10 
110 
10 
50 
10 
70 
ns 
Delay 1 


TCHCTV 
Control Active 
10 
110 
10 
45 
10 
60 
ns 
Delay 2 


TCVCTX 
Control Inactive 
10 
110 
10 
50 
10 
70 
ns 
Delay 


TAZAL 
Address Float to 
0 
0 
0 
ns 
AEADActive 


TCLAL 
AD Active Delay 
10 
165 
10 
70 
10 
100 
ns 


TCLAH 
AD Inactive Delay 
10 
150 
10 
60 
10 
80 
ns 


TAHAV 
AD Inactive to Next 
TCLCL-45 
TCLCL-35 
TCLCL-40 
ns 
Address Active· 


TCLHAV 
HLDA Valid Delay 
10 
160 
10 
60 
10 
100 
ns 


TALAH 
AD Width 
2TCLCL-75 
2TCLCL-40 
2TCLCL-50 
ns 


TWLWH 
WAWidth 
2TCLCL-60 
2TCLCL-35 
2TCLCL·40 
ns 


TAVAL 
Address Valid to 
TCLCH-60 
TCLCH-35 
TCLCH-40 
ns 
ALE Low 


TOLOH 
Output Aise Time 
20 
20 
20 
ns 
From 0.8V to 2.0V 


TOHOL 
Output Fall Time 
12 
12 
12 
ns 
From 2.0V to 0.8V 


NOTES: 
1. Signal 
at 8284A 
shown 
for reference 
only. 
2. Setup 
requirement 
for asynchronous 
signal only to guarantee 
recognition 
at next eLK. 
3. Applies 
only to T2 state. 
(8 ns into T3). 
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DEVICE 
UNDER 
TEST 


A.C. Testing: Inputs are driven at 2.4V lor a Logic "1" and 0.45V 
lor a Logic "0". Timing measurements are made at 1.5V lor both 
a Logic "1" and "0". 


READ CYCLE 


(NOTE 
11 


(WII,IIITA. 
VOM) 
DT/A 


• 


AD".ADo 


WAITE 
CYCLE 
TCVCTX 


(/loTE 
f) 
DEN 
~,*~I 


WA 


TCLAZ 


AD..-ADo 


INTA 
CYCLE 
DT/A 


(NOTES' 
a 31 


1iII, WII-VOH 
TCVCTV- 
lRr-vou 
iiiTA 


DEN 


SOFTWARE HALT- 
RD, WR, INTA ~ VoH 
DT/R ~ INDETERMINATE 


NOTES: 
1. All signals switch between VOH and VOL unless otherwise specified. 
2. RDY is sampled near the end of T2. T3. Tw to determine if Tw machines states are to be inserted. 
3. Two INTA cycles run back-to-back. The 8086 LOCAL ADDR/DATA BUS is floating during both INTA cycles. Control 
signals shown for second INTA cycle. 
4. Signals at 8284A are shown for reference only. 
5. All timing measurements are made at 1.5V unless otherwise noted. 


MAX MODE 
SYSTEM 
(USING 
8288 BUS CONTROLLER) 
TIMING 
REQUIREMENTS 


Symbol 
Parameter 
8086 
8086-1 
8086-2 
Units 
Test 


Mln 
Max 
Mln 
Max 
Mln 
Max 
Conditions 


TClCl 
ClK 
Cycle Period 
200 
500 
100 
500 
125 
500 
ns 


TClCH 
ClKlowTime 
118 
53 
68 
ns 


TCHCl 
ClK 
High Time 
69 
39 
44 
ns 


TCH1CH2 
ClK 
Rise Time 
10 
10 
10 
ns 
From 1.0V to 3.5V 


TCl2Cl1 
ClK 
Fall Time 
10 
10 
10 
ns 
From 3.5V to 1.0V 


mVCl 
Data in Setup Time 
30 
5 
20 
ns 


TClDX 
Data in Hold Time 
10 
10 
10 
ns 


TR1VCl 
ROY Setup Time 
35 
35 
35 
ns 
into 8284A 
(Notes 1, 2) 


TClR1X 
ROY Hold Time 
0 
0 
0 
ns 
into 8284A 
(Notes 1, 2) 


TRYHCH 
READY Setup 
118 
53 
68 
ns 
Time into 8086 


TCHRYX 
READY Hold Time 
30 
20 
20 
ns 
into 8086 


TRYlCl 
READY Inactive to 
-8 
-10 
-8 
ns 
ClK 
(Note 4) 


TINVCH 
Setup Time for 
30 
15 
15 
ns 
Recognition 
(INTR, 
NMI, TEST) 
(Note 2) 


TGVCH 
RQ/GT 
Setup Time 
30 
15 
15 
ns 
(Note 5) 


TCHGX 
RQ Hold Time into 
40 
20 
30 
ns 
8086 


TILIH 
Input Rise Time 
20 
20 
20 
ns 
From 0.8V to 2.0V 
(Except ClK) 


TIHll 
Input Fall Time 
12 
12 
12 
ns 
From 2.0V to 0.8V 
(Except ClK) 


• 
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Symbol 
Parameter 
8086 
8086-1 
8086-2 
Units 
Test 


Mln 
Max 
Mln 
Max 
Mln 
Max 
Conditions 


TCLML 
Command 
Active 
10 
35 
10 
35 
10 
35 
os 
Delay (See Note 1) 


TCLMH 
Command 
Inactive 
10 
35 
10 
35 
10 
35 
ns 
Delay (See Note 1) 


TRYHSH 
READY Active to 
110 
45 
65 
ns 
Status Passive (See 
Note 3) 


TCHSV 
Status Active Delay 
10 
110 
10 
45 
10 
60 
ns 


TCLSH 
Status Inactive 
10 
130 
10 
55 
10 
70 
ns 
Delay 


TCLAV 
Address 
Valid Delay 
10 
110 
10 
50 
10 
60 
ns 


TCLAX 
Address 
Hold Time 
10 
10 
10 
ns 


TCLAZ 
Address 
Float Delay 
TCLAX 
80 
10 
40 
TCLAX 
50 
ns 


TSVLH 
Status Valid to ALE 
15 
15 
15 
ns 
High (See Note 1) 


TSVMCH 
Status Valid to 
15 
15 
15 
ns 
MCE High (See 
Note 1) 


TCLLH 
CLK Low to ALE 
15 
15 
15 
os 
CL = 20-100 pF 
Valid (See Note 1) 
for all 8086 


TCLMCH 
CLK Low to MCE 
15 
·15 
15 
ns 
Outputs 
(In 
addition to 8086 
High (See Note 1) 
self-load) 


TCHLL 
ALE Inactive Delay 
15 
15 
15 
ns 
(See Note 1) 


TCLMCL 
MCE Inactive Delay 
15 
15 
15 
ns 
(See Note 1) 


TCLDV 
Data Valid Delay 
10 
110 
10 
50 
10 
60 
ns 


TCHDX 
Data Hold Time 
10 
10 
10 
ns 


TCVNV 
Control Active 
5 
45 
5 
45 
5 
45 
ns 
Delay (See Note 1) 


TCVNX 
Control 
Inactive 
10 
45 
10 
45 
10 
45 
ns 
Delay (See Note 1) 


TAZRL 
Address 
Float to 
0 
0 
0 
ns 
READ Active 


TCLRL 
RD Active Delay 
10 
165 
10 
70 
10 
100 
ns 


TCLRH 
RD Inactive 
Delay 
10 
150 
10 
60 
10 
80 
ns 
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Symbol 
Parameter 
8086 
8086·1 
8086·2 
Units 
Test 


Mln 
Max 
Mln 
Max 
Mln 
Max 
Conditions 


TRHAV 
RD Inactive to Next 
TCLCL-45 
TCLCL-35 
TCLCL-40 
ns 
Address 
Active 


TCHDTL 
Direction 
Control 
50 
50 
50 
ns 
CL = 20-100 
pF 
Active Delay 
for all 8086 


(Note 1) 
Outputs 
(In 
addition to 8086 
TCHDTH 
Direction 
Control 
30 
30 
30 
ns 
self-load) 
Inactive 
Delay 
(Note 1) 


TCLGL 
GT Active Delay 
0 
85 
0 
38 
0 
50 
ns 


TCLGH 
GT Inactive 
Delay 
0 
85 
0 
45 
0 
50 
ns 


TRLRH 
RD Width 
2TCLCL-75 
2TCLCL-40 
2TCLCL·50 
ns 


TOLOH 
Output Rise Time 
20 
20 
20 
ns 
From 0.8V to 2.0V 


TOHOL 
Output Fall Time 
12 
12 
12 
ns 
From 2.0V to 0.8V 


NOTES: 
1. Signal 
at 8284A 
or 8288 shown 
for reference 
only. 


2. Setup 
requirement 
for asynchronous 
signal only to guarantee 
recognition 
at next eLK. 


3. Applies 
only to T3 and wait states. 
4. Applies 
only to T2 state 
(8 ns into T3). 
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1 


ALE (8211 OUTPUT) 


SEE NOTE 5 


RDY (I2IOA 
INPUT) 


NOTES: 
1. All signals 
switch 
between 
VOH and VOL unless 
otherwise 
specified. 


2. RDY is sampled 
near the end of T2, T3, Tw to determine 
if Tw machines 
states 
are to be inserted. 
3. Cascade 
address 
is valid between 
first and second 
INTA cycle. 
4. Two 
INTA cycles 
run back-to-back. 
The 8086 
LOCAL 
ADDR/DATA 
BUS is floating 
during 
both 
INTA cycles. 
Control 
for 
pointer 
address 
is shown 
for second 
INTA cycle. 
5. Signals 
at 8284A 
or 8288 are shown 
for reference 
only. 


6. The issuance 
of the 8288 
command 
and control 
signals 
(MRDC, 
MWTC, 
AMWC, 
IORC, IOWC, AIOWC, 
INTA and DEN) 


lags the active 
high 8288 CEN. 


7. All timing 
measurements 
are made at 1.5V unless 
otherwise 
noted. 
8. Status 
inactive 
in state just prior to T4. 


• 


CLK 


NMI 
1,-,: 
INTA 


TEST 


NOTE: 
1. Setup 
requirements 
for asynchronous 
signals 
only to guarantee 
recognition 
at next elK. 


BUS LOCK SIGNAL 
TIMING 
(MAXIMUM 
MODE 
ONLY) 


-LOCK 
~",,- 
T-J'~Y 


NOTE: 
The coprocessor 
may not drive the buses 
outside 
the region 
shown 
without 
risking 
contention. 
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COPR~ESSOR 
• 


Mnemonic and 
Deacrlptlon 


DATA TRANSFER 


MOV = Move: 


Register/Memory to/from Register 


Immediate to Register/Memory 


Immediate to Register 


Memory to Accumulator 


Accumulator to Memory 


Register/Memory to Segment Register 


Segment Register to Register/Memory 


Register/Memory 


Register 


Segment Register 


Register/Memory 


Register 


Segment Register 


Register/Memory with Register 


Register with Accumulator 


IN = Input from: 


Fixed Port 


Variable Port 


OUT = Output to: 


Fixed Port 


Variable Port 


XLAT = Translate Byte to AL 


LEA = Load EA to Register 


LOS = Load Pointer to OS 


LES ~ Load Pointer to ES 


LAHF = Load AH with Flags 


SAHF = Store AH into Flags 


PUSHF = Push Flags 


POPF = Pop Flags 


Table 2. Instruction set Summary 


I 
Inatructlon Code 


100010dw 


1100011 
w 


1011 
wreg 


1010000w 


1010001w 


10001110 


10001100 


76543210 
76543210 


mod 
reg 
rIm 


modOOOr/m 
data 


data 
dataifw 
= 1 


addr-Iow 
addr-high 


addr·low 
addr·high 


modO reg r/m 


mod o reg r/m 


mod 11 Or/m 
11111111 


01010reg 


000reg110 


01011 
reg 


000reg111 


1000011w 


10010reg 


11010111 


10001101 


11000101 


11000100 


10011111 


10011110 


10011100 


10011101 


mod reg r/m 


mod reg r/m 


mod reg r/m 
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Table 2. Instruction 
Set Summary (Continued) 
I 
Inatructlon Code 


ARITHMETIC 


ADD ~ Add: 


Reg.lMemory with Register to Either 


Immediate to Register/Memory 


Immediate to Accumulator 


ADC = Add with Carry: 


Reg.lMemory with Register to Either 


Immediate to Register/Memory 


Immediate to Accumulator 


INC = Increment: 


Register/Memory 


Register 


AAA ~ ASCII Adjust for Add 


BAA = Decimal Adjust for Add 


SUB ~ Subtract: 


Reg.lMemory and Register to Either 


Immediate from Register/Memory 


Immediate from Accumulator 


SSB ~ Subtract with Borrow 


Reg.l Memory and Register to Either 


Immediate from Register/Memory 


Immediate from Accumulator 


DEC ~ Decrement: 


Register/ memory 


Register 


NEG = Change sign 


CMP = Compare: 


Register/Memory and Register 


Immediate with Register/Memory 


Immediate with Accumulator 


AAS ~ ASCII Adjust for Subtract 


DAS ~ Decimal Adjust for Subtract 


MUL = Multiply (Unsigned) 


IMUL = Integer Multiply (Signed) 


AAM ~ ASCII Adjust for Multiply 


DIY ~ Divide (Unsigned) 


IDlY ~ Integer Divide (Signed) 


AAD ~ ASCII Adjust for Divide 


CBW ~ Convert Byte to Word 


CWO ~ Convert Word to Double Word 


OOOOOOdw 


100000sw 


0000010w 


mod regr/m 


mod 00 0 rim 


data 


000100dw 


100000sw 


0001010w 


mod reg r/m 


modO 1 Or/m 


data 


01000reg 


00110111 


00100111 


001010dw 


100000sw 


0010110w 


mod reg r/m 


mod 101 rim 


000110dw 


100000sw 


mod reg r/m 


modO 11 rim 


data 


1111111w 


01001 
reg 


1111011 
w 


0011110w 


00111111 


00101111 


1111011 
w 


11010100 


1111011 
w 


11010101 


10011000 


10011001 


mod reg rim 


mod 111 rim 


data 


mod100r/m 


mod 1 01 rim 


mod 11 Or/m 


mod 111 rim 


data 


dataifw = 1 


data 


dataifw = 1 


data 


dataifw 
~ 1 


data 


dataifw 
~ 1 


• 
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Reg.! Memory and Register to Either 


Immediate to RegisterlMemory 


Immediate to Accumulator 


TEST = And Function 
to Flags, 
No Result: ,...------.-------, 
RegisterlMemory and Register 


LOGIC 


NOT = Invert 


SHLISAL 
= Shift Logical! Arithmetic Left 


SHR = Shift Logical Right 


SAR = Shift Arithmetic Right 


ROL = Rotate Left 


ROR = Rotate Right 


RCL = Rotate Through Carry Flag Left 


RCR = Rotate Through Carry Right 


Immediate Data and RegisterlMemory 


Immediate Data and Accumulator 


Reg.!Memory and Register to Either 


Immediate to RegisterlMemory 


Immediate to Accumulator 


XOR = Exclusive 
or: 


Reg.! Memory and Register to Either 


Immediate to RegisterlMemory 


Immediate to Accumulator 


STRING 
MANIPULATION 


REP = Repeat 


MOYS 
= Move BytelWord 


CMPS = Compare BytelWord 


SCAS 
= Scan BytelWord 


LODS = Load BytelWd to ALl AX 


STOS 
= Stor BytelWd from ALl A 


CONTROL 
TRANSFER 


CALL = Call: 


Direct w~hin Segment 


Indirect within Segment 


Direct Intersegment 


76543210 
76543210 


11 t 1 011 w 
modO 1 Or/m 


110100vw 
mod 1 OOr/m 


110100vw 
mod 101 
rIm 


110100vw 
modl11 
rIm 


ltOl00vw 
modOOOr/m 


110100vw 
modOOl 
rIm 


110100vw 
mod 010 
rIm 


110100vw 
modO 11 rIm 


001000dw 
mod reg rIm 


1000000w 
mod 1 OOr/m 


0010010w 
data 


1000010w 
mod reg rIm 


1111011w 
modOOOr/m 


1010100w 
data 


000010dw 
mod reg rIm 


1000000w 
modOOl 
rIm 


0000110w 
data 


001100dw 
mod reg rIm 


1000000w 
mod 11 Or/m 


0011010w 
data 


1111001 
z 


1010010w 


1010011 
w 


1010111 
w 


1010110w 


1010101 
w 


data 


dataifw 
= 1 


data 


dataifw = 1 


11101000 


1 t 111111 


disp-Iow 


modO 1 Or/m 


sag-low 


mod011 
rIm 


offset-high 


seg-high 


JMP =Unconditional 
Jump: 


Direct w~hin Segment 


Direct within Segment-Short 


Indirect within Segment 


Direct Intersegment 


RET - 
Return from CALL: 


Within Segment 


Wrthin Seg Adding Immed to SP 


Intersegment 


Intersegment Adding Immediate to SP 


JE/JZ = Jump on Equal/Zero 


JLlJNGE = Jump on less/Not 
Greater 
or Equal 
JLE/JNG = Jump on less or Equal/ 
Not Greater 


JB/JNAE 
~ Jump on Below/Not Above 
or Equal 
JBE/JNA 
= Jump on Below or Equal/ 
Not Above 
JP/JPE = Jump on Parity/Parity Even 


JO = Jump on Overflow 


JS = Jump on Sign 


JNE/JNZ = Jump on Not Equal/Not Zero 


JNLlJGE = Jump on Not less/Greater 
or Equal 
JNLE/JG = Jump on Not less or Equal/ 
Greater 
JNB/JAE ~ Jump on Not Below/Above 
or Equal 
JNBE/JA = Jump on Not Below or 
Equal/ Above 
JNP/JPO = Jump on Not Par/Par Odd 


JNO = Jump on Not Overflow 


JNS = Jump on Not Sign 


LOOP = loop ex Times 


LOOPZlLOOPE = loop While Zero/Equal 


LOOPNZlLOOPNE = loop While Not 
Zero/Equal 
JCXZ = Jump on ex Zero 


76543210 


11101001 


11111111 


11101010 


11000011 


11000010 


11001011 


11001010 


01110100 


01111100 


disp-Iow 


disp 


mod 1 OOr/m 


seg-Iow 


mod 101 rIm 


76543210 


disp-high 


offset-high 


seg-high 


data-low 
data-high 


data-low 
data-high 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


type 


01110010 


01110110 


01111010 


01110000 


01111000 


01110101 


01111101 


INT = Interrupt 


Type Specified 


Type 3 


INTO = Interrupt on Overflow 


IRET = Interrupt Return 


01110011 


01110111 


01111011 


01110001 


01111001 


11100010 


11100001 


11100000 


11100011 


11001101 


11001100 


11001110 


11001111 


Mnemonic 
and 
Description 
I 


76543210 


11111000 


11110101 


11111001 


11111100 


11111101 


11111010 


11111011 


11110100 


10011011 


1101 
1 xxx 


11110000 


CLC = Clear Carry 


CMC = Complement 
Carry 


STC ~ Set Carry 


STD = Set Direction 


CLI = Clear Interrupt 


STI = Set Interrupt 


HLT 
~ Halt 


WAIT = Wait 


ESt = Escape (to External Device) 


LOCK = Bus Lock Prefix 


NOTES: 
Al = 8-bit accumulator 
AX = 16-bit accumulator 
CX = Count register 
DS = Data segment 
ES = Extra segment 
Above/below refers to unsigned value 
Greater = more positive; 
less = less positive (more negative) signed values 
if d = 1 then "to" reg; if d = 0 then "from" reg 
if w = 1 then word instruction; if w = 0 then byte instruc- 
tion 
if mod = 11 then rim is treated as a REG field 
if mod = 00 then DISP = 0·, disp-Iow and disp-high are 
absent 
if mod = 
01 then DISP = 
disp-Iow sign-extended to 
16 bits, disp-high is absent 
if mod = 10 then DISP = disp-high; disp-Iow 
if rim = 000 then EA = (BX) + (SI) + DISP 
if rim = 001 then EA = (BX) + (DI) + DISP 
if rim = 010 then EA = (BP) + (SI) + DISP 
if rim = 011 then EA = (BP) + (DI) + DISP 
if rim = 100 then EA = (SI) + DISP 
if rim = 101 then EA = (DI) + DISP 
if rim = 110 then EA = (BP) + DISp· 
if rim = 111 then EA = (BX) + DISP 
DISP follows 2nd byte of instruction (before data if re- 
quired) 
·except if mod = 00 and rim = 110 then EA = disp-high; 
disp-Iow. 
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if s w = 01 then 16 bits of immediate data form the oper- 
and 
if s w = 11 then an immediate data byte is sign extended 
to form the 16-bit operand 
if v = 0 then "count" = 1; if v = 1 then "count" in (Cl) 
x = don't care 
z is used for string primitives for comparison with ZF FLAG 


SEGMENT 
OVERRIDE 
PREFIX 
I 
001regll0 
I 


REG is assigned according to the following table: 


16-Blt (w = 1) 
8·Blt (w = 0) 
Segment 


000 
AX 
000 
AL 
00 
ES 
001 
CX 
001 
CL 
01 
CS 
010 
DX 
010 
DL 
10 
SS 
011 
BX 
011 
BL 
11 
DS 
100 
SP 
100 
AH 
101 
BP 
101 
CH 
110 
SI 
110 
DH 
111 
DI 
111 
BH 


Instructions which reference the flag register file as a 16-bit 
object use the symbol FLAGS to represent the file: 


FLAGS 
~ 
X:X:X:X:(OF):(DF):(IF):(TF):(SF):(ZF):X:(AF):X:(PF):X:(CF) 


The following 
list represents 
key differences 
between 
this and the -004 data sheet. Please review this summa- 
ry carefully. 


1. The Intel 8086 implementation 
technology 
(HMOS) 
has been changed 
to (HMOS-III). 


2. Delete 
all "changes 
from 
1985 Handbook 
Specification" 
sentences. 
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80C86A 
16·BIT CHMOS MICROPROCESSOR 


• 
• 
Pin-for-Pln and Functionally Compatible 
to Industry Standard HMOS 8086 


• 
Fully Static Design with Frequency 
Range from D.C. to: 
- 
8 MHz for 80C86A·2 


• 
Low Power Operation 
-Operating 
Icc = 10 mA/MHz 
- 
Standby Iccs = 500 ,..,Amax 


• 
Bus-Hold Circuitry Eliminates Pull-Up 
Resistors 


• 
Direct Addressing 
Capability of 
1 MByte of Memory 


• 
Architecture 
Designed for Powerful 
Assembly Language and Efficient High 
Level Languages 


• 
24 Operand Addressing 
Modes 


• 
Byte, Word and Block Operations 


• 
8 and 16·Bit Signed and Unsigned 
Arithmetic 
- 
Binary or Decimal 
- 
Multiply and Divide 


• 
Available in 40-Lead Plastic DIP 


The Intel 80C86A 
is a high performance, 
CHMOS 
version 
of the industry 
standard 
HMOS 8086 
16-bit CPU. 
The 80C86A 
available 
in 8 MHz clock 
rates, offers two modes 
of operation: 
MINimum 
for small systems 
and 


MAXimum 
for larger applications 
such as multiprocessing. 
It is available 
in 40-pin 
DIP package. 


Figure 
1. 80C86A 
CPU Block 
Diagram 
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Figure 
2. 80C86A 
4D-Lead 
DIP Configuration 
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Table 1. Pin Description 


The following 
pin function 
descriptions 
are for 80C86AA 
systems 
in either minimum 
or maximum 
mode. 
The 
"Local 
Bus" 
in these descriptions 
is the direct multiplexed 
bus interf8ce 
connection 
to the 80C86A 
(without 
regard 
to additional 
bus buffers). 


Symbol 
Pin No. 
Type 
Name and Function 


AD15-ADo 
2-16.39 
I/O 
ADDRESS 
OAT A BUS: These lines constitute 
the time multiplexed 
memory/IO 
address (T1) and data (T2. T3. Tw. T4) bus. Ao is 
analogous 
to SHE for the lower byte of the data bus. pins 07- Do. It 
is lOW 
during T 1 when a byte is to be transferred 
on the lower 
portion of the bus in memory or I/O operations. 
Eight-bit oriented 
devices tied to the lower half would normally 
use Ao to condition 
chip select functions. 
(See SHE.) These lines are active HIGH and 
float to 3-state OFF(1) during interrupt 
acknowledge 
and local bus 
"hold 
acknowledge." 


A19/S6. 
35-38 
0 
ADDRESS/STATUS: 
During T 1 these are the four most significant 


A16/S5. 
address lines for memory operations. 
During I/O operations 


AU/S4. 
these lines are lOW. 
During memory and I/O operations. 


A16/S3 
status information 
is available 
on these lines during T2. T3. Tw. 
and T4. The status of the interrupt 
enable FLAG bit (S5) is updated 
at the beginning 
of each ClK 
cycle. AU/S4 
and A16/S3 are 
encoded 
as shown. 


This information 
indicates 
which relocation 
register is presently 
being used for data accessing. 


These lines float to 3-state OFF(1) during local bus "hold 
acknowledge. 
" 


A17/S4 
A16/Sa 
Characteristics 
o (lOW) 
0 
Alternate 
Data 
0 
1 
Stack 
1 (HIGH) 
0 
Code or None 
1 
1 
Data 


S6isO 
(lOW) 


SHE/S7 
34 
0 
BUS HIGH ENABLE/STATUS: 
During T1 the bus high enable signal 
(SHE) should be used to enable data onto the most significant 
half 
of the data bus. pins 015-06. 
Eight-bit oriented 
devices tied to the 
upper half of the bus would normally 
use SHE to condition 
chip 
select functions. 
SHE is lOW 
during T1 for read. write. and interrupt 
acknowledge 
cycles when a byte is to be transferred 
on the high 
portion of the bus. The S7 status information 
is available 
during T2. 
T3. and T4. The signal is active lOW. 
and floats to 3-state OFF(1) in 
"hold." 
It is lOW 
during T1 for the first interrupt 
acknowledge 
cycle. 


BHE 
Ao 
Characteristics 


0 
0 
Whole word 
0 
1 
Upper byte from/ 
to odd address 
1 
0 
lower 
byte from/ 
to even address 
1 
1 
None 
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Symbol 
Pin No. 
Type 
Name and Function 


RD 
32 
0 
READ: Read strobe indicates 
that the processor 
is performing 
a 
memory of I/O read cycle, depending 
on the state of the S2 pin. 
This signal is used to read devices which reside on the 80C86A 
local bus. RD is active lOW 
during T2, T3 and Tw of any read cycle, 
and is guaranteed 
to remain HIGH in T2 until the 80C86A 
local bus 
has floated. 


This floats to 3-state OFF in "hold 
acknowledge." 


READY 
22 
I 
READY: 
is the acknowledgement 
from the addressed 
memory or 
I/O device that it will complete 
the data transfer. 
The READY signal 
from memoryllO 
is synchronized 
by the 82C84A 
Clock Generator 
to form READY. This signal is active HIGH. The 80C86A 
READY 
input is not synchronized. 
Correct operation 
is not guaranteed 
if the 
setup and hold times are not met. 


INTR 
18 
I 
INTERRUPT 
REQUEST: 
is a level triggered 
input which is sampled 
during the last clock cycle of each instruction 
to determine 
if the 
processor' should enter into an interrupt acknowledge 
operation. 
A 
subroutine 
is vectored 
to via an interrupt vector 
lookup table 
located 
in system memory. 
It can be internally 
masked by software 
resetting 
the interrupt 
enable bit. INTR is internally 
synchronized. 
This signal is active HIGH. 


TEST 
23 
I 
TEST: input is examined 
by the "Wait" 
instruction. 
If the TEST input 
is lOW 
execution 
continues, 
otherwise 
the processor 
waits in an 
"Idle" 
state. This input is synchronized 
internally 
during each clock 
cycle on the leading edge of ClK. 


NMI 
17 
I 
NON-MASKABLE 
INTERRUPT: 
an edge triggered 
input which 
causes a type 2 interrupt. 
A subroutine 
is vectored 
to via an 
interrupt vector 
lookup table located 
in system memory. 
NMI is not 
maskable 
internally 
by software. 
A transition 
from a lOW 
to HIGH 
initiates the interrupt at the end of the current instruction. 
This input 
is internally 
synchronized. 


RESET 
21 
I 
RESET: causes the processor 
to immediately 
terminate 
its present 
activity. The signal must be active HIGH for at least four clock 
cycles. It restarts execution, 
as described 
in the Instruction 
Set 
description, 
when RESET returns lOW. 
RESET is internally 
synchronized. 


ClK 
19 
I 
CLOCK: 
provides 
the basic timing for the processor 
and bus 
controller. 
It is asymmetric 
with a 33% duty cycle to provide 
optimized 
internal timing. 


Vcc 
40 
Vcc: + 5V power supply pin. 


GND 
1,20 
GROUND: 
Both must be connected. 


MN/MX 
33 
I 
MINIMUM/MAXIMUM: 
indicates 
what mode the processor 
is to 
operate 
in. The two modes are discussed 
in the following 
sections. 


• 


Table 
1. Pin Description 
(Continued) 
The following pin 
function descriptions are for the 80C86A/82C88 
system in maximum mode (i.e., 
MN/MX= 
Vssl. Only the pin functions which are unique to maximum mode are described; all other pin func- 
tions are as described above. 


Symbol 
Pin No. 
Type 
Name and Function 


52,51,50 
26-28 
0 
STATUS: 
active during T4, T1, and T2 and is returned 
to the passive 
state (1,1,1) during T3 or during Tw when READY is HIGH. This 
status is used by the 82C88 Bus Controller 
to generate 
all memory 
and I/O access control 
signals. Any change 
by 52, 51, 50 during T4 
is used to indicate the beginning 
of a bus cycle, and the return to the 
passive state in T3 or Tw is used to indicate the end of a bus cycle. 


These signals float to 3-state OFF(1) in "hold acknowledge." 
These 
status lines are encoded 
as shown. 


S2 
S1 
So 
Characteristics 
o (lOW) 
0 
0 
Interrupt 
Acknowledge 
0 
0 
1 
Read I/O Port 
0 
1 
0 
Write I/O Port 
0 
1 
1 
Halt 
1 (HIGH) 
0 
0 
Code Access 
1 
0 
1 
Read Memory 
1 
1 
0 
Write Memory 
1 
1 
1 
Passive 


RQ/GTo, 
30,31 
I/O 
REQUEST IGRANT: 
pins are used by other local bus masters to 
RQ/GT1 
force the processor 
to release the local bus at the end of the 
processor's 
current bus cycle. Each pin is bidirectional 
with RQ/GT 0 
having higher priority than RQ/GT 1. RQ/GT 
has an internal 
pull-up 
resistor so may be left unconnected. 
The request/grant 
sequence 
is 
as follows 
(see timing diagram): 


1. A pulse of 1 ClK 
wide from another 
local bus master indicates 
a 
local bus request ("hold") 
to the 80C86A 
(pulse 1). 
2. During a T4 or T1 clock cycle, a pulse 1 ClK 
wide from the 
80C86A to the requesting 
master (pulse 2), indicates 
that the 
80C86A 
has allowed the local bus to float and that it will enter the 
"hold acknowledge" 
state at the next ClK. 
The CPU's bus interface 
unit is disconnected 
logically from the local bus during "hold 
acknowledge." 
3. A pulse 1 ClK 
wide from the requesting 
master indicates 
to the 
80C86A 
(pulse 3) that the "hold" 
request is about to end and that 
80C86A can reclaim the local bus at the next ClK. 


Each master-master 
exchange 
of the local bus is a sequence 
of 3 
pulses. There must be one dead ClK 
cycle after each bus exchange. 
Pulses are active lOW. 


If the request is made while the CPU is performing 
a memory cycle, it 
will release the local bus during T4 of the cycle when all the following 
conditions 
are met: 


1. Request 
occurs on or before T2. 
2. Current cycle is not the low byte of a word (on an odd address). 
3. Current cycle is not the first acknowledge 
of an interrupt 
acknowledge 
sequence. 
4. A locked instruction 
is not currently -executing. 
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Symbol 
Pin No. 
Type 
Name and Function 


If the local bus is idle when the request is made the two possible 
events will follow: 


1. Local bus will be released 
during the next clock. 
2. A memory cycle will start within 3 clocks. 
Now the four rules for a 
currently 
active memory cycle apply with condition 
number 1 already 
satisfied. 


LOCK 
29 
0 
LOCK: output indicates 
that other system bus masters are not to gain 
control 
of the system bus while LOCK is active LOW. The LOCK 
signal is activated 
by the "LOCK" 
prefix instruction 
and remains 
active until the completion 
of the next instruction. 
This signal is active 
LOW, and floats to 3-state OFF(l) 
in "hold 
acknowledge." 


QS1,QSO 
24,25 
0 
QUEUE STATUS: 
The queue status is valid during the CLK cycle 
after which the queue operation 
is performed. 


QSl 
and QSo provide status to allow external tracking 
of the internal 
80C86A 
instruction 
queue. 


QS1 
QSo 
Characteristics 


o (LOW) 
0 
No Operation 
0 
1 
First Byte of Op Code from Queue 
1 (HIGH) 
0 
Empty the Queue 
1 
1 
Subsequent 
Byte from Queue 


The following 
pin function 
descriptions 
are for the BOCB6A in minimum 
mode (i.e., MN/MX= 
Vcc). 
Only the 
pin functions 
which are unique 
to minimum 
mode are described; 
all other pin functions 
are described 
above. 


MilO 
28 
0 
STATUS 
LINE: logically equivalent 
to S2 in the maximum 
mode. It 
is used to distinguish 
a memory access from an 1/0 access. 
MilO 
becomes 
valid in the T4 preceding 
a bus cycle and remains valid 
until the final T4 of the cycle (M = HIGH, 10= LOW). MilO 
floats to 
3-state OFF(l) 
in local bus "hold acknowledge." 


WR 
29 
0 
WRITE: indicates 
that the processor 
is performing 
a write memory 
or write 1/0 cycle, depending 
on the state of the MilO 
signal. WR is 
active for T2, T3 and Tw of any write cycle. It is active LOW, and 
floats to 3-state OFF(l) 
in local bus "hold acknowledge." 


INTA 
24 
0 
INTA is used as a read strobe for interrupt 
acknowledge 
cycles. It is 
active LOW during T2, T3 and Tw of each interrupt 
acknowledge 
cycle. 


ALE 
25 
0 
ADDRESS 
LATCH ENABLE: provided 
by the processor 
to latch 
the address into an address 
latch. It is a HIGH pulse active during 
T1 of any bus cycle. Note that ALE is never floated. 


DT/R 
27 
0 
DATA TRANSMIT/RECEIVE: 
needed in minimum system that 
desires to use a data bus transceiver. 
It is used to control 
the 
direction 
of data flow through the transceiver. 
Logically 
DT /R" is 
equivalent 
to Sl in the maximum 
mode, and its timing is the same 
as for MilO. 
(T = HIGH, R = LOW.) This signal floats to 3-state 
OFF(1) in local bus "hold 
acknowledge." 


• 
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Symbol 
Pin No. 
Type 
Name and Function 


DEN 
26 
0 
OAT A ENABLE: provided 
as an output enable for the transceiver 
in 
a minimum system which uses the transceiver. 
DEN is active LOW 
during each memory and I/O access and for INTA cycles. For a 
read or INT A cycle it is active from the middle of T2 until the middle 
of T4, while for a write cycle it is active from the beginning 
of T2 
until the middle of T4. DEN floats to 3-state OFF(1) in local bus 
"hold 
acknowledge." 


HOLD, 
31,30 
I/O 
HOLD: indicates 
that another 
master is requesting 
a local bus 
HLDA 
"hold." 
To be acknowledged, 
HOLD must be active HIGH. The 
processor 
receiving 
the "hold" 
request will issue HLDA (HIGH) as 
an acknowledgement 
in the middle of a T4 or Tj clock cycle. 
Simultaneous 
with the issuance 
of HLDA the processor 
will float the 
local bus and control 
lines. After HOLD is detected 
as being LOW, 
the processor 
will LOWer the HLDA, and when the processor 
needs to run another cycle, it will again drive the local bus and 
control 
lines. 
The same rules as for RQ/GT 
apply regarding 
when the local bus 
will be released. 
HOLD is not an asynchronous 
input. External synchronization 
should be provided 
if the system cannot otherwise 
guarantee 
the 
setup time. 


NOTE: 
1. See the section 
on Bus Hold Circuitry. 


STATIC 
OPERATION 


All 80C86A 
circuitry is of static design. Internal regis- 
ters, counters 
and latches 
are static and require no 
refresh 
as with 
dynamic 
circuit 
design. 
This 
elimi- 
nates 
the 
minimum 
operating 
frequency 
restriction 
placed 
on 
other 
microprocessors. 
The 
CMOS 
80C86A 
can operate 
from DC to the appropriate 
up- 
per frequency 
limit. 
The 
processor 
clock 
may 
~e 
stopped 
in either state (high/low) 
and held there In- 
definitely. 
This type of operation 
is especially 
useful 
for system 
debug or power critical 
applications. 


The 80C86A 
can be single 
stepped 
using only the 
CPU clock. This state can be maintained 
as long as 
is necessary. 
Single step clock operation 
allows sim- 
ple interface 
circuitry 
to provide 
critical 
information 
for bringing 
up your system. 


Static design 
also allows very low frequency 
opera- 
tion. 
In a power 
critical 
situation, 
this 
can 
provide 
extremely 
low power operation 
since 80C86A 
power 
dissipation 
is directly 
related to operating 
frequency. 
As the system 
frequency 
is reduced, 
so is the oper- 
ating power until, ultimately, 
at a DC input frequency, 
the 80C86A 
power 
requirement 
is the standby 
cur- 
rent. 


The internal 
functions 
of the 80C86A 
processor 
are 
partitioned 
logically 
into two 
processing 
units. 
The 
first is the Bus Interface 
Unit (BIU) and the second 
is 
the Execution 
Unit (EU) as shown 
in the block 
dia- 
gram of Figure 1. 


These 
units 
can 
interact 
directly 
but for the 
most 
part perform 
as separate 
asynchronous 
operational 
processors. 
The bus interface 
unit provides 
the func- 
tions related to instruction 
fetching 
and queuing, 
op- 
erand fetch 
and store, and address 
relocation. 
This 
unit also provides 
the basic bus control. 
The overlap 
of 
instruction 
pre-fetching 
provided 
by 
this 
unit 
serves 
to increase 
processor 
performance 
through 
improved 
bus bandwidth 
utilization. 
Up to 6 bytes of 
the instruction 
stream 
can be queued 
while waiting 
for decoding 
and execution. 


The 
instruction 
stream 
queuing 
mechanism 
allows 
the BIU to keep the memory 
utilized very efficiently. 
Whenever 
there 
is space for at least 2 bytes in the 
queue, 
the 
BIU will attempt 
a word 
fetch 
memory 
cycle. 
This 
greatly 
reduces 
"dead 
time" 
on 
the 
memory 
bus. The queue acts as a First-In-First 
Out 
(FIFO) buffer, from which the EU extracts 
instruction 
bytes as required. 
If the queue is empty 
(following 
a 
branch 
instruction, 
for example), 
the first 
byte into 
the queue immediately 
becomes 
available 
to the EU. 


Memory 
Segment 
Register 
Segment 
Reference 
Need 
Used 
Selection 
Rule 


Instructions 
CODE (CS) 
Automatic with all instruction prefetch. 


Stack 
STACK (SS) 
All stack pushes and pops. Memory references relative to BP 
base register except data references. 


Local Data 
DATA (OS) 
Data references when: relative to stack, destination of string 
operation, or explicitly overridden. 


External (Global) Data 
EXTRA (ES) 
Destination of string operations: Explicitly selected using a 
segment override. 


The execution units receives pre-fetched instruc- 
tions from the BIU queue and provides un-relocated 
operand addresses to the BIU. Memory operands 
are passed through the BIU for processing by the 
EU, which passes results to the BIU for storage. See 
the Instruction Set description for further register set 
and architectural descriptions. 


The processor provides a 20-bit address to memory 
which locates the byte being referenced. The memo- 
ry is organized as a linear array of up to 1 million 
bytes, addressed as OOOOO(H)to FFFFF(H). The 
memory is logically divided into code, data, extra 
data, and stack segments of up to 64k bytes each, 
with each segment falling on 16-byte boundaries. 
(See Figure 3a.) 


1DTIIA 
DATA __ 


~000D0It 


All memory references are made relative to base ad- 
dresses contained in high speed segment registers. 
The segment types were chosen based on the ad- 
dressing needs of programs. The segment register 
to be selected is automatically chosen according to 
the rules of the following table. All information in one 
segment type share the same logical attributes (e.g. 
code or data). By structuring memory into relocat- 
able areas of similar characteristics and by automati- 
cally selecting segment registers, programs are 
shorter, faster, and more structured. 


Word (16-bit) operands can be located on even or 
odd address boundaries and are thus not con- 
strained to even boundaries as is the case in many 
16-bit computers. For address and data operands, 
the least significant byte of the word is stored in the 
lower valued address location and the most signifi- 
cant byte in the next higher address location. The 
BIU automatically performs the proper number of 
memory accesses, one if the word operand is on an 
even byte boundary and two if it is on an odd byte 
boundary. Except for the performance penalty, this 
double access is transparent to the software. This 
performance penalty does not occur for instruction 
fetches, only word operands. 


Physically, the memory is organized as a high bank 
(015-08) 
and a low bank (Dr 
Do) of 512k 8-bit 
bytes addressed in parallel by the processor's ad- 
dress lines. 


A19-A1. Byte data with even addresses is trans- 
ferred on the 07-00 bus lines while odd addressed 
byte data (Ao HIGH) is transferred on the 015-08 
bus lines. The processor provides two enable sig- 
nals, BHE and Ao, to selectively allow reading from 
or writing into either an odd byte location, even byte 
location, or both. The instruction stream is fetched 
from memory as words and is addressed internally 
by the processor to the byte level as necessary. 


In referencing word data the BIU requires one or two 
memory cycles depending on whether or not the 
starting byte of the word is on an even or odd ad- 
dress, respectively. Consequently, in referencing 


WUIUU~ljrcmu:spenormance can Deopttmlzea oy lO- 
cating data on even address boundaries. This is an 
especially useful technique for using the stack, since 
odd address references to the stack may adversely 
affect the context switching time for interrupt pro- 
cessing or task multiplexing. 


Certain locations in memory are reserved for specific 
CPU operations (see Figure 3b.) locations from ad- 
dress FFFFOHthrough FFFFFH are reserved for op- 
erations including a jump to the initial program load- 
ing routine. Following RESET, the CPU will always 
begin execution at location FFFFOHwhere the jump 
must be. locations OOOOOH 
through 003FFH are re- 
served for interrupt operations. Each of the 256 pos- 
sible interrupt types has its service routine pointed to 
by a 4-byte pointer element consisting of a 16-bit 
segment address and a 16-bit offset address. The 
pointer elements are assumed to have been stored 
at the respective places in reserved memory prior to 
occurrence of interrupts. 


FFFFFH 
RESET BOOTSTRAP 
PROGRAM JUMP 
FFFFOH 


3FFH 
INTERRUPT POINTER 
FOR TYPE 255 
3FCH 
··· 
7H 
INTERRUPT POINTER 
FOR TYPE 1 
4H 


INTERRUPT POINTER 
3H 


FOR TYPE 0 
OH 
240029-4 


The requirements for supporting minimum and maxi- 
mum 80C86A systems are sufficiently different that 


they cannot be done efficiently with 40 uniquely de- 
fined pins. Conseque!!!!y. the 80C86A is equipped 
with a strap pin (MN/MX) which defines the system 
configuration. The definition of a certain subset of 
the pins changes dependent on the condition of the 
strap pin. When MN/MX pin is strapped to GND, the 
80C86A treats pins 24 through 31 in maximum 
mode. An 82C88 bus controller interprets status in- 
formation coded into 80, 81. 82 to generate bus tim- 
ing and control signals compatible with the MUl TI- 
BUS architecture. When the MN/MX pin is strapped 
to VCC, the 80C86A generates bus control signals 
itself on pins 24 through 31, as shown in parenthe- 
ses in Figure 2. Examples of minimum mode and 
maximum mode systems are shown in Figure 4. 


The 80C86A has a combined address and data bus 
commonly referred to as a time multiplexed bus. 
This technique provides the most efficient use of 
pins on the processor. This "local bus" can be buff- 
ered directly and used throughout the system with 
address latching provided on memory and I/O mod- 
ules. In addition, the bus can also be demultiplexed 
at the processor with a single set of address latches 
if a standard non-multiplexed bus is desired for the 
system. 


Each processor bus cycle consists of at least four 
ClK cycles. These are referred to as T1, T2. T3 and 
T4 (see Figure 5). The address is emitted from the 
processor during T1 and data transfer occurs on the 
bus during T3 and T4. T2 is used primarily for chang- 
ing the direction of the bus during read operations. In 
the event that a "NOT READY" indication is given 
by the addressed device, "Wait" states (Tw) are in- 
serted between T3 and T4. Each inserted "Wait" 
state is of the same duration as a ClK cycle. Periods 
can occur between 80C86A bus cycles. These are 
referred to as "Idle" states (Tj) or inactive ClK cy- 
cles. The processor uses these cycles for internal 
housekeeping. 


During T1 of any bus cycle the ALE (Address latch 
Enable) signal is emitted (by either the processor or 
the 82C88 bus controller, depending on the MN/MX 
strap). At the trailing edge of this pulse. a valid ad- 
dress and certain status information for the cycle 
may be latched. 
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Status 
bits So, 51, and 52 are used, 
in maximum 
mode, 
by the bus controller 
to identify 
the type of 
bus transaction 
according 
to the following 
table: 


82 
81 
80 
Characteristics 
o (LOW) 
0 
0 
Interrupt Acknowledge 
0 
0 
1 
Read I/O 
0 
1 
0 
Write I/O 
0 
1 
1 
Halt 
1 (HIGH) 
0 
0 
Instruction 
Fetch 
1 
0 
1 
Read Data from Memory 
1 
1 
0 
Write Data to Memory 
1 
1 
1 
Passive (no bus cycle) 


Status 
bits S3 through 
S7 are multiplexed 
with high- 
order 
address 
bits 
and 
the 
SHE 
signal, 
and 
are 


therefore 
valid during T2 through 
T4. S3 and S4 indi- 
cate which segment 
register 
(see Instruction 
Set de- 
scription) 
was used for this bus cycle in forming 
the 
address, 
according 
to the following 
table: 


84 
83 
Characteristics 
o (LOW) 
0 
Alternate 
Data (extra segment) 
0 
1 
Stack 
1 (HIGH) 
0 
Code or None 
1 
1 
Data 


S5 is a reflection 
of the 
PSW interrupt 
enable 
bit. 


S6 = 0 and S7 is a spare status pin. 


In the 80C86A, I/O operations can address up to a 
maximum of 64k I/O byte registers or 32k I/O word 
registers. The I/O address appears in the same for- 
mat as the memory address on bus lines A15-AO. 
The address lines A19-A16 are zero in I/O opera- 
tions. The variable I/O instructions which use regis- 
ter OXas a pointer have full address capability while 
the direct I/O instructions directly address one or 
two of the 256 I/O byte locations in page 0 of the 
I/O address space. 


I/O ports are addressed in the same manner as 
memory locations. Even addressed bytes are trans- 
ferred on the OrOo 
bus lines and odd addressed 
bytes on 015-08. Care must be taken to assure that 
each register within an 8-bit peripheral located on 
the lower portion of the bus be addressed as even. 


Processor initialization or start up is accomplished 
with activation 
(HIGH) of the 
RESET pin. The 
80C86A RESET is required to be HIGH for four or 
more ClK cycles. The 80C86A will terminate opera- 
tions on the high-going edge of RESET and will re- 
main dormant as long as RESET is HIGH. The low- 
going transition of RESET triggers an internal reset 
sequence for approximately 7 ClK cycles. After this 
interval the 80C86A operates normally beginning 
with the instruction in absolute location FFFFOH 
(see Figure 3b). The details of this operation are 
specified in the Instruction Set description of the 
MCSII')-86Family User's Manual. The RESET input is 
internally synchronized to the processor clock. At 


initialization the HIGH-to-lOW transition of RESET 
must occur no sooner than 50 fJosafter power-up, to 
allow complete initialization of the 80C86A. 


NMI asserted prior to the 2nd clock after the end of 
RESET will not be honored. If NMI is asserted after 
that point and during the internal reset sequence, 
the processor may execute one instruction before 
responding to the interrupt. A hold request active 
immediately after RESET will be honored before the 
first instruction fetch. 


All 3-state outputs float to 3-state OFF(1)during RE- 
SET. Status is active in the idle state for the first 
clock after RESET becomes active and then floats 
to 3-state OFF(1).ALE and HlOA are driven low. 


NOTE: 
1. See the section on Bus Hold Circuitry. 


To avoid high current conditions caused by floating 
inputs to CMOS devices and eliminate the need for 
pull-up/down 
resistors, 
"bus-hold" 
circuitry 
has 
been used on the 80C86A pins 2-16, 26-32, and 
34-39 (Figures 6a, 6b). These circuits will maintain 
the last valid logic state if no driving source is pres- 
ent (Le. an unconnected pin or a driving source 
which goes to a high impedance state). To overdrive 
the "bus hold" circuits, an external driver must be 
capable of supplying 350 fJoAminimum sink or 
source current at valid input voltage levels. Since 
this "bus hold" circuitry is active and not a "resis- 
tive" type element, the associated power supply cur- 
rent is negligible and power dissipation is significant- 
ly reduced when compared to the use of passive 
pull-up resistors. 
• 


Interrupt operations fall into two classes; software or 
hardware initiated. The software initiated interrupts 
and software aspects of hardware interrupts are 
specified in the Instruction Set description. Hard- 
ware interrupts can be classified as non-maskable or 
maskable. 


Interrupts result in a transfer of control to a new pro- 
gram location. A 256-element table containing ad- 
dress pointers to the interrupt service program loca- 
tions resides in absolute locations 0 through 3FFH 
(see Figure 3b), which are reserved for this purpose. 
Each element in the table is 4 bytes in size and cor- 
responds to an interrupt "type". An interrupting de- 
vice supplies an 8-bit type number, during the inter- 
rupt acknowledge sequence, which is used to "vec- 
tor" through the appropriate element to the new in- 
terrupt service program location. 


The processor provides a single non-maskable inter- 
rupt pin (NMI) which has higher priority than the 
maskable interrupt request pin (INTR). A typical use 
would be to activate a power failure routine. The 
NMI is edge-triggered on a LOW-to-HIGH transition. 
The activation of this pin causes a type 2 interrupt. 
(See Instruction Set description.) NMI is required to 
have a duration in the HIGH state of greater than 
two CLK cycles, but is not required to be synchroniz- 
ed to the clock. Any high-going transition of NMI is 
latched on-chip and will be serviced at the end of the 
current instruction or between whole moves of a 
block-type instruction. Worst case response to NMI 
would be for multiply, divide and variable shift in- 
structions. There is no specification on the occur- 
rence of the low-going edge; it may occur before, 
during, or after the servicing of NMI. Another high- 
going edge triggers another response if it occurs af- 
ter the start pf the NMI procedure. The signal must 
be free of logical spikes in general and be free of 
bounces on the low-going edge to avoid triggering 
extraneous responses. 


The 80C86A provides a single interrupt request input 
(INTR) which can be masked internally by software 


with the resetting of the interrupt enable FLAG 
status bit. The interrupt request signal is level trig- 
gered. It is internally synchronized during each clock 
cycle on the high-going edge of CLK. To be re- 
sponded to, INTR must be present (HIGH) during 
the clock period preceding the end of the current 
instruction or the end of a whole move for a block- 
type instruction. During the interrupt response se- 
quence further interrupts are disabled. The enable 
bit is reset as part of the response to any interrupt 
(INTR, NMI, software interrupt or single-step), al- 
though the FLAGS register which is automatically 
pushed onto the stack reflects the state of the proc- 
essor prior to the interrupt. Until the old FLAGS reg- 
ister is restored the enable bit will be zero unless 
specifically set by an instruction. 


During the response sequence (Figure 7) the proc- 
essor executes two successive (back-to-back) inter- 
rupt acknowledge cycles. The 80C86A emits the 
LOCK signal from T2 of the first bus cycle until T2 of 
the second. A local bus "hold" request will not be 
honored until the end of the second bus cycle. In the 
second bus cycle a byte is fetched from the external 
interrupt system (e.g., 82C59 PIC) which identifies 
the source (type) of the interrupt. This byte is multi- 
plied by four and used as a pointer into the interrupt 
vector lookup table. An INTR signal left HIGH will be 
continually responded to within the limitations of the 
enable bit and sample period. The INTERRUPT RE- 
TURN instruction includes a FLAGS pop which re- 
turns the status of the original interrupt enable bit 
when it restores the FLAGS. 


When a software "HALT" instruction is executed the 
processor indicates that it is entering the "HALT" 
state in one of two ways depending upon which 
mode is strapped. In minimum mode, the processor 
issues one ALE with no qualifying bus control sig- 
nals. In Maximum Mode, the processor issues ap- 
propriate HALT status on 52, 51 and 50 and the 
82C88 bus controller issues one ALE. The 80C86A 
will not leave the "HALT" state when a local bus 
"hold" is entered while in "HALT". In this case, the 
processor reissues the HALT indicator. An interrupt 
request or RESET will force the 80C86A out of the 
"HALT" state. 
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READ/MODIFY/WRITE 
(SEMAPHORE) 
OPERATIONS 
VIA LOCK 


The LOCK 
status information is provided by the 
processor when directly consecutive bus cycles are 
required during the execution of an instruction. This 
provides the processor with the capability of per- 
forming read/modify/write 
operations on memory 
(via the Exchange Register With Memory instruction, 
for example) without the possibility of another sys- 
tem bus master receiving intervening memory cy- 
cles. This is useful in mutliprocessor system configu- 
rations to accomplish "test and set lock" operations. 
The LOCK signal is activated (forced LOW) in the 
clock cycle following the one in which the software 
"LOCK" prefix instruction is decoded by the EU. It is 
deactivated at the end of the last bus cycle of the 
instruction following the "LOCK" prefix instruction. 
While LOCK is active a request on a RQ/GT pin will 
be recorded and then honored at the end of the 
LOCK. 


As an alternative to the interrupts and general I/O 
capabilities, the 80C86A provides a single software- 
testable input known as the TEST signal. At any time 
the program may execute a WAIT instruction. If at 
that time the TEST signal is inactive (HIGH), pro- 


gram execution becomes suspended while the proc- 
essor waits for TEST to become active. It must re- 
main active for at least 5 CLK cycles. The WAIT in- 
struction is re-executed repeatedly until that time. 
This activity does not consume bus cycles. The 
processor remains in an idle state while waiting. All 
80C86A drivers go to 3-state OFF if bus "Hold" is 
entered. If interrupts are enabled, they may occur 
while the processor is waiting. When this occurs the 
processor fetches the WAIT instruction one extra 
time, processes the interrupt, and then re-fetches 
and re-executes the WAIT instruction upon returning 
from the interrupt. 


Typical system configurations for the processor op- 
erating in minimum mode and in maximum mode are 
shown in Figures 4a and 4b, respectively. In mini- 
mum mode, the MN/MX pin is strapped to Vcc and 
the processor emits bus control signals in a manner 
similar to the 8085. In maximum mode, the MN/MX 
pin is strapped to Vss and the processor emits cod- 
ed status information which the 82C88 bus control- 
ler uses to generate MULTIBUS compatible bus 
control signals. Figure 5 illustrates the signal timing 
relationships. 
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The read cycle begins in T1with the assertion of the 
Address Latch Enable (ALE) signal. The trailing (Iow- 
going) edge of this signal is used to latch the ad- 
dress information, which is valid on the local bus at 
this time, into a latch. The BHE and Ao signals ad- 
dress the low, high, or both bytes. From T1 to T4 the 
MilO signal indicates a memory or liD operation. At 
T2 the address is removed from the local bus and 
the bus goes to a high impedance state. The read 
control signal is also asserted at T2. The read (AD) 
signal causes the addressed device to e.nable its 
data bus drivers to the local bus. Some time later 
valid data will be available on the bus and the ad- 
dressed device will drive the AEADY line HIGH. 
When the processor returns the read signal to a 
HIGH level, the addressed device will again 3-state 
its bus drivers. If a transceiver is required to buffer 
the 80C86A local bus, signals DTIR and DEN are 
provided by the 80C86A. 


A write cycle also begins with the assertion ~f AL,E 
and the emission of the address. The M/iO signal IS 
again asserted to indicate a memory or liD write 
operation. In the T2 immediately following the ad- 
dress emission the processor emits the data to be 
written into the addressed location. This data re- 
mains valid until the middle of T4. During T2, T3, and 
Tw the processor asserts the writ~ control sign~1. 
The write (WA) signal becomes active at the begin- 
ning of T2 as opposed to the read which is delayed 
somewhat into T2 to provide time for the bus to float. 


The BHE and Ao signals are used to select the prop- 
er byte{s) of the memoryllO word to be read or writ- 
ten according to the following table: 


BHE 
AO 
Characteristics 
0 
0 
Whole word 
0 
1 
Upper byte froml 
to odd address 
1 
0 
Lower byte froml 
to even address 
1 
1 
None 


liD 
ports are addressed in the same manner as 
memory location. Even addressed bytes are trans- 
ferred on the 07-00 
bus lines and odd addressed 
bytes on 015-08. 


The basic difference between the interrupt acknowl- 
edge cycle and a read cycle is that the interrupt ac- 
knowl~e 
signal (INTA) is asserted in pl~ce of the 
read (AD) signal and the address bus IS float~d. 
(See Figure 7.) In the second of two successive 
INTA cycles, a byte of information is read from bus 
lines 07-00 as supplied by the interrupt system 10~- 
ic (i.e., 82C59A Priority Interrupt Controller). This 
byte identifies the source (type) of the interrupt. It is 
multiplied by four and used as a pointer into an inter- 
rupt vector lookup table, as described earlier. 


BUS TIMING-MEDIUM 
SIZE SYSTEMS 


For medium size systems the MN/MX pin is con- 
nected to Vss and the 82C88 Bus Controller is add- 
ed to the system as well as a latch for latching the 
system address, and a transceiver to allow for bus 
loading greater than the 80C86A is~apable of han- 
dling. Signals ALE, DEN, and DTIA are generated 
by the 82C88 instead of the processor in this config- 
uration although their timing remains rE!!.ativelythe 
same. The 80C86A status outputs (82, 51, and 80) 
provide 
type-of-cycle 
information 
a~d 
bec?r:ne 
82C88 inputs. This bus cycle information specifies 
read (code, data, or 110), write (data or 110), inter- 
rupt acknowledge, or software halt. The 82C88 thus 
issues control signals specifying memory read or 
write, I/O read or write, or interrupt acknowledge. 
The 82C88 provides two types of write strobes, nor- 
mal and advanced, to be applied as required. The 
normal write strobes have data valid at the leading 
edge of write. The advanced write strobes have.th~ 
same timing as read strobes, and hence data Isn t 
valid at the leading edge of write. The transceiver 
receives the usual T and DE inputs from the 82C88 
DTIR and DEN. 


The pointer into the interrupt vector table, whic~ is 
passed during the second INTA cycle, can derive 
from an 82C59A located on either the local bus or 
the system bus. If the master 82C59A Priority Inter- 
rupt Controller is positioned on the local bus, a TTL 
gate is required to disable the tr~nsceiv~r when 
reading from the master 82C59A dUringthe Interrupt 
acknowledge sequence and software "poll". 
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NOTICE: 
This 
is a production 
data 
sheet. 
The specifi- 
cations 
are subject 
to change 
without 
notice. 


• WARNING: Stressing the device beyond the "Absolute 
Maximum 
Ratings" 
may 
cause permanent 
damage. 


These are stress ratings 
only. Operation 
beyond 
the 
"Operating 
Conditions" 
is not recommended 
and ex- 


tended 
exposure 
beyond 
the 
"Operating 
Conditions" 


may affect device reliability. 


Supply 
Voltage 
(With 
respect 
to ground) 
- 0.5 to 7.0V 


Input 
Voltage 
Applied 
(w.r.t. 
ground) 
-0.5 
to VCC + 0.5V 


Output 
Voltage 
Applied 
(w.r.t. 
ground) 
-0.5 
to VCC + 0.5V 


Power 
Dissipation 
1.0W 


Storage 
Temperature 
- 
65·e 
to 150·e 


Ambient 
Temperature 
Under 
Bias 
o·e 
to 70·e 


D.C. CHARACTERISTICS 


(TA = 0·et070·e, 
Vcc 
= 5V 
±5%) 


Symbol 
Parameter 
80C86A-2 
Units 
Test Conditions 
Mln 
Max 


VIL 
Input Low Voltage 
-0.5 
+0.8 
V 


VIH 
Input High Voltage 
2.0 
V 
(All inputs except 
clock) 


VeH 
Clock Input High Voltage 
Vee-0.8 
V 


VOL 
Output 
Low Voltage 
0.45 
V 
IOL = 2.5mA 


VOH 
Output 
High Voltage 
3.0 
V 
IOH = -2.5 
mA 
Vee-0.4 
IOH = -100 
/LA 


Ice 
Power Supply Current 
10 mAlMHz 
VIL = GND. VIH = Vcc 


Ices 
Standby 
Supply Current 
500 
/LA 
VIN = Vcc or GND 
Outputs 
Unloaded 
CLK = GND or Vee 


III 
Input Leakage 
Current 
±1.0 
/LA 
OV ~ VIN ~ Vcc 


ISHL 
Input Leakage 
Current 
50 
400 
/LA 
VIN = 0.8V 
(Bus Hold Low) 
(Note 4) 


ISHH 
Input Leakage 
Current 
-50 
-400 
/LA 
VIN = 3.0V 
(Bus Hold High) 
(Note 5) 


ISHLO 
Bus Hold Low Overdrive 
600 
/LA 
(Note 2) 


ISHHO 
Bus Hold High Overdrive 
-600 
/LA 
(Note 3) 


ILO 
Output 
Leakage 
Current 
±10 
/LA 
VOUT = GND or Vee 


CIN 
Capacitance 
of Input Buffer 
5 
pF 
(Note 1) 
(All inputs except 
ADo-AD15. 
RQ/GT) 


CIO 
Capacitance 
of I/O Buffer 
20 
pF 
(Note 1) 
(ADo-AD15. 
RQ/GT) 


COUT 
Output 
Capacitance 
15 
pF 
(Note 1) 


NOTES: 
1. Characterization 
conditions 
are a) Frequency 
= 1 MHz; b) Unmeasured 
pins at GND; c) VIN at + 5.0V or GND. 


2. An external 
driver 
must source 
at least 
ISHLO to switch 
this node from 
LOW to HIGH. 


3. An external 
driver 
must sink at least 
ISHHO to switch 
this node from 
HIGH to LOW. 


4. Test Condition 
is to lower VIN to GND and then raise VIN to O.BV on pins 2-16 & 34-39. 
5. Test Condition 
is to raise VIN to Vee and then 
lower VIN to 3.0V on pins 2-16. 26-32 
& 34-39. 


• 
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A.C. CHARACTERISTICS 
(TA = O·C to 70·C, Vcc = 5V ± 5%) 


Symbol 
Parameter 
80C86A-2 
Units 
Test 


Mln 
Max 
Conditions 


TClCl 
ClK 
Cycle Period 
125 
D.C. 
ns 


TClCH 
ClKlowTime 
68 
ns 


TCHCl 
ClK 
High Time 
44 
ns 


TCH1CH2 
ClK 
Rise Time 
10 
ns 
From 1.0V to 3.5V 


TCl2Cl1 
ClK 
Fall Time 
10 
ns 
From 3.5V to 1.0V 


TDVCl 
Data in Setup Time 
20 
ns 


TClDX 
Data in Hold Time 
10 
ns 


TR1VCl 
ROY Setup Time 
35 
ns 
into 82C84A 
(Notes 1, 2) 


TClR1X 
ROY Hold Time 
0 
ns 
into 82C84A 
(Notes 1, 2) 


TRYHCH 
READY Setup 
68 
ns 
Time into 80C86A 


TCHRYX 
READY Hold Time 
20 
ns 
into 80C86A 


TRYlCl 
READY Inactive to 
-8 
ns 
ClK 
(Note 3) 


THVCH 
HOLD Setup Time 
20 
ns 


TINVCH 
INTR, NMI, TEST 
15 
ns 
Setup Time 
(Note 2) 


TILIH 
Input Rise Time 
15 
ns 
From 0.8V to 2.0V 
(Except ClK) 


TIHll 
Input Fall Time 
15 
ns 
From 2.0V to 0.8V 
(Except ClK) 


A.C. CHARACTERISTICS 
(Continued) 
(TA = 0·Ct070·C, 
VCC = 5V ±5%) 


Timing 
Responses 


Symbol 
Parameter 
80C86A·2 
Units 
Test 


Min 
Max 
Conditions 


TCLAV 
Address Valid Delay 
10 
60 
ns 


TCLAX 
Address 
Hold Time 
10 
ns 


TCLAZ 
Address 
Float 
TCLAX 
50 
ns 
Delay 


TLHLL 
ALE Width 
TCLCH-10 
ns 


TCLLH 
ALE Active Delay 
50 
ns 


TCHLL 
ALE Inactive 
Delay 
55 
ns 


TLLAX 
Address 
Hold Time 
TCHCL-10 
nS 
to ALE Inactive 


TCLDV 
Data Valid Delay 
10 
60 
ns 


TCHDX 
Data Hold Time 
10 
ns 


TWHDX 
Data Hold Time 
TCLCH-30 
ns 
AfterWR 


TCVCTV 
Control Active 
10 
70 
ns 
Delay 1 


TCHCTV 
Control Active 
10 
60 
ns 
Delay 2 


TCVCTX 
Control 
Inactive 
10 
70 
ns 
Delay 


TAZRL 
Address 
Float to 
0 
ns 
READ Active 


TCLRL 
RD Active Delay 
10 
100 
ns 


TCLRH 
RD Inactive 
Delay 
10 
80 
ns 


TRHAV 
RD Inactive to Next 
TCLCL-40 
ns 
Address 
Active 


TCLHAV 
HLDA Valid Delay 
10 
100 
ns 


TRLRH 
RDWidth 
2TCLCL-50 
ns 


TWLWH 
WRWidth 
2TCLCL-40 
ns 


TAVAL 
Address 
Valid to 
TCLCH-40 
ns 
ALE Low 


TOLOH 
Output Rise Time 
15 
ns 
From 0.8V to 2.0V 


TOHOL 
Output Fall Time 
15 
ns 
From 2.0V to 0.8V 


NOTES: 
1. Signal 
at 82C84A 
shown 
for reference 
only. See 82C84A 
data sheet for the most recent 
specifications. 
2. Setup 
requirement 
for asynchronous 
signal only to guarantee 
recognition 
at next ClK. 
3. Applies 
only to T2 state. 
(8 ns into T3). 


INPUT / 
OUTPUT 
2.~-V 
V- 
-1'\.5 
1'!L- 


0.~5 
------------ 
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A.C. Testing inputs are driven at 2.4V for a logic "1" and 0.45V 
for a logic "0". Timing measurements are made at 1.5V. 


-~--l 


READ 
CYCLE 


(NOTE 
1) 
(WIl, 1llTl. Vottl 
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WRITE 
CYCLE 


l/OOTE 1) 
OE •• 
1:1il~1 


INT. 
CYCLE 
OT/R 
(IlOTUlaS) 
=r~:J'" 


NOTES: 
1. All output timing measurements are made at 1.5V unless otherwise noted. 
2. ROY is sampled near the end of T2. T3. Tw to determine if Tw machines states are to be inserted. 
3. Two INTA cycles run back-ta-back. The 80C86A local AOOR/OATA BUS is floating during both INTA cycles. Control 
signals shown for second INTA cycle. 
4. Signals at 82C84A are shown for reference only. 


• 
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MAX MODE 
SYSTEM 
(USING 
82C88 
BUS CONTROLLER) 
TIMING 
REQUIREMENTS 


Symbol 
Parameter 
80C86A-2 
Units 
Test 


Min 
Max 
Conditions 


TClCl 
ClK 
Cycle Period 
125 
D.C. 
ns 


TClCH 
ClKlowTime 
68 
ns 


TCHCl 
ClK 
High Time 
44 
ns 


TCH1CH2 
ClK 
Rise Time 
10 
ns 
From 1.0V to 3.5V 


TCl2Cl1 
ClK 
Fall Time 
10 
ns 
From 3.5V to 1.0V 


TDVCl 
Data in Setup Time 
20 
ns 


TClDX 
Data in Hold Time 
10 
ns 


TR1VCl 
RDY Setup Time into 82C84A 
35 
ns 
(Notes 1,2) 


TClR1X 
RDY Hold Time into 82C84A 
0 
ns 
(Notes 1, 2) 


TRYHCH 
READY Setup Time into 80C86A 
68 
ns 


TCHRYX 
READY Hold Time into 80C86A 
20 
ns 


TRYlCl 
READY Inactive to 
-8 
ns 
ClK 
(Note 4) 


TINVCH 
Setup Time for Recognition 
15 
ns 
(INTR, NMI, TEST) 
(Note 2) 


TGVCH 
RQ/GT 
Setup Time 
15 
ns 


TCHGX 
RQ Hold Time into 80C86A 
30 
ns 


TiLtH 
Input Rise Time 
15 
ns 
From 0.8V to 2.0V 
(Except ClK) 
(Note 5) 


TIHll 
Input Fall Time 
15 
ns 
From 2.0V to 0.8V 
(Except ClK) 
(Note 5) 


Symbol 
Parameter 
80C86A·2 
Units 
Test 


Mln 
Max 
Conditions 


TCLML 
Command 
Active 
5 
35 
ns 
Delay (Note 1) 


TCLMH 
Command 
Inactive 
5 
35 
ns 
Delay (Note 1) 


TRYHSH 
READY Active to 
65 
ns 
Status Passive (Note 3) 


TCHSV 
Status Active Delay 
10 
60 
ns 


TCLSH 
Status Inactive 
Delay 
10 
70 
ns 


TCLAV 
Address 
Valid Delay 
10 
60 
ns 


TCLAX 
Address 
Hold Time 
10 
ns 


TCLAZ 
Address 
Float Delay 
TCLAX 
50 
ns 


TSVLH 
Status Valid to ALE High (Note 1) 
20 
ns 


TSVMCH 
Status Valid to 
30 
ns 
MCE High (Note 1) 


TCLLH 
CLK Low to ALE Valid (Note 1) 
20 
ns 


TCLMCH 
CLK Low to MCE High (Note 1) 
25 
ns 


TCHLL 
ALE Inactive 
Delay (Note 1) 
4 
18 
ns 


TCLDV 
Data Valid Delay 
10 
60 
ns 


TCHDX 
Data Hold Time 
10 
ns 


TCVNV 
Control Active Delay (Note 1) 
5 
45 
ns 


TCVNX 
Control 
Inactive 
Delay (Note 1) 
10 
45 
ns 


TAZRL 
Address 
Float to Read Active 
0 
ns 


TCLRL 
RD Active Delay 
10 
100 
ns 


TCLRH 
RD Inactive 
Delay 
10 
80 
ns 


TRHAV 
RD Inactive to 
TCLCL-40 
ns 
Next Address 
Active 


TCHDTL 
Direction 
Control 
50 
ns 
Active Delay (Note 1) 


TCHDTH 
Direction 
Control 
30 
ns 
Inactive 
Delay (Note 1) 


TCLGL 
GT Active Delay 
0 
50 
ns 


TCLGH 
GT Inactive 
Delay 
0 
50 
ns 


TRLRH 
RDWidth 
2TCLCL-50 
ns 


TOLOH 
Output Rise Time 
15 
ns 
From 0.8V to 2.0V 


TOHOL 
Output Fall Time 
15 
ns 
From 2.0V to 0.8V 


NOTES: 
1. Signal 
at 82C84A 
or 82C88 
shown 
for reference 
only. See 82C84A 
and 82C88 
for the most recent 
specifications. 


2. Setup 
requirement 
for asynchronous 
signal only to guarantee 
recognition 
at next CLK. 


3. Applies 
only to T3 and wait states. 


4. Applies 
only to T2 state 
(8 ns into T3). 


5. These 
parameters 
are characterized 
and not 100% 
tested. 


INPUT / OUTPUT 
2.4=X.5 
l·C 


0.45 
------------~ 


SE. 
HOT' .1AU! - 
0UTl'UT) 


IIDY 1-1Nl'Ul) 


TDYCl 


POINTER 


I 


TCHDTH 
MCEJ 
PDE/ij TClMCH 
DT/R 


SOFTWARE HAlT- 
(DEN = YoL;RD,MRDC,IORC,MWTC,AMWC, 


iOWC.AIOWC,INTA, 
= YOH) 
AD,s-AD. 


TClAY 
5.,5,.5:---\ 
",/ 
\ ---- 
\---- 


NOTES: 
1. All timing 
measurements 
are made at 1.5V unless 
otherwise 
noted. 
2. RDY is sampled 
near the end of T2. T3. Tw to determine 
if Tw machines 
states 
are to be inserted. 
3. Cascade 
address 
is valid between 
first and second 
INTA cycle. 
4. Two 
INTA cycles 
run back-to-back. 
The 80C86A 
local ADDR/DATA 
BUS is floating 
during 
both 
INTA cycles. 
Control 
for 


pointer 
address 
is shown 
for second 
INTA cycle. 
5. Signals 
at 82C84A 
or 82C88 
are shown 
for reference 
only. 
6. The issuance 
of the 82C88 
command 
and control 
signals 
(MRDC, 
MWTC. 
AMWC, 
IORC, IOWC, AIOWC, 
INTA and DEN) 
lags the active 
high 82C88 
CEN. 


7. Status 
inactive 
in state just prior to T4. 


• 
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CLK' 
f\. 


NUl} 
~L.,:,;;;:_ 


INTR 
SIGNAL 
: 


TEST 


BUS LOCK SIGNAL 
TIMING 
(MAXIMUM 
MODE 
ONLY) 


ClK~ 
ClKC, i ClKC, 
'::~ 


240029-21 


COPROCESSOR 


(SEE NOTE) 


;l1 
CLK CYCLE 


CLK" 
rt 
~Dr 


AD,s,ADo• 
A,,tSI"A,a'S3' 
••, ------ 
••• 
JIll. 
lOCH 
8H~~1I6, 
DTIR, 
WR, 
DEN 


TCLHA' 
~ 


~~ 


Mnemonic 
and 
Deocripllon 
DATA TRANSFER 


MOY ~ Mo.o: 


Register/Memory 
to/from 
Register·· 


Immediate to Register/Memory 


Immediate to Register 


Memory to Accumulator 


Accumulator 
to Memory 


Register/Memory 
to segment 
Register·· 


Segment Register to Register/Memory 


Register/Memory 


Register 


Segment Register 


POP ~ Pop: 


Register/Memory 


Register 


Segment Register 


XCHG ~ Exchonge: 


Register/Memory 
with Register 


Register with Accumulator 


IN = Input from: 


Fixed Port 


Variable Port 


OUT = Oulpullo: 


Fixed Port 


Variable Port 


XLAT = Translate Byte to AL 


LEA = Load EA to Register 


LOS = Load Pointer to OS 


LES ~ Load Pointer to ES 


LAHF = Load AH with Flags 


SAHF = Store AH into Flags 


PUSHF = Push Flags 


POPF = Pop Flags 


76543210 


100010dw 


1100011 
w 


1011 
wreg 


1010000w 


1010001w 


10001110 


10001100 


mod 
reg 
rim 


modOOOr/m 


data 


mod 0 reg rIm 


mod 0 reg rim 


11111111 


01010,eg 


000regl10 


10001111 


01011 
reg 


OOOreg 111 


1000011w 


10010reg 


1110010w 


1110110w 


1110011 
w 


1110111 
w 


11010111 


10001101 


11000101 


11000100 


10011111 


10011110 


10011100 


10011101 


mod reg rim 


mod reg rIm 


mod reg rIm 


data 


dataifw 
- 
1 


addr-high 


addr-high 
• 


Table 2. Instruction set Summary (Continued) 
I 
Inatructlon Code 


ARITHMETIC 


ADD = Add: 


Reg.lMemory with Register to Either 


Immediate to Register/Memory 


Immediate to Accumulator 


ADC = Add with C81'1'Y' 


Reg.lMemory with Register to Either 


Immediate to Register/Memory 


Immediate to Accumulator 


INC = Increment: 


Register/Memory 


Register 


AAA = ASCII Adjustfor Add 


DM 
= Oecimal Adjust lor Add 


SUB = Subtract: 


Reg.lMemory and Register to Either 


Immediate from Register/Memory 


Immediate Irom Accumulator 


SBB = Subtract with Borrow 


Reg.lMemory and Register to Either 


Immediate from Register/Memory 


Immediate Irom Accumulator 


DEC = Decrement: 


Register/Memory 


Register 


NEG = Change Sign 


CMP = Compare: 


Register/Memory and Register 


Immediate with Register/Memory 


Immediate with Accumulator 


AAS = ASCII Adjustfor Subtract 


DAS ~ Oecimal Adjust lor Subtract 


MUL ~ Multiply (Unsigned) 


IMUL = Integer Multiply (Signed) 


AAM = ASCII Adjustfor Multiply 


DIV = Divide (Unsigned) 


IDIV = Integer Divide (Signed) 


AAD = ASCII Adjustfor Divide 


CBW = Convert Byte to Word 


CWO ~ Convert Word to Double Word 


OOOOOOdw 


100000sw 


0000010w 


modregr/m 


modOOOr/m 


000100dw 


100000sw 


0001010w 


mod reg r/m 


modO 1 Or/m . 


1111111w 


01000reg 


00110111 


00100111 


001010dw 


100000sw 


0010110w 


modregr/m 


mod 101 rim 


date 


000110dw 


100000sw 


0001110w 


mod reg r/m 


modO 11 rim 


date 


1111111w 


01001 
reg 


1111011 
w 


001110dw 


100000sw 


0011110w 


00111111 


00101111 


1111011 
w 


1111011w 


11010100 


1111011w 


1111011 
w 


11010101 


10011000 


10011001 


mod reg r/m 


mod 111 rim 


date 


mod 1 OOr/m 


mod 101 rim 


mod 11 Or/m 


mod111 
rim 


00001010 


date 


dateffw 
= 1 


date 


date ilw = 1 


date 


dateilw 
= 1 


date 


dateilw 
= 1 


intel~ 


NOT = Invert 


SHLISAL = Shift Logicall Arithmetic Left 


SHR = Shift Logical Right 


SAR = Shift Arithmetic Right 


ROL = Rotate Left 


ROR = Rotate Right 


RCL = Rotate Through Carry Flag Left 


RCR = Rotate Through Carry Right 


Reg.!Memory and Register to Either 


Immediate to Register/Memory 


Immediate to Accumulator 


76543210 
76543210 


1111011 
w 
modO 1 Or/m 


110100vw 
mod 1 OOr/m 


110100vw 
mod 101 
rim 


110100vw 
mod 111 
rim 


110100vw 
mod 0 00 rim 


110100vw 
modOOl 
rim 


110100vw 
modO 1 Or/m 


110100vw 
modO 11 rim 


001000dw 
mod reg rim 


1000000w 
mod 100 
rim 


0010010w 
data 


1000010w 
mod reg rim 


1111011 
w 
mod 0 00 rim 


1010100w 
data 


000010dw 
mod reg rim 


1000000w 
modOOl 
rim 


0000110w 
data 


001100dw 
mod reg rim 


1000000w 
mod 11 Or/m 


0011010w 
data 


1111001 
z 


1010010w 


1010011 
w 


1010111 
w 


1010110w 


1010101 
w 


TEST = And Function to Flags, No Result: r------,----:---,-----, 
Register/Memory and Register 


Immediate Data and Register/Memory 


Immediate Data and Accumulator 


Reg.!Memory and Register to Either 


Immediate to Register/Memory 


Immediate to Accumulator 


Reg.! Memory and Register to Either 


Immediate to Register/Memory 


Immediate to Accumulator 


REP ~ Repeat 


MOYS ~ Move Byte/Word 


CMPS ~ Compare Byte/Word 


SCAS = Scan Byte/Word 


LODS = Load Byte/Wd to ALl AX 


STOS = Stor Byte/Wd from ALl A 


CONTROL TRANSFER 


CALL = Call: 


Direct Within Segment 


Indirect Within Segment 


Direct Intersegment 


data 


dataifw 
~ 1 


data 


dataifw 
~ 1 


data 


dataifw = 1 


11101000 
disp-Iow 
1 
disp-high 


11111111 
mod 0 10 rim 
1 


10011010 
offset-low 
1 
offset-high 


seg-Iow 
1 
seg-high 


11111111 
modO 11 rim 
'I 


• 
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CONTROL 
TRANSFER 
(Continued) 


JMP 
~ 
Unconditional 
Jump: 


Direct 
Within 
Segment 


Direct 
Within 
Segment-Short 


Indirect 
Within 
Segment 


Direct 
Intersegment 


RET 
~ 
Return 
from 
CALL: 


Within 
Segment 


Within 
Seg. Adding 
Immed 
to SP 


Intersegment 


Intersegment 
Adding 
Immediate 
to SP 


JE/JZ 
~ 
Jump on Equal/Zero 


JL/JNGE 
= Jump on Less/Not 
Greater 
or Equal 


JLE/JNG 
= Jump on Less or Equal/ 
Not Greater 


JB/JNAE 
~ Jump 
on Below/Not 
Above 
or Equal 


JBE/ JNA = Jump 
on Below 
or Equal/ 


Not Above 


JP/JPE 
~ Jump 
on Parity/Parity 
Even 


JO 
~ Jump 
on Overflow 


JS = Jump on Sign 


JNE/JNZ 
~ Jump on Not Equal/Not 
Zero 


JNL/JGE 
= Jump on Not Less/Greater 
or Equal 


JNLE/JG 
~ 
Jump on Not Less or Equal/ 
Greater 


JNB/JAE 
= Jump on Not Below/Above 
or Equal 


JNBE/JA 
= Jump on Not Below 
or 
Equal/Above 


JNP/JPO 
~ Jump 
on Not Par/Par 
Odd 


JNO 
~ 
Jump on Not Overflow 


JNS 
~ Jump 
on Not Sign 


LOOP = 
Loop ex Times 


LooPZ/LooPE 
~ 
Loop While 
Zero/Equal 


LooPNZ/LooPNE 
~ 
Loop While 
Not 
Zero/Equal 


JCXZ = Jump 
on ex Zero 


76543210 


11101001 


11101011 


11111111 


11001011 


11001010 


01110100 


01111100 


disp-Iow 


disp 


mod 10 Or/m 


seg-Iow 


mod 101 
rIm 


76543210 


disp-high 


offset-high 


seg-high 


data-low 
data-high 


data-low 
data-high 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


type 


INT 
~ 
Interrupt 


Type Specified 


Type 
3 


INTO 
~ 
Interrupt 
on Overflow 


IRET 
~ 
Interrupt 
Return 


01110010 


01110110 


01111010 


01111000 


01110101 


01111101 


01111111 


01110011 


01110111 


01111011 


01110001 


01111001 


11100010 


11100001 


11001101 


11001100 


11001110 


11001111 


Mnemonic and 
Description 


PROCESSOR 
CONTROL 
I 
76543210 


11111000 


11110101 


11111001 


11111100 


11111101 


11111010 


11111011 


11110100 


10011011 


11011 
xxx 


11110000 


CLC = ClearCarry 


CMC = ComplementCarry 


STC = Set Carry 


CLD = ClearDirection 


STD = Set Direction 


CLI = ClearInterrupt 


STI = Set Interrupt 


HLT = Halt 


WAIT = Wait 


ESC = Escape(to ExternalDevice) 


LOCK 
= Bus Lock Prefix 


NOTES: 
AL = B-bit accumulator 
AX = 16-bit accumulator 
CX = Count register 
DS = Data segment 
ES = Extra segment 
Above/below refers to unsigned value. 
Greater = more positive: 
Less = less positive (more negative) signed values 
if d = 1 then "to" reg; if d = 0 then "from" reg 
if w = 1 then word instruction; if w = 0 then byte instruc- 
tion 
if mod = 11 then rIm is treated as a REG field 
if mod = 00 then DISP = 0" 
disp-Iow and disp-high are 
absent 
if mod = 
01 then DISP = 
disp-Iow sign-extended to 
16 bits, disp-high is absent 
if mod = 10 then DISP = disp-high: disp-Iow 
if rIm = 000 then EA = (BX) + (SI) + DISP 
if rIm = 001 then EA = (BX) + (DI) + DISP 
if rIm = 010 then EA = (BP) + (SI) + DISP 
if rIm = 011 then EA = (BP) + (DI) + DISP 
if rIm = 100 then EA = (SI) + DISP 
if rIm = 101 then EA = (DI) + DISP 
if rIm = 110 then EA = (BP) + DISP' 
if rIm = 111 then EA = (BX) + DISP 
DISP follows 2nd byte of instruction (before data if re- 
quired) 
'except if mod = 00 and rIm = 110 then EA = disp-high: 
disp-Iow. 
"MOV 
CS, REG/MEMORY not allowed. 


if s w = 01 then 16 bits of immediate data form the oper- 
and 
if s w = 11 then an immediate data byte is sign extended 
3 


to form the 16-bit operand 
if v = 0 then "count" = 1; if v = 1 then "count" in (CL) 
register 
x = don't care 
z is used for string primitives for comparison with ZF FLAG 
SEGMENT 
OVERRIDE 
PREFIX 
I 
001reg110 
I 


REG is assigned according to the following table: 


16·Blt (w = 1) 
8·Bit (w = 0) 
Segment 


000 
AX 
000 
AL 
00 
E5 
001 
CX 
001 
CL 
01 
C5 
010 
OX 
010 
DL 
10 
55 
011 
BX 
011 
BL 
11 
05 
100 
5P 
100 
AH 
101 
BP 
101 
CH 
110 
51 
110 
DH 
111 
01 
111 
BH 


Instructions which reference the flag register file as a 16-bit 
object use the symbol FLAGS to represent the file: 
FLAGS = 
X:X:X:X:(OF):(DF):(IF):(TF):(SF):(ZF):X:(AF):X:(PF):X:(CF) 


The following 
list represents 
key differences 
between 
this and the -001 data sheet. Please review this summa- 
ry carefully. 


1. In the Pin Description 
Table {Table 
1), the description 
of the HLDA signal being issued has been corrected. 
HLDA will be issued in the middle of either the T4 or Ti state. 


8088 
8-BIT HMOS MICROPROCESSOR 
8088/8088-2 


• 
8·Bit Data Bus Interface 


• 
16-Blt Internal Architecture 


• 
Direct Addressing 
Capability to 1 Mbyte 
of Memory 


• 
Direct Software Compatibility 
with 8086 
CPU 


• 
14-Word by 16-Bit Register Set with 
Symmetrical Operations 


• 
24 Operand Addressing 
Modes 


• 
Byte, Word, and Block Operations 


• 
8·Blt and 16-Blt Signed and Unsigned 
Arithmetic 
In Binary or Decimal, 
Including Multiply and Divide 


• 
Two Clock Rates: 
- 
5 MHz for 8088 
- 
8 MHz for 8088-2 


• 
Available In EXPRESS 
- 
Standard Temperature 
Range 
- 
Extended Temperature 
Range 


The Intel 8088 is a high performance 
microprocessor 
implemented 
in N-channel, 
depletion 
load, silicon 
gate 
technology 
(HMOS-II), 
and packaged 
in a 40-pin CERDIP 
package. 
The processor 
has attributes 
of both 8- 
and 16-bit microprocessors. 
It is directly 
compatible 
with 8086 software 
and 8080/8085 
hardware 
and periph- 
erals. 


MEMORY 
INTERFACE 


C·BUS 
MIN 
I:O~E} 
MODE 


GND 
Vcc 


A14 
A15 


A13 
Al61S3 
INSTRUCTION 
A12 
A171S4 
STREAM 
BYTE 
~UEUE 
A11 
Al61S5 


A10 
Al91S6 
ES 
SSO 
AS 
(HIGH) 


BUS 
CS 
A8 
MN/MX 
INTERFACE 
SS 
AD7 
iiii 
UNIT 
DS 
AD8 
HOLD 
(~/~) 
IP 
ADS 
HLDA 
(lm/lm') 


AD4 
WR 
(LllCK) 
A·BUS 
AD3 
101M 
(S2) 


AD2 
DTill 
(St) 


AD1 
nm 
(SO) 
AH 
AL 
ADO 
ALE 
(OSO) 
BH 
BL 


CH 
CL 
NMI 
mTA 
(OSl) 


EXECUTION 
DH 
DL 
INTR 
~ 


UNIT 
SP 
CLK 
READY 


BP 
GND 
RESET 
SI 


DI 
FLAGS 
231456-2 


231456-1 
Figure 
2. 8088 Pin Configuration 


Figure 
1.8088 
CPU Functional 
Block 
Diagram 


The following 
pin function 
descriptions 
are for 8088 systems 
in either minimum 
or maximum 
mode. 
The "local 
bus" 
in these 
descriptions 
is the direct 
multiplexed 
bus interface 
connection 
to the 8088 (without 
regard 
to 
additional 
bus buffers). 


Symbol 
PinNa. 
Type 
Name and Function 


AD7-ADO 
9-16 
I/O 
ADDRESS 
DATA BUS: These lines constitute 
the time multiplexed 
memory/IO 
address 
(T1) and data (T2, T3, Tw, T4) bus. These lines are 
active HIGH and float to 3-state OFF during interrupt 
acknowledge 
and 
local bus "hold acknowledge". 


A15-A8 
2-8,39 
0 
ADDRESS 
BUS: These lines provide address bits 8 through 
15 for the 
entire bus cycle (T1- T4). These lines do not have to be latched 
by ALE 
to remain valid. A 15-A8 
are active HIGH and float to 3-state OFF 
during interrupt acknowledge 
and local bus "hold 
acknowledge". 


A19/S6, 
A18/S5, 
35-38 
0 
ADDRESS/STATUS: 
During T1, these are the four most significant 
A17/S4, 
A16/S3 
address 
lines for memory operations. 
During I/O operations, 
these lines 
are lOW. 
During memory and I/O operations, 
status information 
is 
available 
on these lines during T2, T3, Tw, and T4. S6 is always low. 
The status of the interrupt enable flag bit (S5) is updated 
at the 
beginning 
of each clock cycle. S4 and S3 are encoded 
as shown . 


This information 
indicates 
which segment 
register is presently 
being 
used for data accessing. 


These lines float to 3-state OFF during local bus "hold 
acknowledge". 


S4 
sa 
Characteristics 
o (lOW) 
0 
Alternate 
Data 
0 
1 
Stack 
1 (HIGH) 
0 
Code or None 
1 
1 
Data 
S6 isO (lOW) 


RD 
32 
0 
READ: Read strobe indicates 
that the processor 
is performin..9. a 
memory or I/O read cycle, depending 
on the state of the 10/Mpin or 
S2. This signal is used to read devices which reside on the 8088 local 
bus. RD is active lOW 
during T2, T3 and Tw of any read cycle, and is 
guaranteed 
to remain HIGH in T2 until the 8088 local bus has floated. 


This signal floats to 3-state OFF in "hold 
acknowledge". 


READY 
22 
I 
READY: is the acknowledgement 
from the addressed 
memory or I/O 
device that it will complete 
the data transfer. 
The ROY signal from 
memory or I/O is synchronized 
by the 8284 clock generator 
to form 
READY. This signal is active HIGH. The 8088 READY input is not 
synchronized. 
Correct operation 
is not guaranteed 
if the set up and hold 
times are not met. 


INTR 
18 
I 
INTERRUPT 
REQUEST: 
is a level triggered 
input which is sampled 
during the last clock cycle of each instruction 
to determine 
if the 
processor 
should enter into an interrupt 
acknowledge 
operation. 
A 
subroutine 
is vectored 
to via an interrupt vector lookup table located 
in 
system memory. 
It can be internally 
masked by software 
resetting 
the 
interrupt 
enable bit. INTR is internally 
synchronized. 
This signal is active 
HIGH. 
TE'ST 
23 
I 
TEST: input is examined 
by the "wait for test" 
instruction. 
If the TEST 
input is lOW, 
execution 
continues, 
otherwise 
the processor 
waits in an 
"idle" 
state. This input is synchronized 
internally 
during each clock 
cycle on the leading edge of ClK. 


• 


intel~ 


Symbol 
Pin No. 
Type 
Name and Function 


NMI 
17 
I 
NON·MASKABLE INTERRUPT: is an edge triggered 
input which causes a 
type 2 interrupt. 
A subroutine 
is vectored 
to via an interrupt vector 
lookup 
table located in system memory. 
NMI is not maskable 
internally 
by 
software. 
A transition 
from a LOW to HIGH initiates the interrupt 
at the end 
of the current instruction. 
This input is internally 
synchronized. 


RESET 
21 
I 
RESET: causes the processor 
to immediately 
terminate 
its present 
activity. 


The signal must be active HIGH for at least four clock cycles. It restarts 
execution, 
as described 
in the instruction 
set description, 
when RESET 
returns LOW. RESET is internally 
synchronized 
. 


eLK 
19 
I 
.CLOCK: provides 
the basic timing for the processor 
and bus controller. 
It is 
asymmetric 
with a 33% duty cycle to provide optimized 
internal timing. 


Vcc 
40 
Vcc: is the + 5V ± 10% power supply pin. 


GND 
1,20 
GND: are the ground pins. 


MN/MX 
33 
I 
MINIMUM/MAXIMUM: indicates 
what mode the processor 
is to operate 
in. 
The two modes are discussed 
in the following 
sections. 


The fol/owing 
pin function 
descriptions 
are for the 8088 minimum 
mode 
(i.e., MN/MX = 
VccJ. Only the pin 
functions 
which are unique 
to minimum 
mode are described; 
aI/ other pin functions 
are as described 
above. 


Symbol 
Pin No. 
Type 
Name and Function 


101M 
28 
0 
STATUS LINE: is an inverted 
maximum 
r.!!.0deS2. It is used to distinguish 
a 
memory access from an 1/0 access. 
101M becomes 
valid in the T4 preceding 
a 
bus cycle and remains valid until the final T4 of the cycle (1/0 = HIGH, M = 
LOW). 101M floats to 3-state OFF in local bus "hold acknowledge". 


WR 
29 
0 
WRITE: strobe indicates 
that the processor 
~ performing 
a write memory or write 
1/0 cycle, depending 
on the state of the 101M signal. WR is active for T2, T3, and 
Tw of any write cycle. It is active LOW, and floats to 3-state OFF in local bus 
"hold acknowledge". 


INTA 
24 
0 
INTA: is used as a read strobe for interrupt acknowledge 
cycles. It is active LOW 
during T2, T3, and Tw of each interrupt acknowledge 
cycle. 


ALE 
25 
0 
ADDRESS LATCH ENABLE: is provided 
by the processor 
to latch the address 
into an address latch. It is a HIGH pulse active during clock low of T1 of any bus 
cycle. Note that ALE is never floated. 


DT/R 
27 
0 
DATA TRANSMIT/RECEIVE: is needed in a minimum system that desires to use 
a data bus transceiver. 
It is~sed 
to control the direction 
of data flow through the 
transceiver. 
Logically, 
DT IR is equivalent 
to S1 in the maximum 
mode, and its 
timing is the same as for 101M (T = HIGH, R = LOW). This signal floats to 
3-state OFF in local "hold acknowledge". 


DEN 
26 
0 
DATA ENABLE: is provided 
as an output enable for the data bus transceiver 
in a 
minimum system which uses the transceiver. 
DEN is active LOW during each 
memory and I/O access, and for INTA cycles. For a read or INTA cycle, it is 
active from the middle of T2 until the middle of T4, while for a write cycle, it is 
active from the beginning 
of T2 until the middle of T4. DEN floats to 3-state OFF 
during local bus "hold acknowledge". 


Symbol 
Pin No. 
Type 
Name and Function 


HOLD, 
31,30 
1,0 
HOLD: indicates 
that another 
master is requesting 
a local bus "hold". 
To be 
HLDA 
acknowledged, 
HOLD must be active HIGH. The processor 
receiving 
the "hold" 
request will issue HLDA (HIGH) as an acknowledgement, 
in the middle of a T4 or 
Ti clock cycle. Simultaneous 
with the issuance 
of HLDA the processor 
will float 
the local bus and control 
lines. After HOLD is detected 
as being LOW, the 
processor 
lowers HLDA, and when the processor 
needs to run another 
cycle, it 
will again drive the local bus and control 
lines. HOLD and HLDA have internal 
pull-up resistors. 


Hold is not an asynchronous 
input. External synchronization 
should be provided 
if 
the system cannot otherwise 
guarantee 
the set up time. 


SSO 
34 
0 
STATUS 
LINE: is logically equivalent 
to SO in the maximum 
mode. The 
combination 
of SSO, 10/Mand DT /R" allows the system to completely 
decode 
the 
current bus cycle status. 


101M 
DT/R 
SSO 
Characteristics 


1{HIGH) 
0 
0 
Interrupt Acknowledge 
1 
0 
1 
Read I/O Port 
1 
1 
0 
Write I/O Port 
1 
1 
1 
Halt 
O{LOW) 
0 
0 
Code Access 
0 
0 
1 
Read Memory 
0 
1 
0 
Write Memory 
0 
1 
1 
Passive 


The fol/owing 
pin 
function 
descriptions 
are for the 8088/8288 
system 
in maximum 
mode 
(i.e., MN/MX 
= 
GND). Only the pin functions 
which are unique to maximum 
mode are described; 
aI/ other pin functions 
are as 
described 
above. 


Symbol 
Pin No. 
Type 
Name and Function 


S2, S1, SO 
26-28 
0 
STATUS: 
is active during clock high of T4, T1, and T2, and is returned 
to the 
passive state (1,1,1) during T3 or during Tw when READY is HIGH. This status is 
used by the 8288 bus controller 
to~nerate 
all memory and I/O access control 
signals. Any change 
by S2, S1, or SO during T4 is used to indicate the beginning 
of a bus cycle, and the return to the passive state in T3 and Tw is used to 
indicate the end of a bus cycle. 
These signals float to 3-state OFF during "hold acknowledge". 
During the first 
clock cycle after RESET becomes 
active, these signals are active HIGH. After 
this first clock, they float to 3-state OFF. 


S2 
S1 
SO 
Characteristics 


O{LOW) 
0 
0 
Interrupt 
Acknowledge 
0 
0 
1 
Read I/O Port 
0 
1 
0 
Write I/O Port 
0 
1 
1 
Halt 
1{HIGH) 
0 
0 
Code Access 
1 
0 
1 
Read Memory 
1 
1 
0 
Write Memory 
1 
1 
1 
Passive 


Symbol 
Pin No. 
Type 
Name and Function 


RQ/GTO, 
30,31 
I/O 
REQUEST/GRANT: 
pins are used by other local bus masters to force the 
RQ/GT1 
processor 
to release the local bus at the end of the processor's 
current bus 
cycle. Each pin is bidirectional 
with RQ/GTO 
having higher priority than RQ/ 
GT1. RQ/GT 
has an internal pull-up resistor, so may be left unconnected. 


The request/grant 
sequence 
is as follows 
(See Figure 8): 


1. A pulse of one CLK wide from another 
local bus master indicates 
a local 
bus request ("hold") 
to the 8088 (pulse 1). 


2. During aT 4 or TI clock cycle, a pulse one clock wide from the 8088 to the 
requesting 
master (pulse 2), indicates 
that the 8088 has allowed the local 
bus to float and that it will enter the "hold 
acknowledge" 
state at the next 
CLK. The CPU's bus interface 
unit is disconnected 
logically from the local 
bus during "hold acknowledge". 
The same rules as for HOLD/HOLDA 
apply 
as for when the bus is released. 


3. A pulse one CLK wide from the requesting 
master indicates 
to the 8088 
(pulse 3) that the "hold" 
request is about to end and that the 8088 can 
reclaim the local bus at the next CLK. The CPU then enters T4. 


Each master-master 
exchange 
of the local bus is a sequence 
of three 
pulses. There must be one idle CLK cycle after each bus exchange. 
Pulses 
are active LOW. 


If the request is made while the CPU is performing 
a memory cycle, it will 
release the local bus during T4 of the cycle when all the following 
conditions 
are met: 


1. Request 
occurs on or before T2. 
2. Current cycle is not the low bit of a word. 
3. Current cycle is not the first acknowledge 
of an interrupt 
acknowledge 
sequence. 
4. A locked instruction 
is not currently 
executing. 


If the local bus is idle when the request is made the two possible 
events will 
follow: 


1. Local bus will be released 
during the next clock. 
2. A memory cycle will start within 3 clocks. 
Now the four rules for a currently 
active memory cycle apply with condition 
number 
1 already satisfied. 


LOCK 
29 
0 
LOCK: indicates 
that other system bus masters are not to gain control 
of the 
system bus while LOCK is active (LOW). The LOCK signal is activated 
by 
the "LOCK" 
prefix instruction 
and remains active until the completion 
of the 
next instruction. 
This signal is active LOW, and floats to 3-state off in "hold 
acknowledge" 
. 


QS1, QSO 
24,25 
0 
QUEUE STATUS: provide status to allow external tracking 
of the internal 
8088 instruction 
queue. 


The queue status is valid during the CLK cycle after which the queue 
operation 
is performed. 


QS1 
QSO 
Characteristics 


O(LOW) 
0 
No Operation 
0 
1 
First Byte of Opcode 
from Queue 
1(HIGH) 
0 
Empty the Queue 
1 
1 
Subsequent 
Byte from Queue 
- 
34 
0 
Pin 34 is always high in the maximum 
mode. 


SEGMENT 
REGISTER 
FilE 


CS 
SS 
OS 
ES 


7 
0 FFFFFH 
.r---J. 


6)KBOl00"' "GM'" 


XXXXOH 


1"'" 
"GM'" 


WORD 
{ 
MSB 
lSB 
BYTE 


The processor 
provides 
a 20-bit address 
to memory 
which locates the byte being referenced. 
The memo- 
ry is organized 
as a linear 
array of up to 1 million 
bytes, 
addressed 
as OOOOO(H)to 
FFFFF(H). 
The 
memory 
is logically 
divided 
into 
code, 
data, 
extra 
data, and stack segments 
of up to 64K bytes each, 
with 
each 
segment 
falling 
on 
16-byte 
boundaries 
(See Figure 3). 


All memory references 
are made relative to base ad- 
dresses 
contained 
in high speed segment 
registers. 
The segment 
types were chosen 
based 
on the ad- 


dressing 
needs 
of programs. 
The segment 
register 
to be selected 
is automatically 
chosen 
according 
to 
the rules of the following 
table. All information 
in one 
segment 
type share the same logical attributes 
(e.g. 


code 
or data). 
By structuring 
memory 
into relocat- 
able areas of similar characteristics 
and by automati- 
cally 
selecting 
segment 
registers, 
programs 
are 
shorter, 
faster, 
and more structured. 


Word 
(16-bit) 
operands 
can be located 
on even or 
odd address boundaries. 
For address and data oper- 
ands, the least significant 
byte of the word is stored 
in the lower valued 
address 
location 
and the most 
significant 
byte in the next higher address 
location. 


The BIU will automatically 
execute 
two fetch or write 
cycles for 16-bit operands. 


Memory 
segment 
segment 
Selection 
Rule 
Reference 
Used 
Register 
Used 


Instructions 
CODE (CS) 
Automatic 
with all instruction 
prefetch. 


Stack 
STACK (SS) 
All stack pushes and pops. Memory references 
relative to BP base register except data references. 


Local Data 
DATA (DS) 
Data references 
when: relative to stack, destination 
of string operation, 
or explicity overridden. 


External (Global) 
Data 
EXTRA (ES) 
Destination 
of string operations: 
Explicitly 
selected 
using a segment 
override. 


• 


Certain locations in memory are reserved for specific 
CPU operations (See Figure 4). Locations from ad- 
dresses FFFFOHthrough FFFFFH are reserved for 
operations including a jump to the initial system ini- 
tialization routine. Following RESET, the CPU will al- 
ways begin execution at location FFFFOHwhere the 
jump must be located. Locations OOOOOHthrough 
003FFH are reserved for interrupt operations. Four- 
byte pointers consisting of a 16-bit segment address 
and a 16-bit offset address direct program flow to 
one of the 256 possible interrupt service routines. 
The pointer elements are assumed to have been 
stored at their respective places in reserved memory 
prior to the occurrence of interrupts. 


The requirements for supporting minimum and maxi- 
mum 8088 systems are sufficiently different that 
they cannot be done efficiently with 40 uniquely de- 
fined pins. Consequently, the 8088 is equipped with 
a strap pin (MN/MX) which defines the system con- 
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INTERRUPT 
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figuration. The definition of a certain subset of the 
pins changes, dependent on the condition of the 
strap pin. When the MN/MX pin is strapped to GND, 
the 8088 defines pins 24 thro~ 
31 and 34 in maxi- 


mum mode. When the MN/MX pin is strapped to 
Vcc, the 8088 generates bus control signals itself on 
pins 24 through 31 and 34. 


The minimum mode 8088 can be used with either a 
multiplexed or demultiplexed bus. The multiplexed 
bus configuration is compatible with the MCS-85 
multiplexed bus peripherals. This configuration (See 
Figure 5) provides the user with a minimum chip 
count system. This architecture provides the 8088 
processing power in a highly integrated form. 


The demultiplexed mode requires one latch (for 64K 
addressability) or two latches (for a full megabyte of 
addressing). A third latch can be used for buffering if 
the address bus loading requires it. A transceiver 
can also be used if data bus buffering is required 
(See Figure 6). The 8088 provides DEN and DT/R' to 
control the transceiver, and ALE to latch the ad- 
dresses. This configuration of the minimum mode 
provides the standard demultiplexed bus structure 
with heavy bus buffering and relaxed bus timing re- 
quirements. 


The maximum mode employs the 8288 bus control- 
ler (See Figure 7). The 8288 decodes status lines 
SO,51, and 52, and provides the system with all bus 
control signals. Moving the bus control to the 8288 
provides better source and sink current capability to 
the control lines, and frees the 8088 pins for extend- 
ed large system features. Hardware lock, queue 
status, and two request! grant interfaces are provid- 
ed by the 8088 in maximum mode. These features 
allow co-processors in local bus and remote bus 
configurations. 
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The 8088 address/data 
bus is broken into three 
parts-the 
lower eight address/data 
bits (ADO- 
AD?), the middle eight address bits (A8-A 15), and 
the upper four address bits (A16-A19). 
The ad- 
dress/data bits and the highest four address bits are 
time multiplexed. This technique provides the most 
efficient use of pins on the processor, permitting the 
use of a standard 40 lead package. The middle eight 
address bits are not multiplexed, Le.they remain val- 


id throughout each bus cycle. In addition, the bus 
can be demultiplexed at the processor with a single 
address latch if a standard, non-multiplexed bus is 
desired for the system. 


Each processor bus cycle consists of at least four 
elK cycles. These are referred to as T1, T2, T3, and 
T4 (See Figure 8). The address is emitted from the 
processor during T1 and data transfer occurs on the 
bus during T3 and T4. T2 is used primarily for chang- 
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ing the direction of the bus during read operations. In 
the event that a "NOT READY" indication is given 
by the addressed device, "wait" states (Tw) are in- 
serted between T3 and T4. Each inserted "wait" 
state is of the same duration as a ClK cycle. Periods 
can occur between 8088 driven bus cycles. These 
are referred to as "idle" states (Ti), or inactive ClK 
cycles. The processor uses these cycles for internal 
housekeeping. 


During T1 of any bus cycle, the ALE (address latch 
enable) signal is emitted (by either the processor or 
the 8288 bus controller, depending on the MN/MX 
strap). At the trailing edge of this pulse, a valid ad- 
dress and certain status information for the cycle 
may be latched. 


Status bits SO,S1, and S2 are used by the bus con- 
troller, in maximum mode, to identify the type of bus 
transaction according to the following table: 


52 
51 
50 
Characteristics 


O(lOW) 
0 
0 
Interrupt Acknowledge 
0 
0 
1 
Read I/O 
0 
1 
0 
Write I/O 
0 
1 
1 
Halt 
1(HIGH) 
0 
0 
Instruction Fetch 
1 
0 
1 
Read Data from Memory 
1 
1 
0 
Write Data to Memory 
1 
1 
1 
Passive (No Bus Cycle) 


Status bits S3 through S6 are multiplexed with high 
order address bits and are therefore valid during T2 
through T4. S3 and S4 indicate which segment reg- 
ister was used for this bus cycle in forming the ad- 
dress according to the following table: 


54 
53 
Characteristics 


O(lOW) 
0 
Alternate Data (Extra Segment) 
0 
1 
Stack 
1(HIGH) 
0 
Code or None 
1 
1 
Data 


S5 is a reflection of the PSW interrupt enable bit. S6 
is always equal to O. 


1/0 Addressing 


In the 8088, I/O operations can address up to a 
maximum of 64K I/O registers. The I/O address ap- 
pears in the same format as the memory address on 
bus lines A15-AO. The address lines A19-A16 are 
zero in I/O, operations. The variable I/O instructions, 


intel~ 


which use register OXas a pointer, have full address 
capability, while the direct I/O instructions directly 
address one or two of the 256 I/O byte locations in 
page 0 of the I/O address space. I/O ports are ad- 
dressed in the same manner as memory locations. 


Designers familiar with the 8085 or upgrading an 
8085 design should note that the 8085 addresses 
I/O with an 8-bit address on both halves of the 16- 
bit address bus. The 8088 uses a full 16-bit address 
on its lower 16 address lines. 


Processor initialization or start up is accomplished 
with activation (HIGH) of the RESET pin. The 8088 
RESET is required to be HIGH for greater than four 
clock cycles. The 8088 will terminate operations on 
the high-going edge of RESET and will remain dor- 
mant as long as RESET is HIGH. The low-going 
transition of RESET triggers an internal reset se- 
quence for approximately 7 clock cycles. After this 
interval the 8088 operates normally, beginning with 
the instruction in absolute locations FFFFOH (See 
Figure 4). The RESET input is internally synchroniz- 
ed to the processor clock. At initialization, the HIGH 
to lOW transition of RESET must occur no sooner 
than 50 J.Ls after power up, to allow complete initiali- 
zation of the 8088. 


NMI asserted prior to the 2nd clock after the end of 
RESET will not be honored. If NMI is asserted after 
that point and during the internal reset sequence, 
the processor may execute one instruction before 
responding to the interrupt. A hold request active 
immediately after RESET will be honored before the 
first instruction fetch. 


All 3-state outputs float to 3-state OFF during 
RESET. Status is active in the idle state for the first 
clock after RESET becomes active and then floats 
to 3-state OFF. ALE and HlDA are driven low. 


Interrupt operations fall into two classes: software or 
hardware initiated. The software initiated interrupts 
and software aspects of hardware interrupts are 
specified in the instruction set description in the 
iAPX 88 book or the iAPX 86,88 User's Manual. 
Hardware interrupts can be classified as nonmaska- 
ble or maskable. 


Interrupts result in a transfer of control to a new pro- 
gram location. A 256 element table containing ad- 
dress pointers to the interrupt service program loca- 
tions resides in absolute locations 0 through 3FFH 
(See Figure 4), which are reserved for this purpose. 
Each element in the table is 4 bytes in size and cor- 
responds to an interrupt "type." An interrupting de- 
vice supplies an 8-bit type number, during the inter- 
rupt acknowledge sequence, which is used to vector 
through the appropriate element to the new interrupt 
service program location. 


The processor provides a single non-maskable inter- 
rupt (NMI) pin which has higher priority than the 
maskable interrupt request (INTR) pin. A typical use 
would be to activate a power failure routine. The 
NMI is edge-triggered on a LOW to HIGH transition. 
The activation of this pin causes a type 2 interrupt. 


NMI is required to have a duration in the HIGH state 
of greater than two clock cycles, but is not required 
to be synchronized to the clock. Any higher going 
transition of NMI is latched on-chip and will be serv- 
iced at the end of the current instruction or between 
whole moves (2 bytes in the case of word moves) of 
a block type instruction. Worst case response to 
NMI would be for multiply, divide, and variable shift 
instructions. There is no specification on the occur- 
rence of the low-going edge; it may occur before, 
during, or after the servicing of NMI. Another high- 
going edge triggers another response if it occurs af- 
ter the start of the NMI procedure. The signal must 
be free of logical spikes in general and be free of 
bounces on the low-going edge to avoid triggering 
extraneous responses. 


The 8088 provides a single interrupt request input 
(INTR) which can be masked internally by software 
with the resetting of the interrupt enable (IF) flag bit. 
The interrupt request signal is level triggered. It is 
internally synchronized during each clock cycle on 
the high-going edge of CLK. To be responded to, 
INTR must be present (HIGH) during the clock peri- 
od preceding the end of the current instruction or the 
end of a whole move for a block type instruction. 
During interrupt response sequence, further inter- 
rupts are disabled. The enable bit is reset as part of 
the response to any interrupt (INTR, NMI, software 
interrupt, or single step), although the FLAGS regis- 
ter which is automatically pushed onto the stack re- 
flects the state of the processor prior to the inter- 
rupt. Until the old FLAGS register is restored, the 


enable bit will be zero unless specifically set by an 
instruction. 


During the response sequence (See Figure 9), the 
processor executes two successive (back to back) 
interrupt acknowledge cycles. The 8088 emits the 
LOCK signal (maximum mode only) from T2 of the 
first bus cycle until T2 of the second. A local bus 
"hold" request will not be honored until the end of 
the second bus cycle. In the second bus cycle, a 
byte is fetched from the external interrupt system 
(e.g., 8259A PIC) which identifies the source (type) 
of the interrupt. This byte is multiplied by four and 
used as a pointer into the interrupt vector lookup 
table. An INTR signal left HIGH will be continually 
responded to within the limitations of the enable bit 
and sample period. The interrupt return instruction 
includes a flags pop which returns the status of the 
original interrupt enable bit when it restores the 
flags. 


When a software HALT instruction is executed, the 
processor indicates that it is entering the HALT state 
in one of two ways, depending upon which mode is 
strapped. In minimum mode, the processor issues 
ALE, delayed by one clock cycle, to allow the sys- 
tem to latch the halt status. Halt status is available 
on IO/M, DTlA, and 580. 
In maximum mode, the 
~cess~issues 
appropriate HALT status on 82, 


S1, and SO,and the 8288 bus controller issues one 
ALE. The 8088 will not leave the HALT state when a 
local bus hold is entered while in HALT. In this case, 
the processor reissues the HALT indicator at the 
end of the local bus hold. An interrupt request or 
RESET will force the 8088 out of the HALT state. 


Read/Modify/Write 
(Semaphore) 
Operations 
via LOCK 


The LOCK status information is provided by the 
processor when consecutive bus cycles are required 
during the execution of an instruction. This allows 
the processor to perform read/modify/write 
opera- 
tions on memory (via the "exchange register with 
memory" instruction), without another system bus 
master receiving intervening memory cycles. This is 
useful in multiprocessor system configurations to ac- 
complish "test and set lock" operations. The LOCK 
signal is activated (LOW) in the clock cycle following 
decoding of the LOCK prefix instruction. It is deacti- 
vated at the end of the last bus cycle of the instruc- 
tion following the LOCK prefix. While LOCK is active, 
a request on a RQ/GT pin wilrbe recorded, and then 
honored at the end of the LOCK. 


• 
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External Synchronization 
via TEST 


As an alternative to interrupts, the 8088 provides a 
single software-testable input pin (TEST). This input 
is utilized by executing a WAIT instruction. The sin- 
gleSWAITinstruction is repeatedly executed until the 
TE T input goes active (LOW). The execution of 
WAIT does not consume bus cycles once the queue 
is full. 


If a local bus request occurs during WAIT execution, 
the 8088 3-states all output drivers. If interrupts are 
enabled, the 8088 will recognize interrupts and pro- 
cess them. The WAIT instruction is then refetched, 
and reexecuted. 


Basic System Timing 


In minimum mode, the MN/MX pin is strapped to 
Vcc and the processor emits bus control signals 
compatible with the 8085 bus structure. In maximum 
mode, the MN/MX pin is strapped to GND and the 
processor emits coded status information which the 
8288 bus controller uses to generate MULTIBUS 
compatible bus control signals. 


System Timing-Minimum 
System 


(See Figure 8) 


The read cycle begins in T1 with the assertion of the 
address latch enable (ALE) signal. The trailing (low 


going) edge of this signal is used to latch the ad- 
dress information, which is valid on the addressl 
data 
bus 
(ADO-AD7) 
at 
this 
time, 
into 
the 
8282/8283 
latch. Address lines A8 through A15 do 
not need to be latched because they remain valid 
throughout the bus cycle. From T1 to T4 the 101M 
signal indicates a memory or 110 operation. At T2 
the address is removed from the addressldata bus 
and the bus goes to a high impedance state. The 
read control signal is also asserted at T2. The read 
(RD) signal causes the addressed device to enable 
its data bus drivers to the local bus. Some time later, 
valid data will be available on the bus and the ad- 
dressed device will drive the READY line HIGH. 
When the processor returns the read signal to a 
HIGH level, the addressed device will again 3-state 
its bus drivers. If a transceiver is required to buffer 
the 8088 local bus, signals DT/R" and DEN are pro- 
vided by the 8088. 


A write cycle also begins with the assertion of ALE 
and the emission of the address. The 101M signal is 
again asserted to indicate a memory or 110 write 
operation. In T2, immediately following the address 
emission, the processor emits the data to be written 
into the addressed location. This data remains valid 
until at least the middle of T4. During T2, T3, and 
Tw, the processor asserts the write control signal. 
The write (WR) signal becomes active at the begin- 
ning of T2, as opposed to the read, which is delayed 
somewhat into T2 to provide time for the bus to 
float. 


The basic difference between the interrupt acknowl- 
edge cycle and a read cycle is that the interrupt ac- 
knowl~e 
(INTA) signal is asserted in place of the 
read (RD) signal and the address bus is floated. 
(See Figure 9) In the second of two successive INTA 
cycles, a byte of information is read from the data 
bus, as supplied by the interrupt system logic (Le. 
8259A priority interrupt controller). This byte identi- 
fies the source (type) of the interrupt. It is multiplied 
by four and used as a pointer into the interrupt vec- 
tor lookup table, as described earlier. 


Bus Timing-Medium 
Complexity 
Systems 


(See Figure 10) 


For medium complexity systems, the MN/MX pin is 
connected to GND and the 8288 bus controller is 
added to the system, as well as a latch for latching 
the system address, and a transceiver to allow for 
bus loading greater than the 8088 is capable of han- 
dling. Signals ALE, DEN, and DT/R are generated 
by the 8288 instead of the processor in this configu- 
ration, although their timing remains relatively the 
same. The 8088 status outputs (52, 51, and SO)pro- 
vide type of cycle information and become 8288 in- 
puts. This bus cycle information specifies read 
(code, data, or I/O), write (data or I/O), interrupt ac- 
knowledge, or software halt. The 8288 thus issues 
control signals specifying memory read or write, I/O 
read or write, or interrupt acknowledge. The 8288 
provides two types of write strobes, normal and ad- 
vanced, to be applied as required. The normal write 
strobes have data valid at the leading edge of write. 
The advanced write strobes have the same timing 
as read strobes, and hence, data is not valid at the 
leading edge of write. The transceiver receives the 
usual T and DE inputs from the 8288's DT/R and 
DEN outputs. 


The pointer into the interrupt vector table, which is 
passed during the second INTA cycle, can derive 
from an 8259A located on either the local bus or the 
system bus. If the master 8289A priority interrupt 
controller is positioned on the local bus, a TTL gate 
is required to disable the transceiver when reading 
from the master 8259A during the interrupt acknowl- 
edge sequence and software "poll". 


The 8088 CPU is an 8-bit processor designed 
around the 8086 internal structure. Most internal 
functions of the 8088 are identical to the equivalent 
8086 functions. The 8088 handles the external bus 


the same way the 8086 does with the distinction of 
handling only 8 bits at a time. Sixteen-bit operands 
are fetched or written in two consecutive bus cycles. 
Both processors will appear identical to the software 
engineer, with the exception of execution time. The 
internal register structure is identical and all instruc- 
tions have the same end result. The differences be- 
tween the 8088 and 8086 are outlined below. The 
engineer who is unfamiliar with the 8086 is referred 
to the iAPX 86, 88 User's Manual, Chapters 2 and 4, 
for function description and instruction set informa- 
tion. Internally, there are three differences between 
the 8088 and the 8086. All changes are related to 
the 8-bit bus interface. 


• The queue length is 4 bytes in the 8088, whereas 
the 8086 queue contains 6 bytes, or three words. 
The queue was shortened to prevent overuse of 
the bus by the BIU when prefetching instructions. 
This was required because of the additional time 
necessary to fetch instructions 8 bits at a time. 


• To further optimize the queue, the prefetching al- 
gorithm was changed. The 8088 BIU will fetch a 
new instruction to load into the queue each time 
there is a 1 byte hole (space available) in the 
queue. The 8086 waits until a 2-byte space is 
available. 
• The internal execution time of the instruction set 
is affected by the 8-bit interface. All 16-bit fetches 
and writes from/to 
memory take an additional 
four clock cycles. The CPU is also limited by the 
speed of instruction fetches. This latter problem 
only occurs when a series of simple operations 
occur. When the more sophisticated instructions 
of the 8088 are being used, the queue has time to 
fill and the execution proceeds as fast as the exe- 
cution unit will allow. 


The 8088 and 8086 are completely software com- 
patible by virtue of their identical execution units. 
Software that is system dependent may not be com- 
pletely transferable, but software that is not system 
dependent will operate equally as well on an 8088 
and an 8086. 


The hardware interface of the 8088 contains the ma- 
jor differences between the two CPUs. The pin as- 
signments are nearly identical, however, with the fol- 
lowing functional changes: 
• A8-A 15- These pins are only address outputs 
on the 8088. These address lines are latched in- 
ternally and remain valid throughout a bus cycle 
in a manner similar to the 8085 upper address 
lines. 
• BHE has no meaning on the 8088 and has been 
eliminated. 


intel~ 


• SSO provides the SO status information in the 
minimum mode. This out~t 
oc~rs 
on ~34 
in 
minimum mode only. DTIR, 101M,and SSO pro- 
vide the complete bus status in minimum mode. 


• 101Mhas been inverted to be compatible with the 
MCS-85 bus structure. 
• ALE is delayed by one clock cycle in the mini- 


mum mode when entering HALT, to allow the 
status to be latched with ALE. 


AD7-ADO 


1088 
A15-A8 


RD 


DT/R 


8:zaa 
MRDC 


DEN 
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NOTICE: This is a production data sheet. The specifi- 
cations are subject to change without notice. 


• WARNING: Stressing the device beyond the "Absolute 
Maximum 
Ratings" 
may 
cause 
permanent 
damage. 


These are stress ratings only. Operation 
beyond 
the 
"Operating 
Conditions" 
is not recommended 
and ex- 


tended 
exposure 
beyond 
the 
"Operating 
Conditions" 


may affect device reliability. 


Ambient 
Temperature 
Under Bias 
O°C to + 70°C 


Case Temperature 
(Plastic) 
O°C to + 95°C 


Case Temperature 
(CERDIP) 
O°C to + 75°C 


Storage Temperature 
-65°C 
to + 150°C 


Voltage 
on Any Pin with 
Respect 
to Ground 
-1.0 
to + 7V 


Power Dissipation 
2.5 Watt 


D.C. CHARACTERISTICS 
(TA = O°C to 70°C, TCASE (Plastic) = O°C to 95°C. TCASE (CERDIP) = O°C to 75°C, 
TA = O°C to 55°C and TCASE = O°C to 75°C for P8088-2 
only 
TA is guaranteed 
as long as TCASE is not exceeded) 


.(VCC = 5V ±10% 
for 8088, VCC = 5V ±5% 
for 8088-2 
and Extended 
Temperature 
EXPRESS) 


Symbol 
Parameter 
Mln 
Max 
Units 
Test Conditions 


Vil 
Input Low Voltage 
-0.5 
+0.8 
V 
(Note 1) 


VIH 
Input High Voltage 
2.0 
VCC + 0.5 
V 
(Notes 1, 2) 


VOL 
Output Low Voltage 
0.45 
V 
IOl = 2.0mA 


VOH 
Output 
High Voltage 
2.4 
V 
IOH = -400/l-A 


Icc 
8088 
340 
mA 
TA = 25°C 
Power Supply Current: 8088-2 
350 
P8088 
250 


III 
Input Leakage Current 
±10 
/l-A 
OV :::;;VIN :::;;Vcc (Note 3) 


ILO 
Output and I/O Leakage Current 
±10 
/l-A 
0.45V :::;;VOUT :::;;VCC 


VCl 
Clock Input Low Voltage 
-0.5 
+0.6 
V 


VCH 
Clock Input High Voltage 
3.9 
VCC + 1.0 
V 


CIN 
Capacitance 
If Input Buffer 
15 
pF 
fc = 1 MHz 
(All Input Except 
ADo-AD? 
RQ/GT) 


CIO 
Capacitance 
of I/O Buffer 
15 
pF 
fc = 1 MHz 
ADo-AD? 
RQ/GT) 


NOTES: 
1. VIL tested with MN/MX Pin = OV 
VIH tested with MN/MX Pin = 5V 
MN/MX Pin is a strap Pin 
2. Not applicable to RO/<ITO and RO/GT1 
Pins (Pins 30 and 31) 
3. HOLD and HLDA III Min = 30 /LA,Max = 500 /LA 


• 
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(TA = O·C to 70·C, TCASE (Plastic) = O·C to 95·C, TCASE (CERDIP) = O·C to 75·C, 
TA = O·C to 55·C and TCASE = O·C to 80·C for P8088-2 
only 
TA is guaranteed 
as long as TCASE is not exceeded) 


(VCC = 5V ±10% 
for 8088, VCC = 5V ±5% 
for 8088-2 
and Extended 
Temperature 
EXPRESS) 


8088 
8088-2 
Test 
Symbol 
Parameter 
Units 
Conditions 
Mln 
Max 
Mln 
Max 


TClCl 
ClK 
Cycle Period 
200 
500 
125 
500 
ns 


TClCH 
ClKlowTime 
118 
68 
ns 


TCHCl 
ClK 
High Time 
69 
44 
ns 


TCH1CH2 
ClK 
Rise Time 
10 
10 
ns 
From 1.0V to 3.5V 


TCl2CL2 
ClKFaliTime 
10 
10 
ns 
From 3.5V to 1.0V 


mVCl 
Data in Setup Time 
30 
20 
ns 


TClDX 
Data in Hold Time 
10 
10 
ns 


TR1VCl 
ROY Setup Time into 8284 
35 
35 
ns 
(Notes 1, 2) 


TClR1X 
ROY Hold Time into 8284 
0 
0 
ns 
(Notes 1, 2) 


TRYHCH 
READY Setup Time 
118 
68 
ns 


into 8088 


TCHRYX 
READY Hold Time 
30 
20 
ns 
into 8088 


TRYlCl 
READY Inactive to ClK 
-8 
-8 
ns 
(Note 3) 


THVCH 
HOLD Setup Time 
35 
20 
ns 


TINVCH 
INTR, NMI, TEST Setup Time 
30 
15 
ns 
(Note 2) 


TILIH 
Input Rise Time (Except ClK) 
20 
20 
ns 
From 0.8V to 2.0V 


TIHll 
Input Fall Time (Except ClK) 
12 
12 
ns 
From 2.0V to 0.8V 


8088 
8088·2 
Test 
Symbol 
Parameter 
Units 
Conditions 
Mln 
Max 
Mln 
Max 


TCLAV 
Address 
Valid Delay 
10 
110 
10 
60 
ns 


TCLAX 
Address 
Hold Time 
10 
10 
ns 


TCLAZ 
Address 
Float Delay 
TCLAX 
80 
TCLAX 
50 
ns 


TLHLL 
ALEWid1h 
TCLCH-20 
TCLCH-10 
ns 


TCLLH 
ALE Active Delay 
80 
50 
ns 


TCHLL 
ALE Inactive 
Delay 
85 
55 
ns 


TLLAX 
Address 
Hold Time to 
TCHCL-10 
TCHCL-10 
ns 
ALE Inactive 


TCLDV 
Data Valid Delay 
10 
110 
10 
60 
ns 


TCHDX 
Data Hold Time 
10 
10 
ns 


TWHDX 
Data Hold Time after WR 
TCLCH-30 
TCLCH-30 
ns 


TCVCTV 
Control Active Delay 1 
10 
110 
10 
70 
ns 


TCHCTV 
Control Active Delay 2 
10 
110 
10 
60 
ns 


TCVCTX 
Control 
Inactive 
Delay 
10 
110 
10 
70 
ns 


TAZRL 
Address 
Float to READ 
0 
0 
ns 
Active 


TCLRL 
RD Active Delay 
10 
165 
10 
100 
ns 


TCLRH 
RD Inactive 
Delay 
10 
150 
10 
80 
ns 


TRHAV 
RD Inactive to Next 
TCLCL-45 
TCLCL-40 
ns 
Address 
Active 


TCLHAV 
HLDA Valid Delay 
10 
160 
10 
100 
ns 


TRLRH 
RDWidth 
2TCLCL-75 
2TCLCL-50 
ns 


TWLWH 
WRWidth 
2TCLCL-60 
2TCLCL-40 
ns 


TAVAL 
Address 
Valid to ALE Low 
TCLCH-60 
TCLCH-40 
ns 


TOLOH 
Output Rise Time 
20 
20 
ns 
From 0.8V to 2.0V 


TOHOL 
Output Fall Time 
12 
12 
ns 
From 2.0V to 0.8V 


NOTES: 
1. Signal 
at 8284A 
shown 
for reference 
only. See 8284A 
data sheet 
for the most recent 
specifications. 
2. Set up requirement 
for asynchronous 
signal only to guarantee 
recognition 
at next elK. 
3. Applies 
only to T2 state (8 ns into T3 state). 


• 
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DEVICE 
UNDER 
TEST 
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A.C. Testing; Inputs are driven at 2.4V for a logic "1" and 0.45V 
for a logic "0". Timing measurements are made at 1.5V for both a 
logic "1" and logic "0". 


READ CYCLE 


(NOTE 
1) 
(WlI. IAn. VOH) 


intel~ 
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WAVEFORMS 
(Continued) 


BUS TIMING-MINIMUM 
MODE SYSTEM (Continued) 


T, 
T, 
Tw 
T, 


eLK 
(8284 OUlput) 


,I,O,-AOo 


WRITE 
CYCLE 
DEN 
NOTE 
1 


Wii 


,I,o,-ADo 
• 


OT/A 


INTA 
CYCLE 


NOTES 
1,3 


{RD. WR - VOH) 
IMlA 


DEN 


SOFTWARE 
HALT· 


DEN,RO,WR.INTA 
VOH 
,1,0,- 
ADo 
INVALID 
ADDRESS 
SOFTWARE 
HALT 


DTiIi INOETlERMINATE 
rCLAY 


231456-14 


NOTES: 
1. All signals 
switch 
between 
VOH and VOL unless 
otherwise 
specified. 


2. ROY is sampled 
near the end of T2. T3. Tw to determine 
if Tw machines 
states 
are to be inserted. 
3. Two 
INTA 
cycles 
run back-te-back. 
The 
8088 
local 
AOOR/OATA 
bus is floating 
during 
both 
INTA 
cycles. 
Control 
signals 
are shown 
for the second 
INTA cycle. 
4. Signals 
at 8284 are shown 
for reference 
only. 


5. All timing 
measurements 
are made at 1.5V unless 
otherwise 
noted. 
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8088 
8088-2 
Test 
Symbol 
Parameter 
Units 
Conditions 
Mln 
Max 
Mln 
Max 


TClCl 
ClK 
Cycle Period 
200 
500 
125 
500 
ns 


TClCH 
ClKlowTime 
118 
68 
ns 


TCHCl 
ClK 
High Time 
69 
44 
ns 


TCH1CH2 
ClK 
Rise Time 
10 
10 
ns 
From 1.0V to 3.5V 


TCL2Cl1 
ClKFaliTime 
10 
10 
ns 
From 3.5V to 1.0V 


TDVCl 
Data in Setup Time 
30 
20 
ns 


TClDX 
Data in Hold Time 
10 
10 
ns 


TR1VCl 
ROY Setup Time into 8284 
35 
35 
ns 
(Notes 1, 2) 


TClR1X 
ROY Hold Time into 8284 
0 
0 
ns 
(Notes 1, 2) 


TRYHCH 
READY Setup Time into 8088 
118 
68 
ns 


TCHRYX 
READY Hold Time into 8088 
30 
20 
ns 


TRYlCl 
READY Inactive to ClK 
-8 
-8 
ns 
(Note 4) 


TINVCH 
Setup Time for Recognition 
30 
15 
ns 
(INTR, NMI, TEST) (Note 2) 


TGVCH 
RQ/GT 
Setup Time 
30 
15 
ns 


TCHGX 
RQ Hold Time into 8088 
40 
30 
ns 


TILIH 
Input Rise Time (Except ClK) 
20 
20 
ns 
From 0.8V to 2.0V 


TIHll 
Input Fall Time (Except ClK) 
12 
12 
ns 
From 2.0V to 0.8V 


8088 
8088·2 
Test 
Symbol 
Parameter 
Mln 
Max 
Mln 
Max 
Units 
Conditions 


TCLML 
Command 
Active Delay 
10 
35 
10 
35 
ns 
(Note 1) 


TCLMH 
Command 
Inactive 
Delay 
10 
35 
10 
35 
ns 
(Note 1) 


TRYHSH 
READY Active to 
110 
65 
ns 
Status Passive (Note 3) 


TCHSV 
Status Active Delay 
10 
110 
10 
60 
ns 


TCLSH 
Status Inactive Delay 
10 
130 
10 
70 
ns 


TCLAV 
Address 
Valid Delay 
10 
110 
10 
60 
ns 


TCLAX 
Address 
Hold Time 
10 
10 
ns 


TCLAZ 
Address 
Float Delay 
TCLAX 
80 
TCLAX 
50 
ns 


TSVLH 
Status Valid to ALE High 
15 
15 
ns 
(Note 1) 


TSVMCH 
Status Valid to MCE High 
15 
15 
ns 
(Note 1) 


TCLLH 
CLK Low to ALE Valid 
15 
15 
ns 
(Note 1) 


TCLMCH 
CLK Low to MCE (Note 1) 
15 
15 
ns 


TCHLL 
ALE Inactive Delay (Note 1) 
15 
15 
ns 


TCLMCL 
MCE Inactive Delay (Note 1) 
15 
15 
ns 


TCLDV 
Data Valid Delay 
10 
110 
10 
60 
ns 


TCHDX 
Data Hold Time 
10 
10 
ns 
CL = 20-100 
pF for 
TCVNV 
Control Active Delay 
5 
45 
5 
45 
ns 
All 8088 Outputs 
(Note 1) 
in Addition 
to 
TCVNX 
Control 
Inactive Delay 
10 
45 
10 
45 
ns 
Internal 
Loads 
(Note 1) 


TAZRL 
Address 
Float to 
0 
0 
ns 
Read Active 


TCLRL 
RD Active Delay 
10 
165 
10 
100 
ns 


TCLRH 
RD Inactive 
Delay 
10 
150 
10 
80 
ns 


TRHAV 
RD Inactive to Next 
TCLCL-45 
TCLCL-40 
ns 
Address 
Active 


TCHDTL 
Direction 
Control 
50 
50 
ns 
Active Delay (Note 1) 


TCHDTH 
Direction 
Control 
30 
30 
ns 
Inactive 
Delay (Note 1) 


TCLGL 
GT Active Delay 
85 
50 
ns 


TCLGH 
GT Inactive Delay 
85 
50 
ns 


TRLRH 
RDWidth 
2TCLCL-75 
2TCLCL-50 
ns 


TOLOH 
Output Rise Time 
20 
20 
ns 
From 0.8V to 2.0V 


TOHOL 
Output Fall Time 
12 
12 
ns 
From 2.0V to 0.8V 


NOTES: 
1. Signal at 8284 or 8288 shown 
for reference 
only. 
2. Setup 
requirement 
for asynchronous 
signal only to guarantee 
recognition 
at next eLK. 
3. Applies 
only to T3 and wait states. 


4. Applies 
only to T2 state 
(8 ns into T3 state). 
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A.C. Testing; 
Inputs 
are driven 
at 2.4V for a logic 
"1" 
and 0.45V 
for a logic "0". 
Timing 
measurements 
are made at 1.5V for both a 
logic 
"1" 
and logic 
"0". 


DEVICE 
UNDER 


IC,.100PF 
TEST 
-- 
231456-12 
CL Includes 
Jig capacitance 


U~'_~"~'B_'Y-- 
D.'5~----------_7'L- 


j 


AlE 
(1211 
OUTPUT) 


see NOTE S 


ROY 
(1284 
INPUT) 


of/Ii 


•••• 
OUTPUTS Iiiiiiii OA 
~ 


see NOTES 5'11 


DEN 


• 


,------- 
\\._----- 


NOTES: 
231456-16 
1. All signals 
switch 
between 
VOH and VOL unless 
otherwise 
specified. 
2. ADY is sampled 
near the end of T2. T3. Tw to determine 
if Tw machines 
states 
are to be inserted. 


3. Cascade 
address 
is valid between 
first and second 
INTA cycles. 


4. Two 
INTA cycles 
run back-to-back. 
The 8088 
local ADDA/DATA 
bus is floating 
during 
both 
INTA cycles. 
Control 
for 
pointer 
address 
is shown 
for second 
INTA cycle. 


5. Signals 
at 8284 or 8288 are shown 
for reference 
only. 


6. The 
issuance 
of the 8288 
command 
and 
control 
signals 
(MADC. 
MWTC. 
AMWC. 
IOAC, 
IOWC. AfOWC. 
INTA 
and 
DEN) lags the active 
high 8288 CEN. 


7. All timing 
measurements 
are made at 1.5V unless 
otherwise 
noted. 
8. Status 
inactive 
in state just prior to T4. 


WAVEFORMS 
(Continued) 


ASYNCHRONOUS 
SIGNAL 
RECOGNITION 
BUS LOCK SIGNAL 
TIMING 
(MAXIMUM 
MODE 
ONLY) 


CLK 


NMI 


I"p· 


INTR 


TEST 


Any elK CYCle-t 


_2::1- 


LOCK 
. 
~ 
--------- 
NOTE: 
231456-17 
1. Setup 
requirements 
for asynchronous 
signals 
only to 
guarantee 
recognition 
at next elK. 


P,twiouIg.tnl 


""";:'~ 
.-1 ---------------< 


AD,-AOrt 
•• 


::~ 
••• 
1 --------------., 


NOTE: 
1. The coprocessor 
may not drive the busses 
outside 
the region 
shown 
without 
risking contention. 
rt'OR 2 CYCLES 


'1"1-,.~;--' 
I~ 


HOLD~ 
. 
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Mnemonic and 
Descrlptton 


DATA TRANSFER 


MOV = Move: 


Register/Memory to/from Register 


Immediate to Register/Memory 


Immediate to Register 


Memory to Accumulator 


Accumulator to Memory 


Register/Memory to Segment Register 


Segment Register to Register/Memory 


Register/Memory 


Register 


Segment Register 


POP ~ Pop: 


Register/Memory 


Register 


Segment Register 


Register/Memory with Register 


Register with Accumulator 


IN = Input from: 


Fixed Port 


Variable Port 


OUT ~ Output to: 


Fixed Port 


Variable Port 


XLAT ~ Translate Byte to AL 


LEA = Load EA to Register 


LOS = Load Pointer to OS 


LES ~ Load Pointer to ES 


LAHF = Load AH with Flags 


SAHF = Store AH into Flags 


PUSHF ~ Push Flags 


POPF ~ Pop Flags 


8086/8088 Instruction 
Set Summary 
I 
Instruction 
Code 


76543210 


100010dw 


1100011 
w 


1011 
wreg 


1010000w 


10001110 


10001100 


76543210 
76543210 


mod 
reg 
rIm 


modO 0 0 rIm 
data 


data 
dataifw = 1 


addr·low 
addr·high 


addr-Iow 
addr-high 


mod 0 reg rIm 


mod 0 regr/m 


mod 11 Or/m 
11111111 


01010reg 


000reg110 


01011 
reg 


000reg111 


1110010w 


1110110w 


1110011 
w 


1110111 
w 


11010111 


10001101 


11000101 


11000100 


10011111 


10011110 


10011100 


10011101 


mod reg r/m 


mod reg rIm 


mod reg rIm 


• 


8086/8088 Instruction 
Set Summary (Continued) 
I 
Instruction Code 


ARITHMETIC 


ADD = Add: 


Reg./Memory with Register to Either 


Immediate to Register/Memory 


Immediate to Accumulator 


ADC = Add with Carry: 


Reg./Memory with Register to Either 


Immediate to Register/Memory 


Immediate to Accumulator 


INC = Increment: 


Register/Memory 


Register 


AAA = ASCII Adjust for Add 


BAA ~ Decimal Adjust for Add 


SUB ~ Subtract: 


Reg./Memory and Register to Either 


Immediate from Register/Memory 


Immediate from Accumulator 


Reg./Memory and Register to Either 


Immediate from Register/Memory 


Immediate from Accumulator 


DEC = Decrement: 


Register/memory 


Register 


NEG ~ Change sign 


CMP = Compare: 


Register/Memory and Register 


Immediate with Register/Memory 


Immediate with Accumulator 


AAS ~ ASCII Adjust for Subtract 


DAS ~ Decimal Adjust for Subtract 


MUL ~ Multiply (Unsigned) 


IMUL = Integer Multiply (Signed) 


AAM = ASCII Adjust for Multiply 


DIV ~ Divide (Unsigned) 


IDIV = Integer Divide (Signed) 


AAD = ASCII Adjust for Divide 


CBW = Convert Byte to Word 


CWO = Convert Word to Double Word 


OOOOOOdw 


100000sw 


0000010w 


mod reg r/m 


mod 0 00 rim 


data 


000100dw 


100000sw 


0001010w 


mod reg r/m 


modO 1 Or/m 


data 


1111111w 


01000reg 


00110111 


00100111 


001010dw 


100000sw 


0010110w 


mod reg r/m 


mod 101 rim 


data 


000110dw 


100000sw 


mod reg rim 


modO 11 rim 


data 


01001 
reg 


1111011 
w 


mod reg r/m 


mod 111 rim 
100000sw 


0011110w 


00111111 


00101111 


1111011 
w 


11010100 


1111011 
w 


11010101 


10011000 


10011001 


mod 1 00 rim 


mod 1 01 rim 


data 


dataifw 
= 1 


data 


dataifw = 1 


data 


dataifw = 1 


data 


dataifw = 1 
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LOGIC 


NOT ~ Invert 


SHLISAL = Shift Logical/ Arithmetic Left 


SHR = Shift Logical Right 


SAR ~ Shift Arithmetic Right 


ROL = Rotate Left 


ROR = Rotate Right 


RCL ~ Rotate Through Carry Flag Left 


RCR = Rotate Through Carry Right 


Reg.lMemory and Register to E~her 


Immediate to Register/Memory 


Immediate to Accumulator 


76543210 
76543210 


1111011 
w 
modO 1 Or/m 


110100vw 
modl00r/m 


110100vw 
mod 101 rIm 


110100vw 
mod111 
rIm 


110100vw 
modOOOr/m 


110100vw 
modOOl 
rIm 


110100vw 
modO 1 Or/m 


110100vw 
modO 11 rIm 


001000dw 
mod reg r/m 


1000000w 
mod 1 OOr/m 


0010010w 
data 


1000010w 
mod reg r/m 


1111011 
w 
modOOOr/m 


1010100w 
data 


000010dw 
mod reg r/m 


1000000w 
modOO 1 rIm 


0000110w 
data 


001100dw 
mod reg r/m 


1000000w 
mod 11 Or/m 


0011010w 
data 


1111001 
z 


1010010w 


1010011 
w 


1010111 
w 


1010110w 


1010101 
w 


TEST ~ And Function to Flags. No Result: .--------r--------, 
Register/Memory and Register 


Immediate Data and Register/Memory 


Immediate Data and Accumulator 


Reg.lMemory and Register to E~her 


Immediate to Register/Memory 


Immediate to Accumulator 


XOR = Exclusive or: 


Reg.lMemory and Register to Either 


Immediate to Register/Memory 


Immediate to Accumulator 


REP = Repeat 


MOYS ~ Move Byte/Word 


CMPS = Compare Byte/Word 


SCAS = Seen Byte/Word 


LODS ~ Load Byte/Wd to AL/ AX 


STOS = Stor Byte/Wd from AL/ A 


CONTROL TRANSFER 


CALL = Call: 


Direct Within Segment 


Indirect Within Segment 


Direct Intersegment 


data 


data ifw ~ 1 


data 


dataifw 
~ 1 


11101000 


11111111 


disp-Iow 


modO 1 Or/m 


seg-Iow 


mod011 
rIm 


offset-high 


seg-high 


• 


intel~ 


Direct Within Segment 


Direct Within Segment-Short 


Indirect Within Segment 


Direct Intersegment 


RET = Return from CALL: 


Within Segment 


Within Seg Adding Immedto SP 


Intersegment 


Intersegment Adding Immediate to SP 


JE/JZ = Jump on Equal/Zero 


JLlJNGE 
~ Jump on Less/Not Greater 
or Equal 
JLE/JNG ~ Jump on Less or Equal/ 
Not Greater 


JB/JNAE 
~ Jump on Below/Not Above 
or Equal 
JBE/JNA 
~ Jump on Below or Equal/ 
Not Above 
JP/JPE = Jump on Parity/Parity Even 


JO ~ Jump on Overflow 


JS ~ Jump on Sign 


JNE/JNZ = Jump on Not Equal/Not Zero 


JNL/JGE = Jump on Not Less/Greater 
or Equal 
JNLE/JG = Jump on Not Less or Equal/ 
Greater 
JNB/JAE = Jump on Not Below/Above 
or Equal 
JNBE/JA 
~ Jump on Not Below or 
Equal/Above 
JNP/JPO = Jump on Not Par/Par Odd 


JNO = Jump on Not Overflow 


JNS = Jump on Not Sign 


LOOP = Loop ex Times 


LooPZ/LooPE 
~ Loop While Zero/Equal 


LooPNZ/LooPNE 
~ Loop While Not 
Zero/Equal 
JCXZ ~ Jump on ex Zero 


76543210 


11101001 


11101011 


11111111 


11000011 


11000010 


11001011 


11001010 


01110100 


01111100 


disp-Iow 


disp 


mod 1 OOr/m 


offset-low 


seg-Iow 


mod 101 rIm 


data-low 
data-high 


data-low 
data-high 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


disp 


type 


01110010 


01110110 


01111010 


01110000 


01111000 


01110101 


01111101 


01111111 


01110011 


01110111 


01111011 


01110001 


01111001 


11100010 


11100001 


11100000 


11100011 


Type Specified 


Type 3 


INTO = Interrupt on Overflow 


IRET ~ Interrupt Retum 


11001101 


11001100 


11001110 


11001111 


Mnemonic and 
Description 
I 
76543210 


, "1'000 


, , , , 0'01 


" 
, , '00' 


'1' 
, , '00 


, , , " 
'0' 


, , , "0'0 


, , " 
'0" 


, , , , 0'00 


'00' 
'0' 
, 


, '0' 
, xxx 


""0000 


PROCESSORCONTROL 


CLC ~ Clear Carry 


CMC = Complement Carry 


STC = set Carry 


CLD = Clear Direction 


STD ~ set Direction 


CLI ~ Clear Interrupt 


STI = set Interrupt 


HLT = Halt 


WAIT = Wait 


ESC = Escape (to External Device) 


LOCK = Bus Lock Prefix 


NOTES: 
Al 
= B-bit accumulator 
AX = 16-bit accumulator 
CX = Count 
register 
DS = Data segment 
ES = Extra segment 
Above/below 
refers 
to unsigned 
value 
Greater 
= more positive: 


less 
= less positive 
(more 
negative) 
signed 
values 
if d = 1 then 
"to" 
reg; if d = 0 then 
"from" 
reg 
if w = 1 then word instruction; 
if w = 0 then byte 
instruction 


if mod = 11 then rim is treated 
as a REG field 


if mod = 00 then 
DISP = 0', 
disp-Iow 
and disp-high 
are 
absent 


if 
mod 
= 
01 
then 
DISP 
= 
disp-Iow 
sign-extended 
to 
16 bits, disp-high 
is absent 


if mod = 10 then 
DISP = disp-high; 
disp·low 


if rim = 000 then 
EA = (BX) + (SI) + DISP 


if rim = 001 then 
EA = (BX) + (DI) + DISP 


if rim = 010 then 
EA = (BP) + (SI) + DISP 


if rim = 011 then 
EA = (BP) + (DI) + DISP 


if rim = 100 then 
EA = (SI) + DISP 
if rim = 101 then 
EA = (DI) + DISP 
if rim = 110 then 
EA = (BP) + DISP' 


if rim = 111 then 
EA = (BX) + DISP 
DISP 
follows 
2nd 
byte 
of 
instruction 
(before 
data 
if re- 
quired) 


'except 
if mod = 
00 and rim = 
then 
EA = 
disp-high: 


disp-Iow. 


if s:w = 01 then 
16 bits of immediate 
data form 
the oper- 
and 
if s:w = 11 then 
an immediate 
data 
byte is sign extended 
to form the 16-bit operand 


if v = 0 then 
"count" 
= 1; if v = 
1 then 
"count" 
in (Cl) 
register 


x = don't 
care 
z is used for string primitives 
for comparison 
with ZF FLAG 
SEGMENT 
OVERRIDE 
PREFIX 
I 
001reg110 
I 


16·Blt (w = 1) 
a·Blt (w - 
0) 
Segment 
000 
AX 
000 
AL 
00 
ES 
001 
CX 
001 
CL 
01 
CS 
010 
OX 
010 
OL 
10 
SS 
011 
BX 
011 
BL 
11 
OS 
100 
SP 
100 
AH 
101 
BP 
101 
CH 
110 
SI 
110 
OH 
111 
01 
111 
BH 


Instructions 
which 
reference 
the flag register 
file as a 16-bit 


object 
use the symbol 
FLAGS 
to represent 
the file: 
FLAGS 
= 
X:X:X:X:(OF):(DF):(IF):(TF):(SF):(ZF):X:(AF):X:(PF):X:(CF) 


Mnemonics 
@ Intel, 197B 


The following list represents key differences be- 
tween this and the -005 data sheet. Please review 
this summary carefully. 
1. The 
Intel 
8088 
implementation 
technology 
(HMOS) has been changed to (HMOS-II). 


• 


intel~ 
8087 
MATH COPROCESSOR 


• 
Adds Arithmetic, 
Trigonometric, 
Exponential, and Logarithmic 
Instructions 
to the Standard 8086/8088 
and 80186/80188 Instruction 
Set for All 
Data Types 


• 
CPU/8087 Supports 7 Data Types: 16-, 
32-, 64-Bit Integers, 32-, 64-, 80-Blt 
Floating Point, and 18-Dlglt BCD 
Operands 


• 
Compatible with IEEE Floating Point 
Standard 754 


• 
Available In 5 MHz (8087), 8 MHz (8087- 
2) and 10 MHz (8087-1): 8 MHz 80186/ 
80188 System Operation Supported 
with the 8087-1 


• 
Adds 8 x 80-Blt Individually 
Addressable 
Register Stack to the 
8086/8088 and 80186/80188 
Architecture 


• 
7 Built-In Exception Handling FunctlonlS 


• 
MULTIBUS System Compatible 
Interface 


The Intel 8087 Math CoProcessor 
is an extension 
to the Intel 8086/8088 
microprocessor 
architecture. 
When 
combined 
with 
the 
8086/8088 
microprocessor, 
the 
8087 
dramatically 
increases 
the 
processing 
speed 
of 
computer 
applications 
which utilize mathematical 
operations 
such as CAM, numeric controllers, 
CAD or graph- 
ics. 


The 8087 Math CoProcessor 
adds 68 mnemonics 
to the 8086 microprocessor 
instruction 
set. Specific 
8087 
math operations 
include 
logarithmic, 
arithmetic, 
exponential, 
and trigonometric 
functions. 
The 8087 supports 
integer, 
floating 
point and BCD data formats, 
and fully conforms 
to the ANSI/IEEE 
floating 
point standard. 


The 8087 is fabricated 
with HMOS 
III technology 
and packaged 
in a 40-pin cerdip 
package. 


IComOlUNI1'- 
- 
- 
T 
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- 
- 
- 
- 
- 
- 
- 
- 
- 
I 


EXPONENT 
FRACTION 
IUS 
IUS 
GilD 
(A14) AD14 


(A13)AD13 
(A12) AD12 


(All) AD11 
(Al0) AD10 
• 


(AI)ADt 
(AI) AIlI 
AD1 
AIlI 


ADll 


AD4 


AOO 


ADZ 


AD1 
ADO 
Me 
Me 
a.K 
OND 


Vcc 
AD11 


A1M13 
A17/14 


All/S5 
All •••• 
IIl!Js7 
IillJfi1 


INT 
iiQ.Giv 


Me 
IICe 


111 
!Ill 


QSO 
QSl_Y 


READY 


IlElIET 


205835-2 
Figure 2. 8087 Pin 
Configuration 


Symbol 


AD15-ADO 


A19/56, 
A18/55, 
A17/54, 
A16/53 


Table 
1.8087 
Pin Description 


Name and Function 


ADDRESS 
DATA: These lines constitute 
the time multiplexed 
memory address 
(T 1) 
and data (T2, T3, Tw, T4) bus. AO is analogous 
to the BHE for the lower byte of the data 
bus, pins 07-00. 
It is LOW during T1 when a byte is to be transferred 
on the lower 
portion of the bus in memory operations. 
Eight-bit oriented 
devices tied to the lower half 
of the bus would normally 
use AO to condition 
chip select functions. 
These lines are 
active HIGH. They are input/output 
lines for 8087-driven 
bus cycles and are inputs 
which the 8087 monitors 
when the CPU is in control 
of the bus. A 15-A8 
do not require 
an address 
latch in an 8088/8087 
or 80188/8087. 
The 8087 will supply an address for 
the T1- T4 period. 


ADDRESS 
MEMORY: 
During T1 these are the four most significant 
address 
lines for 
memory operations. 
During memory operations, 
status information 
is available 
on these 
lines during T2, T3, Tw, and T4. For 8087 -controlled 
bus cycles, 56, 54, and 53 are 
reserved 
and currently 
one (HIGH), while 55 is always LOW. These lines are inputs 
which the 8087 monitors when the CPU is in control 
of the bus. 


I/O 
BUS HIGH ENABLE: During T1 the bus high enable signed (BHE) should be used to 
enable data onto the most significant 
half of the data bus, pins 015- 
08. Eight-bit- 
oriented 
devices tied to the upper half of the bus would normally 
use BHE to condition 
3 


chip select functions. 
BHE is LOW during T 1 for read and write cycles when a byte is to 
be transferred 
on the high portion of the bus. The 57 status information 
is available 
during T2, T3, Tw, and T4. The signal is active LOW. 57 is an input which the 8087 
monitors 
during the CPU-controlled 
bus cycles. 


I/O 
STATUS: 
For 8087-driven, 
these status lines are encoded 
as follows: 
S2 
S1 
SO 
o (LOW) 
X 
X 
Unused 
1 (HIGH) 
0 
0 
Unused 
1 
0 
1 
Read Memory 
1 
1 
0 
Write Memory 
1 
1 
1 
Passive 
5tatus 
is driven active during T4, remains valid during T1 and T2, and is returned 
to the 
passive state (1, 1, 1) during T3 or during Tw when READY is HIGH. This status is used 
by the 8288 Bus Controller 
(or the 82188 Integrated 
Bus Controller 
with an 80186/ 
80188 CPU) to generate 
all memory access control 
signals. Any change 
in 52, 51, or 
50 during T4 is used to indicate the beginning 
of a bus cycle, and the return to the 
passive state in T3 or Tw is used to indicate the end of a bus cycle. These signals are 
monitored 
by the 8087 when the CPU is in control 
of the bus. 


I/O 
REQUEST/GRANT: 
This request/grant 
pin is used by the 8087 to gain control 
of the 
local bus from the CPU for operand transfers 
or on behalf of another 
bus master. 
It 
must be connected 
to one of the two processor 
request/grant 
pins. The request/grant 
sequence 
on this pin is as follows: 
1. A pulse one clock wide is passed to the CPU to indicate a local bus request 
by either 
the 8087 or the master connected 
to the 8087 RQ/GT1 
pin. 
2. The 8087 waits for the grant pulse and when it is received 
will either initiate bus 
transfer 
activity in the clock cycle following 
the grant or pass the grant out on the 
RQ/GT1 
pin in this clock if the initial request was for another 
bus master. 


3. The 8087 will generate 
a release pulse to the CPU one clock cycle after the 
completion 
of the last 8087 bus cycle or on receipt of the release pulse from the bus 
master on RQ/GT1. 
For 80186/80188 
systems the same sequence 
applies except RQ/GT 
signals are 
converted 
to appropriate 
HOLD, HLDA signals by the 82188 Integrated 
Bus Controller. 


This is to conform 
with 80186/80188's 
HOLD, HLDA bus exchange 
protocol. 
Refer to 
the 82188 data sheet for further information. 


Type 


I/O 


Symbol 
Type 
Name and Function 


RQ/GT1 
I/O 
REQUEST/GRANT: 
This request/ grant pin is used by another 
local bus master to 
force the 8087 to request the local bus. If the 8087 is not in control 
of the bus when the 
request is made the request/grant 
sequence 
is passed through the 8087 on the RO/ 
GTO pin one cycle later. Subsequent 
grant and release pulses are also passed through 
the 8087 with a two and one clock delay, respectively, 
for resynchronization. 
RO/GT1 
has an internal pullup resistor, and so may be left unconnected. 
If the 8087 has control 
of the bus the request/ grant sequence 
is as follows: 
1. A pulse 1 ClK 
wide from another 
local bus master indicates 
a local bus request to 
the 8087 (pulse 1). 
2. During the 8087's 
next T4 or T 1 a pulse 1 ClK 
wide from the 8087 to the requesting 
master (pulse 2) indicates 
that the 8087 has allowed the local bus to float and that it 
will enter the "RQ/GT 
acknowledge" 
state at the next ClK. 
The 8087's 
control 
unit 
is disconnected 
logically from the local bus during "RQ/GT 
acknowledge." 
3. A pulse 1 ClK 
wide from the requesting 
master indicates 
to the 8087 (pulse 3) that 
the "RQ/GT" 
request is about to end and that the 8087 can reclaim the local bus at 
the next ClK. 


Each master-master 
exchange 
of the local bus is a sequence 
of 3 pulses. There must 
be one dead ClK 
cycle after each bus exchange. 
Pulses are active lOW. 
For 80186/80188 
system, the RQ/GT1 
line may be connected 
to the 82188 Integrated 
Bus Controller. 
In this case, a third processor 
with a HOLD, HlDA 
bus exchange 
system may acquire the bus from the 8087. For this configuration, 
RO/GT1 
will only be 
used if the 8087 is the bus master. Refer to 82188 data sheet for further information. 


QS1, QSO 
I 
QS1, QSO: QS1 and QSO provide the 8087 with status to allow tracking 
of the CPU 
instruction 
queue. 


QS1 
QSO 
o (LOW) 
0 
No Operation 
0 
1 
First Byte of Op Code from Queue 
1 (HIGH) 
0 
Empty the Queue 
1 
1 
Subsequent 
Byte from Queue 


INT 
0 
INTERRUPT: 
This line is used to indicate that an unmasked 
exception 
has occurred 
during numeric instruction 
execution 
when 8087 interrupts 
are enabled. 
This signal is 
typically 
routed to an 8259A for 8086/8088 
systems and to INTO for 80186/80188 
systems. 
INT is active HIGH. 


BUSY 
0 
BUSY: This signal indicates 
that the 8087 NEU is executing 
a numeric instruction. 
It is 
connected 
to the CPU's TEST pin to provide synchronization. 
In the case of an 
unmasked 
exception 
BUSY remains active until the exception 
is cleared. 
BUSY is 
active HIGH. 


READY 
I 
READY: READY is the acknowledgement 
from the addressed 
memory device that it 
will complete 
the data transfer. 
The RDY signal from memory is synchronized 
by the 
8284A Clock Generator 
to form READY for 8086 systems. 
For 80186/80188 
systems, 
RDY is synchronized 
by the 82188 Integrated 
Bus Controller 
to form READY. This 
signal is active HIGH. 


RESET 
I . 
RESET: RESET causes the processor 
to immediately 
terminate 
its present activity. 
The signal must be active HIGH for at least four clock cycles. RESET is internally 
synchronized. 


ClK 
I 
CLOCK: The clock provides 
the basic timing for the processor 
and bus controller. 
It is 
asymmetric 
with a 33% duty cycle to provide optimized 
internal timing. 


Vcc 
POWER: Vcc is the + 5V power supply pin. 


GND 
GROUND: 
GND are the ground pins. 


NOTE: 
For the pin descriptions of the 8086, 8088, 80186 and 80188 CPUs, reference the respective data sheets (8086, 8088, 
80186, 80188). 


1017 
CIV 
DATA FIELD 


AX 
~15 
FILE 
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DX 
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The 8087 provides functions meant specifically for 
high performance numeric processing requirements. 
Trigonometric, logarithmic, and exponential func- 
tions are built into the coprocessor hardware. These 
functions are essential in scientific, engineering, 
navigational, or military applications. 


The 8087 also has capabilities meant for business or 
commercial computing. An 8087 can process Binary 
Coded Decimal (BCD) numbers up to 18 digits with- 
out roundoff errors. It can also perform arithmetic on 
integers as large as 64 bits ± 1018). 


PROGRAMMING 
LANGUAGE 
SUPPORT 


Programs for the 8087 can be written in Intel's high- 
level languages for 8086/8088 
and 80186/80188 
Systems; ASM-86 (the 8086, 8088 assembly lan- 
guage), PL/M·86, FORTRAN-86, and PASCAL-86. 


For 8086, 8088, 80186 or 80188 details, refer to the 
respective data sheets. For 80186 or 80188 sys- 
tems, also refer to the 82188 Integrated Bus Con- 
troller data sheet. 


The 8087 Math CoProcessor's architecture is de- 
signed for high performance numeric computing in 
conjunction with general purpose processing. 


L 
...., 


~~1==========1 
i 


The 8087 is a numeric processor extension that pro- 
vides arithmetic and logical instruction support for a 
variety of numeric data types. It also executes nu- 
merous built-in transcendental functions (e.g., tan- 
gent and log functions). The 8087 executes instruc- 
tions as a coprocessor to a maximum mode CPU. It 
effectively extends the register and instruction set of 
the system and adds several new data types as well. 
Figure 3 presents the registers of the CPU+ 8087. 
Table 2 shows the range of data types supported by 
the 8087. The 8087 is treated as an extension to the 
CPU, providing register, data types, control, and in- 
struction capabilities at the hardware level. At the 
programmer's level the CPU and the 8087 are 
viewed as a single unified processor. 


System Configuration 


As a coprocessor to an 8086 or 8088, the 8087 is 
wired in parallel with the CPU as shown in Figure 4. 
Figure 5 shows the 80186/80188 system configura- • 
tion. The CPU's status (SO-52) and queue status 
lines (050-051) 
enable the 8087 to monitor and 
decode instructions in synchronization with the CPU 
and without any CPU overhead. For 80186/80188 
systems, the queue status signals of the 801861 
80188 are synchronized to 8087 requirements by 
the 8288 Integrated Bus Controller. Once started, 
the 8087 can process in parallel with, and indepen- 
dent of, the host CPU. For resynchronization, the 
8087's BUSY signal informs the CPU that the 8087 
is executing an instruction and the CPU WAIT in- 
struction tests this signal to insure that the 8087 is 
ready to execute subsequent instructions. The 8087 
can interrupt the CPU when it detects an error or 
exception. The 8087's interrupt request line is typi- 
cally routed to the CPU through an 8259A Program- 
mable Interrupt Controller for 8086, 8088 systems 
and INTOfor 80186/80188. 


TAG FIELD 
0' 
0 


~ 


CONTROL 
REGISTER 


STATUSRlGISTEA 


TAG WORD 


INSTRUCTION POINTER_ 
- 
DATA POINTER 
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The 8087 uses one of the request/~n~es 
of the 
8086/8088 architecture (typically RQ/GTO) to ob- 
tain control of the local bus for data transfers. The 
other request/ grant line is available for general sys- 
tem use (for instance by an I/O processor in LOCAL 
mode). A bus master can also be connected to the 
8087's RQ/GT1 line. In this configuration the 8087 
will pass the request/grant handshake signals be- 
tween the CPU and the attached master when the 
8087 is not in control of the bus and will relinquish 
the bus to the master directly when the 8087 is in 
control. In this way two additional masters can be 
configured in an 8086/8088 system; one will share 
the 8086/8088 bus with the 8087 on a first-come 
first-served basis, and the second will be guaranteed 
to be higher in priority than the 8087. 


For 80186/80188 systems, RQ/GTO and RQ/GT1' 
are connected to the corresponding inputs of the 
82188 
Integrated 
Bus Controller. 
Because 
the 
80186/80188 
has a HOLD, HLDA bus exchange 
protocol, an interface is needed which will translate 
RQ/GT signals to corresponding HOLD, HLDA sig- 
nals and vice versa. One of the functions of the 
82188 IBC is to provide this translation. RQ/GTO is 
translated to HOLD, HLDA signals which are then 
directly connected to the 80186/80188. The RQ/ 
GT1 line is also translated into HOLD, HLDA signals 
(referred to as SYSHOLD, SYSHLDA signals) by the 
82188 IBC. This allows a third processor (using a 
HOLD, HLDA bus exchange protocol) to gain control 
of the bus. 


Unlike an 8086/8087 system, RQ/GT is only used 
when the 8087 has bus control. If the third processor 
requests the bus when the current bus master is the 
80186/80188, the 82188 IBC will directly pass the 
request 
onto 
the 
80186/80188 
without 
going 
through the 8087. The third processor has the high- 
est bus priority in the system. If the 8087 requests 
the bus while the third processor has bus control, 
the grant pulse will not be issued until the third proc- 
essor releases the bus (using SYSHOLD). In this 
configuration, the third processor has the highest 
priority, the 8087 has the next highest, and the 
80186/80188 has the lowest bus priority. 


The 8087 bus structure, operation and timing are 
identical to all other processors in the 8086/8088 
series (maximum mode configuration). The address 
is time multiplexed with the data on the first 16/8 
lines of the address/data bus. A16 through A19 are 
time multiplexed with four status lines S3-S6. S3, 
S4 and S6 are always one (HIGH) for 8087-driven 
bus cycles while S5 is always zero (LOW). When the 
8087 is monitoring CPU bus cycles (passive mode) 
S6 is also monitored by the 8087 to differentiate 
8086/8088 activity from that of a local I/O proces- 
sor or any other local bus master. (The 8086/8088 
must be the only processor on the local bus to drive 
S6 LOW). S7 is multiplexed with and has the same 
value as BHE for all 8087 bus cycles. 


Data 
Range 
Precision 
Most Significant 
Byte 


Formats 
7 
017 
07 
017 
017 
017 
017 
Oj7 
017 
017 
ol 


Word Integer 
104 
16 Bits 
115 
10Two's Complement 


Short Integer 
109 
32 Bits 
131 
10lTwo'sComplement 


Long Integer 
1016 
64 Bits 
163 
Ill. 
Two's 
o Complement 


Packed BCD 
1016 
18 Digits sl- 
017016 
101 Dol 


Short Real 
10±36 
24 Bits 
sIE7 
EoIF1 
F231FoImplicit 


Long Real 
10±306 
53 Bits 
sIE10 
Eo F1 
F521FoImplicit 


Temporary Real 10±4932 
64 Bits 
sIE14 
EolFo 
F6~ 
Integer:I 
Packed BCD: (-1 )S(017".oO) 
Real:(-1 )S(2E -Bias)(F0.F1"') 
bias = 127for ShortReal 
1023for LongReal 
16363for TempReal 


The first three status lines, SO-52, are used with an 
8288 bus controller or 82188 Integrated Bus Con- 
troller to determine the type of bus cycle being run: 


52 
51 
SO 


0 
X 
X 
Unused 
1 
0 
0 
Unused 
1 
0 
1 
Memory Data Read 
1 
1 
0 
Memory Data Write 
1 
1 
1 
Passive (no bus cycle) 


Programming 
Interface 


The 8087 includes the standard 8086, 8088 instruc- 
tion set for general data manipulation and program 
control. It also includes 68 numeric instructions for 
extended precision integer, floating point, trigono- 
metric, logarithmic, and exponential functions. Sam- 
ple execution times for several 8087 functions are 
shown in Table 3. Overall performance is up to 100 
times that of an 8086 processor for numeric instruc- 
tions. 


Any instruction executed by the 8087 is the com- 
bined result of the CPU and 8087 activity. The CPU 
and the 8087 have specialized functions and regis- 
ters providing fast concurrent operation. The CPU 
controls overall program execution while the 8087 
uses the coprocessor interface to recognize and 
perform numeric operations. 


Table 2 lists the seven data types the 8087 supports 
and presents the format for each type. Internally, the 
8087 holds all numbers in the temporary real format. 
Load and store instructions automatically convert 
operands represented in memory as 16-, 32-, or 64- 
bit integers, 32- or 64-bit floating point numbers or 
18-digit packed BCD numbers into temporary real 
format and vice versa. The 8087 also provides the 
capability to control round off, underflow, and over- 
flow errors in each calculation. 


Computations in the 8087 use the processor's regis- 
ter stack. These eight 80-bit registers provide the 
equivalent capacity of 20 32-bit registers. The 8087 
register set can be accessed as a stack, with in- 
structions operating on the top one or two stack ele- 
ments, or as a fixed register set, with instructions 
operating on explicitly designated registers. 


Table 5 lists the 8087's instructions by class. All ap- 
pear as ESCAPE instructions to the host. Assembly 
language programs are written in ASM-86, the 8086, 
8088 assembly language. 


Table 3. Execution 
Times for Selected 
8086/8087 
Numeric 
Instructions 
and 
Corresponding 
8086 Emulation 


Approximate 
Execution 


Floating 
Point 
Time (,...s) 


Instruction 
8086/8087 
8086 
(8 MHz 
Emulation 
Clock) 


Add/Subtract 
10.6 
1000 
Multiply (Single 
Precision) 
11.9 
1000 
Multiply (Extended 
Precision) 
16.9 
1312 
Divide 
24.4 
2000 
Compare 
-5.6 
812 
Load (Double Precision) 
-6.3 
1062 
Store (Double Precision) 
13.1 
750 
Square Root 
22.5 
12250 
Tangent 
56.3 
8125 
Exponentiation 
62.5 
10687 


NUMERIC 
PROCESSOR 
EXTENSION 
ARCHITECTURE 


As shown in Figure 1, the 8087 is internally divided 
into two processing elements, the control unit (CU) 
and the numeric execution unit (NEU). The NEU ex- 
ecutes all numeric instructions, while the CU re- 
ceives and decodes instructions, reads and writes 
memory operands and executes 8087 control in- 
structions. The two elements are able to operate in- 
dependently of one another, allowing the CU to 
maintain synchronization with the CPU while the 
NEU is busy processing a numeric instruction. 


The CU keeps the 8087 operating in synchronization 
with its host CPU. 8087 instructions are intermixed 
with CPU instructions in a single instruction stream. 
The CPU fetches all instructions from memory; by 
monitoring the status (50-52, 
56) emitted by the 
CPU,the control unit determines when an instruction 
is being fetched. The CPU monitors the data bus in 
parallel with the CPU to obtain instructions that per- 
tain to the 8087. 
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The CU maintains an instruction queue that is identi- 
cal to the queue in the host CPU. The CU automati- 
cally determines if the CPU is an 8086/80186 or an 
8088/80188 immediately after reset (by monitoring 
the BHE/S7 line) and matches its queue length ac- 
cordingly. By monitoring the CPU's queue status 
lines (OSO,OS1), the CU obtains and decodes in- 
structions from the queue in synchronization with the 
CPU. 


A numeric instruction appears as an ESCAPE in- 
struction to the CPU. Both the CPU and 8087 de- 
code and execute the ESCAPE instruction together. 
The 8087 only recognizes the numeric instructions 
shown in Table 5. The start of a numeric operation is 
accomplished when the CPU executes the ESCAPE 
instruction. The instruction mayor may not identify a 
memory operand. 


The CPU does, however, distinguish between ESC 
instructions that reference memory and those that 
do not. If the instruction refers to a memory operand, 
the CPU calculates the operand's address using any 
one of its available addressing modes, and then per- 
forms a "dummy read" of the word at that location. 
(Any location within the 1M byte address space is 
allowed.) This is a normal read cycle except that the 
CPU ignores the data it receives. If the ESC instruc- 
tion does not contain a memory reference (e.g. an 
8087 stack operation), the CPU simply proceeds to 
the next instruction. 


An 8087 instruction can have one of three memory 
reference options: (1) not reference memory; (2) 
load an operand word from memory into the 8087; or 
(3) store an operand word from the 8087 into memo- 
ry. If no memory reference is required, the 8087 sim- 
ply executes its instruction. If a memory reference is 
required, the CU uses a "dummy read" cycle initiat- 
ed by the CPU to capture and save the address that 
the CPU places on the bus. If the instruction is a 
load, the CU additionally captures the data word 
when it becomes available on the local data bus. If 
data required is longer than one word, the CU imme- 
diately obtains the bus from the CPU using the 
request/grant protocol and reads the rest of the in- 
formation in consecutive bus cycles. In a store oper- 
ation, the CU captures and saves the store address 
as in a load, and ignores the data word that follows 
in the "dummy read" cycle. When the 8087 is ready 
to perform the store, the CU obtains the bus from 
the CPU and writes the operand starting at the spec- 
ified address. 


The NEU executes all instructions that involve the 
register stack; these include arithmetic, logical, tran- 
scendental, constant and data transfer instructions. 
The data path in the NEU is 84 bits wide (68 frac- 
tions bits, 15 exponent bits and a sign bit) which 
allows internal operand transfers to be performed at 
very high speeds. 


When the NEU begins executing an instruction, it 
activates the 8087 BUSY signal. This signal can be 
used in conjunction with the CPUWAIT instruction to 
resynchronize both processors when the NEU has 
completed its current instruction. 


Register Set 


The CPU+ 8087 register set is shown in Figure 3. 
Each of the eight data registers in the 8087's regis- 
ter stack is 80 bits and is divided into "fields" corre- 
sponding to the 8087's temporary real data type. 


At a given point in time the TOP field in the control 
word identifies the current top-of-stack register. A 
"push" operation decrements TOP by 1 and loads a 
value into the new top register. A "pop" operation 
stores the value from the current top register and 
then increments TOP by 1. Like CPU stacks in mem- 
ory, the 8087 register stack grows "down" toward 
lower-addressed registers. 


Instructions may address the data registers either 
implicitly or explicitly. Many instructions operate on 
the register at the top of the stack. These instruc- 
tions implicitly address the register pointed to by the 
TOP. Other instructions allow the programmer to ex- 
plicitly specify the register which is to be used. Ex- 
plicit register addressing is "top-relative." 


The status word shown in Figure 6 reflects the over- 
all state of the 8087; it may be stored in memory and 
then inspected by CPU code. The status word is a 
16-bit register divided into fields as shown in Figure 
6. The busy bit (bit 15) indicates whether the NEU is 
either executing an instruction or has an interrupt 
request pending (B= 1), or is idle (B= 0). Several 
instructions which store and manipulate the status 
word are executed exclusively by the CU, and these 
do not set the busy bit themselves. 
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NOTES: 
1. IR is set if any unmasked 
exception 
bit is set, cleared 
otherwise. 
2. See Table 
3 for condition 
code 
interpretation. 
3. Top Values: 
000 = Register 
0 is Top of Stack. 


001 = Register 
1 is Top of Stack . 
•• 


INYALID 
OPERATION 


DENORMALIZED 
OPERAND 


ZERO 
DIVIDE 


OYERFLOW 


UNDERFLOW 


PRECISION 


(RESERVED) 


INTERRUPT 
REQUESl1" 


CONDITION 
CODE'" 


TOP OF STACK POINTERl,. 


NEU 
BUSY 


The four numeric condition code bits (CO-C3) are 
similar to flags in a CPU: various instructions update 
these bits to reflect the outcome of the 8087 opera- 
tions. The effect of these instructions on the condi- 
tion code bits is summarized in Table 4. 


Bits 14-12 of the status word point to the 8087 reg- 
ister that is the current top-of-stack (TOP) as de- 
scribed above. 


Bit 7 is the interrupt request bit. This bit is set if any 
unmasked exception bit is set and cleared other- 
wise. 


Bits 5-0 are set to indicate that the NEU has detect- 
ed an exception while executing an instruction. 


The tag word marks the content of each register as 
shown in Figure'7. The principal function of the tag 
word is to optimize the 8087's performance. The tag 
word can be used, however, to interpret the con- 
tents of 8087 registers. 


The instruction and data pointers (see Figure 8) are 
provided for user-written error handlers. Whenever 
the 8087 executes a math instruction, the CU saves 
the instruction address, the operand address (if 
present) and the instruction opcode. 8087 instruc- 
tions can store this data into memory. 


TAG VALUES: 
00 = VALID 
01 = ZERO 
10 = SPECIAL 
11 = EMPTY 


Instruction 
C3 
C2 
C1 
Co 
Interpretation 
Type 


Compare, 
Test 
0 
0 
X 
0 
ST > Source or 0 (FTST) 


0 
0 
X 
1 
ST < Source or 0 (FTST) 


1 
0 
X 
0 
ST = Source or 0 (FTST) 


1 
1 
X 
1 
ST is not comparable 


Remainder 
01 
0 
00 
02 
Complete 
reduction 
with 
three low bits of quotient 
(See Table 4b) 
U 
1 
U 
U 
Incomplete 
Reduction 


Examine 
0 
0 
0 
0 
Valid, positive unnormalized 
0 
0 
0 
1 
Invalid, positive, exponent 
= 0 
0 
0 
1 
0 
Valid, negative, 
un normalized 
0 
0 
1 
1 
Invalid, negative, 
exponent 
= 0 
0 
1 
0 
0 
Valid, positive, 
normalized 
0 
1 
0 
1 
Infinity, positive 
0 
1 
1 
0 
Valid, negative, 
normalized 
0 
1 
1 
1 
Infinity, negative 
1 
0 
0 
0 
Zero, positive 
1 
0 
0 
1 
Empty 
1 
0 
1 
0 
Zero, negative 
1 
0 
1 
1 
Empty 
1 
1 
0 
0 
Invalid, positive, exponent 
= 0 
1 
1 
0 
1 
Empty 
1 
1 
1 
0 
Invalid, negative, 
exponent 
= 0 
1 
1 
1 
1 
Empty 


NOTES: 
1. ST = Top of stack 
2. X = value 
is not affected 
by instruction 
3. U = value 
is undefined 
following 
instruction 
4. Qn = Quotient 
bit n 


Table 4b. Condition Code Interpretation 
after FPREM Instruction As a 
Function of Divided Value 
MEMORY 
OFFSET 


Dividend Range 
Q2 
Q1 
Qo 


Dividend < 2 • Modulus 
C31 
C11 
00 
Dividend < 4 • Modulus 
C31 
01 
00 
Dividend 
2 4 • Modulus 
02 
01 
00 


CONTROL 
WORD 


STATUS 
WORD 


TAG WORD 


INSTRUCTION 
POINTER (15-0) 


INSTRUCTION 
INSTRUCTION 
POINTER (19-16) 0 
OPCODE (10-0) 


DATA POINTER (15-0) 


DATA POINTER 
(19-16) 


NOTE: 
1. Previous 
value 
of indicated 
bit, not affected 
by FPREM 
instruction 
execution. 


Figure 8. 8087 Instruction 
and Data Pointer 
Image In Memory 
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The 8087 provides several processing options which 
are selected by loading a word from memory into the 
control word. Figure 9 shows the format and encod- 
ing of the fields in the control word. 


The low order byte of this control word configures 
8087 interNpts and exception masking. Bits 5-0 of 
the control word contain individual masks for each of 
the six exceptions that the 8087 recognizes and bit 7 
contains a general mask bit for all 8087 interrupts. 
The high order byte of the control word configures 
the 8087 operating mode including precision, round- 
ing, and infinity controls. The precision control bits 
(bits 9-8) can be used to set the 8087 internal oper- 
ating precision at less than the default of temporary 
real precision. This can be useful in providing com- 
patibility with earlier generation arithmetic proces- 
sors of smaller precision than the 8087. The round- 
ing control bits (bits 11-10) 
provide for directed 


rounding and true chop as well as the unbiased 
round to nearest mode specified in the proposed 
IEEE standard. Control over closure of the number 
space at infinity is also provided (either affine clo- 
sure, ± 00, or projective closure, 
00, is treated as 


unsigned, may be specified). 


NOTES: 
1. Precision 
Control 
00 = 24 bits 
01 = Reserved 
10 = 53 bits 
11 = 64 bits 


intel~ 


The 8087 detects six different exception conditions 
that can occur during instruction execution. Any or 
all exceptions will cause an interrupt if unmasked 
and interrupts are enabled. 


If interrupts are disabled the 8087 will simply contin- 
ue execution regardless of whether the host clears 
the exception. 
If a specific 
exception 
class 
is 


masked and that exception occurs, however, the 
8087 will post the exception in the status register 
and perform an on-chip default exception handling 
procedure, thereby allowing processing to continue. 
The exceptions that the 8087 detects are the follow- 
ing: 
1. INVALID OPERATION: Stack overflow, stack un- 


derflow, indeterminate form (a/a, 
00 
- 
00, etc.) 


or the use of a Non-Number (NAN) as an oper- 
and. An exponent value is reserved and any bit 
pattern with this value in the exponent field is 
termed a Non-Number and causes this exception. 
If this exception is masked, the 8087's default re- 
sponse is to generate a specific NAN called IN- 
DEFINITE, or to propagate already existing NANs 
as the calculation result. 


INVALID 
DPERATIDN 


DENORMALIZED 
OPERAND 


ZERO 
DIVIDE 


OVERFLOW 


UNDERFLOW 


PRECISION 


(RESERVED) 


INT1!RRUPT 
MASK 
(1 • INTERRUPTS 
ARE 
MASKED) 


PRECISION 
CONTROLl1j 


ROUNDING 
CONTROL'· 


INFINITY 
CONTROL 
(0 • PROJECTIVE. 
1 • AFFINE) 


(RESERVED) 


2. Rounding 
Control 
00 = Round 
to Nearest 
or Even 
01 = Round 
Down 
(toward 
- 
00) 
10 = Round 
Up (toward + 00) 


11 = Chop 
(truncate 
toward 
zero) 
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2. OVERFLOW: 
The result is too large in magnitude 
to fit the specified 
format. 
The 8087 will generate 
an 
encoding 
for 
infinity 
if 
this 
exception 
is 
masked. 


3. ZERO DIVISOR: The divisor is zero while the divi- 
dend 
is a non-infinite, 
non-zero 
number. 
Again, 
the 8087 will generate 
an encoding 
for infinity 
if 
this exception 
is masked. 


4. UNDERFLOW: 
The 
result 
is 
non-zero 
but 
too 
small in magnitude 
to fit in the specified 
format. 
If 


this exception 
is masked 
the 8087 will denormal- 


Ambient 
Temperature 
Under Bias 
O·C to 70·C 


Storage Temperature 
- 6S·C to + 1S0·C 


Voltage 
on Any Pin with 
Respect 
to Ground 
-1.0V 
to + 7V 


Power Dissipation 
3.0 Watt 


ize (shift right) the fraction 
until the exponent 
is in 
range. This process 
is called 
gradual 
underflow. 


S. DENORMALIZED 
OPERAND: 
At least one of the 
operands 
or the result is denormalized; 
it has the 
smallest 
exponent 
but 
a 
non-zero 
significand. 


Normal 
processing 
continues 
if this exception 
is 
masked 
off. 


6. INEXACT 
RESULT: 
If the true result is not exactly 
representable 
in the specified 
format, the result is 
rounded 
according 
to the rounding 
mode, and this 
flag is set. If this exception 
is masked, 
processing 
will simply continue. 


NOTICE: This is a production data sheet. The specifi- 
cations are subject to change without notice. 


• WARNING: Stressing the device beyond the "Absolute 
M8Ximum 
Ratings" 
may 
cause 
permanent 
damage. 


These are stress ratings 
only. Operation 
beyond 
the 
"Operating 
Conditions" 
is not recommended 
and ex- 
tended 
exposure 
beyond 
the 
"Operating 
Conditions" 
• 
may affect device reliability. 


Symbol 
Parameter 
Mln 
Max 
Units 
Test Conditions 


Vil 
Input low 
Voltage 
-O.S 
0.8 
V 


VIH 
Input High Voltage 
2.0 
Vcc + O.S 
V 


VOL 
Output low 
Voltage 
(Note 8) 
0.4S 
V 
IOl = 2.SmA 


VOH 
Output High Voltage 
2.4 
V 
IOH = -400 
p.A 


ICC 
Power Supply Current 
47S 
mA 
TA = 2S·C 


III 
Input leakage 
Current 
±10 
p.A 
OV:::; VIN:::; Vcc 


ILO 
Output leakage 
Current 
±10 
p.A 
TA = 2S·C 


VCl 
Clock Input low 
Voltage 
-O.S 
0.6 
V 


VCH 
Clock Input High Voltage 
3.9 
Vcc + 1.0 
V 


CIN 
Capacitance 
of Inputs 
10 
pF 
fc = 1 MHz 


CIO 
Capacitance 
of 1/0 Buffer 
1S 
pF 
fc = 1 MHz 
(ADO-1S, 
A16-A19, 
BHE, 52-SO, 
RQ/GT) 
and ClK 


COUT 
Capacitance 
of Outputs 
10 
pF 
fc = 1 MHz 
BUSYINT 


8087 
8087·2 
8087·1 
Symbol 
Parameter 
(See Note 7) 
Units 
Test Conditions 


Min 
Max 
Min 
Max 
Min 
Max 


TClCl 
ClK 
Cycle Period 
200 
500 
125 
500 
100 
500 
ns 


TClCH 
ClK 
low 
Time 
118 
68 
53 
ns 


TCHCl 
ClK 
High Time 
69 
44 
39 
ns 


TCH1CH2 
ClK 
Rise Time 
10 
10 
15 
ns 
From 1.0V to 3.5V 


TCl2Cl2 
ClK 
Fall Time 
10 
10 
15 
ns 
From 3.5V to 1.0V 


TDVCl 
Data In Setup Time 
30 
20 
15 
ns 


TClDX 
Data In Hold Time 
10 
10 
10 
ns 


TRYHCH 
READY Setup Time 
118 
68 
53 
ns 


TCHRYX 
READY Hold Time 
30 
20 
5 
ns 


TRYlCl 
READY Inactive to ClK 
(Note 6) 
-8 
-8 
-10 
ns 


TGVCH 
RO/GT 
Setup Time (Note 8) 
30 
15 
15 
ns 


TCHGX 
RO/GT 
Hold Time 
40 
30 
20 
ns 


TOVCl 
OSO-1 
Setup Time (Note 8) 
30 
30 
30 
ns 


TClOX 
OSO-1 
Hold Time 
10 
10 
5 
ns 


TSACH 
Status Active Setup Time 
30 
30 
30 
ns 


TSNCl 
Status Inactive Setup Time 
30 
30 
30 
ns 


TILIH 
Input Rise Time (Except ClK) 
20 
20 
20 
ns 
From 0.8V to 2.0V 


TIHll 
Input Fall Time (Except ClK) 
12 
12 
15 
ns 
From 2.0V to 0.8V 


8087 
8087·2 
8087·1 
Symbol 
Parameter 
(See Note 7) 
Units 
Test Conditions 


Mln 
Max 
Mln 
Max 
Mln 
Max 


TClMl 
Command 
Active Delay 
10/0 
35/70 
10/0 
35/70 
10/0 
35/70 
ns 
CL = 20-100 
pF 
(Notes 1, 2) 
for all 8087 Outputs 


TClMH 
Command 
Inactive 
Delay 
10/0 
35/55 
10/0 
35/55 
10/0 
35/70 
ns 
(in addition 
to 8087 


(Notes 1, 2) 
self-load) 


TRYHSH 
Ready Active to Status 
110 
65 
45 
ns 
Passive (Note 5) 


TCHSV 
Status Active Delay 
10 
110 
10 
60 
10 
45 
ns 


TClSH 
Status Inactive 
Delay 
10 
130 
10 
70 
10 
55 
ns 


TCLAV 
Address 
Valid Delay 
10 
110 
10 
60 
10 
55 
ns 


TCLAX 
Address 
Hold Time 
10 
10 
10 
ns 


8087 
8087-2 
8087-1 
Symbol 
Parameter 
(See Note 7) 
Units 
Test ConditIons 


Mln 
Max 
Mln 
Max 
Mln 
Max 


TCLAZ 
Address 
Float Delay 
TCLAX 
80 
TCLAX 
50 
TCLAX 
45 
ns 
CL = 20-100 
pF 


TSVLH 
Status Valid to ALE High 
15/30 
15/30 
15/30 
ns 
for all 8087 Outputs 


(Notes 1, 2) 
(in addition to 8087 


TCLLH 
CLK Low to ALE Valid 
15/30 
15/30 
15/30 
ns 
self-load) 


(Notes 1, 2) 


TCHLL 
ALE Inactive Delay 
15/30 
15/30 
15/30 
ns 
(Notes 1, 2) 


TCLDV 
Data Valid Delay 
10 
110 
10 
60 
10 
50 
ns 


TCHDX 
Status Hold Time 
10 
10 
10 
45 
ns 


TCLDOX 
Data Hold Time 
10 
10 
10 
ns 


TCVNV 
Control Active Delay 
5 
45 
5 
45 
5 
45 
ns 
(Notes 1, 3) 


TCVNX 
Control 
Inactive Delay 
10 
45 
10 
45 
10 
45 
ns 
(Notes 1, 3) 


TCHBV 
BUSY and INT Valid Delay 
10 
150 
10 
85 
10 
65 
ns 


TCHDTL 
Direction 
Control Active 
50 
50 
50 
ns 
Delay (Notes 1, 3) 


TCHDTH 
Direction 
Control 
Inactive 
30 
30 
30 
ns 
Delay (Notes 1, 3) 


TSVDTV 
STATUS to DT /R Delay 
0 
30 
0 
30 
0 
30 
ns 
(Notes 1, 4) 


TCLDTV 
DT /R Active Delay 
0 
55 
0 
55 
0 
55 
ns 
(Notes 1, 4) 


TCHDNV 
DEN Active Delay 
0 
55 
0 
55 
0 
55 
ns 
(Notes 1, 4) 


TCHDNX 
DEN Inactive Delay 
5 
55 
5 
55 
5 
55 
ns 
(Notes 1, 4) 


TCLGL 
RQ/GT 
Active Delay 
0 
85 
0 
50 
0 
38 
ns 
CL =40 
pF (in 
(Note 8) 
addition to 8087 


TCLGH 
RQ/GT 
Inactive 
Delay 
0 
85 
0 
50 
0 
45 
ns 
self-load) 


TOLOH 
Output Rise Time 
20 
20 
15 
ns 
From 0.8V to 2.0V 


TOHOL 
Output Fall Time 
12 
12 
12 
ns 
From 2.0V to 0.8V 


NOTES: 
1. Signal 
at 8284A, 
8288, 
or 82188 
shown 
for reference 
only. 


2. 8288 timing/82188 
timing. 


3. 8288 timing. 
4. 82188 
timing. 
5. Applies 
only to T3 and wait states. 


6. Applies 
only to T2 state (8 ns into T3)' 
7. IMPORTANT 
SYSTEM 
CONSIDERATION: 
Some 
8087-1 
timing 
parameters 
are constrained 
relative 
to the corresponding 
8086-1 
specifications. 
Therefore, 
8086·1 
systems 
incorporating 
the 8087-1 
should 
be designed 
with 
the 8087-1 
specifica· 


tions. 
8. Changes 
since 
last revision. 
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205835-8 
A.C.Testing:Inputsaredrivena12.4Vfor a Logic"1" and0.45V 
for a Logic"0". 
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NOTES: 
205835-10 
1. All signals 
switch 
between 
VOL and VOH unless 
otherwise 
specified. 


2. READY 
is sampled 
near the end of T2. T3 and Tw to determine 
if Tw machine 
states 
are to be inserted. 


3. The local bus floats 
only if the 8087 is returning 
control 
to the 8086/8088. 
4. ALE rises at later of (TSVLH, 
TCLLH). 


5. Status 
inactive 
in state just prior to T4. 


6. Signals 
at 8284A 
or 8288 
are shown 
for reference 
only. 


7. The 
issuance 
of 8288 
command 
and control 
signals 
(~, 
(~, 
M.4WC, and DEN) 
lags the active 
high 8288 
CEN. 
8. All timing 
measurements 
are made at 1.5V unless 
otherwise 
noted. 
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READY(_7 
INPUT) { 
(HE 
NOTE2) 


TSVDTV 
TCLDTV 


{ 


(SE~:tTE 
I) 


121II OUTPUTS 
RD 
(SEE NOTEI "7) 


DEN 


{: 
WR 
rTCLML 


NOTES: 
205835-11 
1. All signals 
switch 
between 
VOL and VOH unless 
otherwise 
specified. 


2. READY 
is sampled 
near the end of T2. T3 and Tw to determine 
if Tw machine 
states 
are to be inserted. 
3. The local bus floats 
only if the 8087 
is returning 
control 
to the 80186/80188. 
4. ALE rises at later of (TSVLH, 
TCLLH). 


5. Status 
inactive 
in state just prior to T4. 


6. Signals 
at 8284A 
or 82188 
are shown 
for reference 
only. 
7. The 
issuance 
of 8288 
command 
and control 
signals 
(MFiOC. 
(MWTC. 
AMWC, 
and DEN) 
lags the active 
high 8288 
CEN. 
8. All timing 
measurements 
are made at 1.5V unless 
otherwise 
noted. 


9. DT/R 
becomes 
valid at the later of (TSVDTV. 
TCLDTV). 


• 
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READY 
{ 


IN~ 


",20 CLK CYCLES 


"'. CLK CYCLES 


lI087 READY TO 
EXECUTE 
INSTRUCTIONS 


205835-13 
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AD,,-AD. 
A,JS,-A"IS. 
1,.1,.1, 
IRIJS7 


_r-'i:~gt:~ 
-0 


TClQl 
----f' 


NOTE: 
The CPU provides 
active 
pullup 
of RO/lTIo, see TClGH 
spec. 


AD,,-AD. 
A1I'.,-A,/la 
1,.1,.1, 
IRfJS7 


NOTE: 
Alternate 
master 
may not drive the buses outside 
of the region 
shown 
without 
risking 
bus contention. 


ALTERNATE MASTER 


(SEE NOTE) 


ClK 
\ 
•• 
•.• 
~ 


BUSY.INT 
----- 
------ 


-TCHBV 
- 
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Temporary 
Real Memory 
to 
ST(O) 


BCD Memory 
to ST(O) 


FST = STORE 


ST(O) to Integer/Real 
Memory 


FSTP = STORE AND POP 


ST(O) to IntegerlReal 
Memory 


ST(O) to Temporary 
Real 
Memory 


ST(O) to BCD Memory 


Comparison 


FCOM = Compare 


Integer/Real 
Memory 
to ST(O) 


Integer/Real 
Memory 
to ST(O) 


ST(i) to ST(O) 


FCOMPP = Compare 
ST(1) to 
ST(O) and Pop Twice 


FTST = Test ST(O) 


I 


Optional 
Clock Count Ranga 
',1' 
811 
32811 
32811 
84811 
1.811 
D10placamanl 
R.al 
Inl89·' 
R.al 
Inl.ge, 


I 
MF 
~ 
00 
01 
10 
11 
I ESCAPE 
MF 


I ESCAPE 


I ESCAPE 
0 
I ESCAPE 


I ESCAPE 


I ESCAPE 
MF 


I ESCAPE 
1 
0 


I ESCAPE 
MF 


I ESCAPE 


I ESCAPE 
0 
I ESCAPE 
I ESCAPE 
0 


I ESCAPE 
0 
0 
1 


I ESCAPE 
MF 


I ESCAPE 
0 
0 
0 


'-. _. _. DISP-: =: 
[- 


MOD 
0 
R/M 
[ 
~ 
_ 
~I~P 
_ 
~ 


1 
1 
0 
0 
0 
ST(I) I 


o 
RIM [ 
- 


o 
ST(I) I 


RIM 
[~_ 
~I~P_ 
J 


R/M [~_~I~P_ 
: 


R/M 
[ 
~_:'I~ 
_ 
: 


o 
RIM 
[ 
__ 
:'I~ 
_ 
: 


ST(i) I 


1 
1 
0 
0 
1 
ST(I) I 


o 
RIM 
[ 
- 


o 
ST(i) I 


I ESCAPE 
MF 
0 L MOD 
0 
RIM 


ESCAPE 
0 
0 
0 
I 
' 
0 
ST(I) 


ESCAPE 
0 I 
0 
0 
0 


ESCAPE 
0 
I 
0 
0 
0 
0 


ESCAPE 
0 
0 
I 
0 
0 
0 


[ 
DISP 
I 


I 


I 


I 


84-90 
82-92 
+EA 
+EA 


15-22 


86-92 
94-94 
98- 106 
+EA 
+EA 
+EA 


94-105 
+ EA 


83-73 
80-93 
+EA 
+EA 
45-52 


I MF 
I 


Optlonll 
',1' Bit 
Dllpllcement 


FLOl ~ LOAD + 1.0 into ST(O) I 


I 


I 


I 


I ESCAPE 
0 
0 
1 I 1 
1 


I ESCAPE 
0 
0 
1 I 1 
1 


1 
0 
1 
0 
0 
0 I 


1 
0 
1 
0 
1 
1 I 


1 
0 
1 
0 
0 
1 I 


1 
0 
1 
0 
1 
0 I 


1 
0 
1 
1 
0 
0 I 


1 
0 
1 
1 
0 
1 I 


FADe ~ Addition 


Integer/Aea' Memory with ST(O) I ESCAPE 
MF 
0 I MOD 
0 
0 
0 
AIM 


ST(i) and ST(O) 
I ESCAPE 
d 
P 
0 I 1 
1 
0 
0 
0 
STeil 


[ =~I~P=_: 


I 


FSUB = Sublraction 


Integar/Aea' Memory with ST(O) I ESCAPE 
MF 
0 I 
MOD 
lOA 
AIM 


STeil and ST(O) 
I ESCAPE 
d 
P 
0 I 1 
1 
lOA 
AIM 
[:=~I~P=] 
l 


FMUL = Multiplication 


Integer/Aea' Memory with ST(O) I ESCAPE 
MF 
0 I 
MOD 
0 
0 
1 
AIM 


STeil Ind ST(O) 
I ESCAPE 
d 
P 
0 I 1 
1 
0 
0 
1 
AIM 
[ :D'~P:: 


I 


FOIV - Division 
Integer/A.II 
Memory with ST(O) I ESCAPE 
MF 
0 I MOD 
1 
1 
A 
AIM 


STeil and ST(O) 
I ESCAPE 
d 
P 
0 I 1 
1 
1 
1 
A 
AIM 


FSQAT - Square Aoot of ST(O) I 


I 


I 


NOTE: 
1. If P = 1 then add 5 clocks. 


ESCAPE 
0 
0 
1 I 


ESCAPE 
0 
0 
1 I 


ESCAPE 
0 
0 
1 I 


1 
1 
1 
0 
1 
0 I 


1 
1 
1 
1 
0 
1 I 


1 
1 
1 
0 
0 
0 I 


Clock Count RInge 
32 Bit 
32 Bit 
14 Bit 
1. Bit 
Rell 
Integer 
Rell 
Integer 


90-120 
108-143 
95-125 
102-137 


+EA 
+EA 
+EA 
+EA 


70-100 (Note 1) 


110-125 
130-144 
112-168 
124-138 
+EA 
+EA 
+EA 
+EA 


90-145 (Note 1) 


215-225 
230-243 
220-230 
224-238 
+EA 
+EA 
+EA 
+EA 


193-203 (Note 1) 
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FABS = Absolute 
Value of 
ST(O) 


FCHS = Change 
Sign of ST(O) 


FPATAN : 
Partial 
Arctangent 
of ST(O) +ST(1) 


F2XMl 
= 2STIOI_1 


FYL2X = ST(1)' 
Log2 
IST(O)I 


FYL2XPI 
= ST(1)' 
Log2 
(ST(O) +1J 


Processor 
Control 


FIN IT = In"lall2ed 8087 


[ESCAPE" 
0 
0 
I ESCAPE 
0 
0 


@CAPE 
0 


[MOD 


I 


1 I 


I 


I 


I 


Optlonll 
8,18BII 
DI~llc.m.nt 


[-_~_~~~-_~-.J 


[ 
~ ~I~~ ~ J 


infel~ 


ESCAPE 
1 
0 
1 I 
1 
1 
0 
0 
0 
ST(i) 


ESCAPE 
0 
0 
1 I 
1 
1 
0 
1 
0 
0 
0 
0 


1 
0 
0 
1 
1 
0 
1 
1 I 


NOTES: 
1. if mod = 00 then OISP = 0·. disp-Iow and disp-high are absent 


if mod = 01 then OISP = disp-Iow sign-extended to 16-bits. disp-high is absent 
if mod = 10 then OISP = disp-high; disp-Iow 
if mod = 11 then rIm is treated as an ST(i) field 
2. if rIm = 000 then EA = (BX) + (SI) + OISP 


if rIm = 001 then EA = (BX) + (01) + OISP 
if rIm = 010 then EA = (BP) + (SI) + OISP 
if rIm = 011 then EA = (BP) + (01) + OISP 
if rIm = 100 then EA = (SI) + OISP 
if rIm = 101 then EA = (01) + OISP 
if rIm = 110 then EA = (BP) + OISP 
if rIm = 111 then EA = (BX) + OISP 
·except if mod = 000 and rIm = 110 then EA = disp-high; disp-Iow. 


3. MF = Memory Format 
oo-32-bit Real 
01-32-bit Integer 
10-64-bit Real 
11-16-bit Integer 
4. ST(O) = Current stack top 
ST(i) = ith register below stack top 
5. d = Destination 
Q-Oestination is ST(O) 
1-0estination 
is ST(i) 
6. P = Pop 
Q-No pop 
1-Pop 
ST(O) 
7. R = Reverse: When d = 1 reverse the sense of R 
Q-Destination 
(op) Source 
1-5ource 
(op) Destination 
8. For FSQRT: 
-0 
s: ST(O) s: + ex> 


For FSCALE: 
-215 
s: ST(1) < +215 and ST(1) integer 
For F2XM1: 
0 s: ST(O) s: 2-1 
For FYL2X: 
0 < ST(O) < 
ex> 


-ex> 
< ST(1) < + ex> 
For FYL2XP1: 
0 s: IST(O)I< (2 - 
Y2)/2 


-ex> 
< ST(1) < 
ex> 
For FPTAN: 
0 s: ST(O) s: 1T/4 
For FPATAN: 
0 s: ST(O) < ST(1) < + ex> 


_ 
_ 
T _ 
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80386,80286,80186, and 
8086CPUs 
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Inte1386TM AND Inte1486™ 
FAMIL Y 
DEVELOPMENT 
SUPPORT 


COMPREHENSIVE 
DEVELOPMENT 
SUPPORT 
FOR THE 


Intel386TM AND Intel486™ 
FAMILIES 
OF MICROPROCESSORS 


The perfect complement to the Intel386TM and i486™ microprocessor family is a 
comprehensive 
development solution. Intel provides a complete, synergistic hardware 
and software development toolset, that delivers full access to the power of the Intel386 
and i486 microprocessor family architectures. 


Intel development tools are easy to use, yet powerful, with an up-date user interface and 
productivity boosting features such as symbolic debugging. Each tool is designed to help 
move your application from the lab to the market. 


If what interests you is getting the best product to market in as little time as possible, 
Intel is the choice. 


intel· 


• Comprehensive 
support for the full 32 bit 
Intel386 and Inte1486 microprocessor 
architectures-includes 
protected 
mode, 4 
gigabyte physical memory addressing, 
and 
Intel486 microprocessor 
on-chip cache and 
numerics 
• In-circuit 
emulators 
provide a standard 
windowed interface 
that is common across 
Intel debug tools and architectures 
• Emulators 
also feature 
a source line display 
and symbolics to allow debugging in the 
context of the original program 
• Intel high-level languages 
provide 
architectural 
extensions 
for manipulating 
hardware 
directly without 
assembly 
language 
routines 


• Languages 
provide a common object code 
format (Intel OMF386) that supports 
symbolic debug and permits 
the intermixing 
of modules written 
in various languages 
• ROM-able code is output directly from the 
language 
tools, significantly 
reducing 
the 
effort necessary 
to integrate 
software 
into 
the fmal target system 
• Extensive 
support for the Intel family of 
math coprocessors 
• Operation 
in DOS mM PC AT and PS/2 
Model 60 and SO, running 
DOS. 


intel· 


ASM-386/486 
MACRO 
ASSEMBLER 
Intel's ASM 386 macro assembler for the 
Intel386 and Intel486 Families offers many 
features normally found only in high-level 
languages. The macro facility in ASM 386 
saves development time by allowing common 
program sequences to be coded only once. The 
assembly language is strongly typed, 
performing extensive checks on the usage of 
variables and labels. 
Other Intel ASM 386 features include: 
• "High-level" assembler mnemonics to 
simplify the language 
• Structures 
and records for data 
representation 
• Support for Intel's standard object code 
format for source-level symbolic debug, and 
for linking object modules from other 
Intel386 and Intel486 microprocessor 
languages 
• Full support for processor and math 
coprocessor instruction 
sets 
• A "M0D486" switch for support ofthe i486 
microprocessor instructions 
• 16 bit or 32 bit address overrides 
• Supports development for Virtual 86, Real, 
286 Protected, and 386 Protected modes 


iC386/486 
COMPILER 
Intel's iC-386 compiler combines the power of C 
programming 
language with special features 
for architectural 
support and code efficiency. 


The compiler produces code for Intel386 and 
Intel486 processors from C source flies, and 
conforms to the 1989 ANSI standard 
(ANS 
X3.159-1989) for the C programming 
language. 


Key Intel iC-386 features include: 
• Controls to tailor the compilation for each 
step of your application development process 
• In-line versions of many ANSI-standard 
library functions 
• Expanded memory support (LIM Version 3.0 
and higher) for large applications 
• Object code (including supplied run-time 
libraries) suitable for ROM 
• Three different levels of optimization 
• A choice ofthree 
segmentation 
memory 
models (small, compact, and flat) to create 
compact and efficient code 


• In-line processor-specific functions and time- 


saving macros that provide access to the 
special features of the Intel386 and Intel486 
processors 
• In-line floating-point instructions 
for the 
Intel387™ numerics coprocessor and 
Intel486 processor floating-point unit 
• Time-saving macros and functions to help 
assembly language routines interface with 
Intel's high-level programming 
languages 
• The standard C run-time library plus 
libraries for floating-point support and the 
iRMX@III C interface library 
• An easy interface to Intel's non-C 
programming 
languages 
• Support for source-level debugging 
• Programming 
with subsystems, allowing 
mixed segmentation 
memory models 
• Extensions to the 1989 ANSI C standard 
for 
compatibility with previous versions Intel C 
• Fast and efficient functions for common 
programming 
tasks 


PL/M-386/486 
COMPILER 
Intel's PL/M-386 is a structured 
high-level 
system implementation 
language for the 
Intel386 and Intel486 Families. PL/M-386 
supports the implementation 
of protected 
operating system software by providing built- 
in procedures and variables to access the 
Intel386 and Intel486 architectures. 
For 
efficient code generation, 
PL/M-386 features 
four levels of optimization, a virtual symbol 
table, and four models of program size and 
memory usage. 
• 
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Other Intel PL/M-386 features include: 
• The ability to define a procedure as an 
interrupt 
handler as well as facilities for 
generating 
interrupts 
• Direct support of input and output from 
microprocessor ports 
• Upward compatibility with Intel PL/M-86 
and PL/M-286 source code 
• A "MOD486" compiler switch for Intel486 
microprocessor instruction generation 


PL/M-386 combines the benefits of a high-level 
language with the ability to access the Intel386 
and Intel486 architectures. 
For the 
development of systems software, PL/M-386 is 
a costeffective alternative 
to assembly 
language programming. 


FORTRAN·386/486 COMPILER 


Intel's FORTRAN-386 compiler is a cross- 
compiler that supports the entire Intel386 
family of components and Intel486 
microprocessors (when operating in the 386 
chip mode) microprocessors. 
FORTRAN-386 features high-level support for 
floating-point calculations, transcendentals, 
interrupt 
procedures, and run-time exception 
handling. FORTRAN-386 meets the ANSI 
FORTRAN-77 language subset specification 
and supports extensions endorsed by the 
Department 
of Defense (DOD),extensions that 
support programs written for the ANSI 
FORTRAN 66 standard, and extensions that 
support the Intel386 microprocessor and 
related numerics coprocessors. 
To aid in the development and debugging 
process, the compiler generates warning and 
error messages and an optional listing file. The 


• listing file can include symbol cross-reference 
tables and a listing of the generated Intel386 
microprocessor assembly-language 
instructions. 
Library routines are reentrant 
and ROMable. 


Other Intel FORTRAN-386 compiler features 
include: 
• Object code can be configured to reside in 
either RAM or ROM 
• The program code can be optimized for 
execution speed or memory size 
• Source-level debugging is supported via the 
rich symbolics provided in the object module 
format (Intel OMF386) 
• Support for the proposed REALMATH IEEE 
floating point standard 


RLL-386/486 RELOCATION, 
LINKAGE, AND LIBRARY 
TOOLS 


The RLL 386 relocation, linkage, and library 
tools feature comprehensive support of the full 
Intel386 and Intel486 architectures. 
The tools 
link separate modules, build object libraries, 
link in Intel387 support, build tasks to execute 
under protected mode, or multitasking, 
memory protected software. RLL-386 supports 
loadable, linkable, and bootloadable Intel 
object module formats; and supports all 
segmentation 
models. RLL-386 consists of the 
following: 


Binder 
- 
for linking multiple object 
modules into a single program 
and resolving references between 
modules. 
Builder 
- 
for producing absolute object 
modules, assigning addresses, and 
creating protected mode data 
structures. 
Librarian - 
for creating and maintaining 
libraries of object modules. 


EMUL·387, NUM-387 NUMERICS 
SUPPORT LIBRARIES 
Intel's EMUL-387 and NUM-387 Numerics 
Libraries fully support the Inte1387™, Intel 
387 DX, Intel 387 SX math coprocessors and 
the Intel486 internal numerics unit-whether 
an actual math coprocessor is used in the final 
system or not. 


For Intel386 microprocessor based applications 
without a math coprocessor, EMUL-387, a 
numerics software emulator, will execute 
instructions 
as though the coprocessor were 
present. Its functionality 
is identical to that of 
the math coprocessor. It is ideal for 
prototyping and debugging floating-point 
application software independent 
of hardware. 
Further, this permits portability of application 
code regardless of the presence of math 
coprocessor hardware in target systems. 


For applications with a math coprocessor, 
NUM-387 numerics support library provides 
Intel's ASM 386, C-386, PL/M-386, and 
FORTRAN-386 language users with enhanced 
numeric data processing capability. With the 
library, it is easy for programs to do floating 
point arithmetic. 
Programmers 
can bind in 
library modules to do trigonometric, 
logarithmic and other numeric functions. 


int:el. 


The user is guaranteed 
accurate, reliable 
results for all appropriate 
inputs. 
Intel's NUM-387 support library is a collection 
of four functionally distinct libraries: 
• Common elementary 
function library 
routines perform algebraic, logarithmic, 
exponential, trigonometric, 
and hyperbolic 
operations on real and complex numbers, as 
well as real-to-integer conversions; the 
routines extend the ranges of the coprocessor 
instructions 
• Initialization 
library routines set up the 
numerics processing environment 
for the 
Intel386 family of processors with an 
Inte1387, DX, or SX or true software 
emulator 
• Decimal conversion library routines convert 
floating-point numbers from one Inte1387, 
DX, or SX binary storage format to another, 
or from ASCII decimal strings to Inte1387, 
DX, or SX binary floating-point format and 
vice versa 
• Exception handling library routines make 
writing numerics exception handlers easier 
All support library modules are in Intel386 
microprocessor object module format antel 
OMF-386) so they can be linked with the object 
output of any Intel language. All routines are 
reentrant 
and ROMable. 
By using Intel's NUM-387, the user is 
guaranteed 
that the numeric software meets 
industry standard (ANSI/IEEE standard for 
binary floating point arithmetic, 
754-1985)and 
is portable, thus maintaining 
software 
investment. 
. 


DB-386 Software 
Debugger 
Intel's DB-386 is a PC-based software 
development environment 
with source-level 
symbolic debug capabilities for object modules 
produced by Intel's assembler and high-level 
language compilers. This software debug 
environment 
allows Intel386 microprocessor 
code to be executed and debugged directly on a 
Intel386 DX or Intel386 SX microprocessor 
based PC, without any additional target 
hardware required. With Intel's standard 
windowed human interface, users can focus 
their efforts on finding bugs rather than 
spending time learning and manipulating 
the 
debug environment. 
Other Intel DB-386 features include: 
• A run-time interface allows protected-mode 
Intel386 microprocessor programs to be 
executed directly on a Intel386 DX or 
Intel386 SX microprocessor based PC 


• Drop-down menus make the tool easy to 
learn for new or casual users. A command 
line interface is also provided for more 
complex problems 
• Watch windows (which display user-specified 
variables), trace points, and breakpoints 
(including fixed, temporary, and conditional) 
can be set and modified as needed 
• The user can browse source and callstacks, 
observe processor registers, and access watch 
window variables by either pull down menus 
or by a single keystroke, using function keys 
• The user need not know whether a variable 
is an unsigned integer, a real, or a 
structure-the 
debugger uses the wealth of 
typing information available in Intel 
languages to display program variables in 
their respective type formats 
• DB-386 supports the Intel486 microprocessor 
when operated in the Intel386 
microprocessor mode 


Intel386 
and Inte1486 Family 
In-Circuit 
Tools 
Intel in-circuit emulators are used in many 
different debug environments 
including the 
design and test of: PC BIOS software and 
motherboard hardware, Intel386 and Intel486 
based single board computers, and application 
and operating system software for DOS-based, 
ROM-based, and UNIX-based systems. 
The Intel386 and Intel486 In-Circuit 
Emulators aCETM)take advantage of exclusive 
Intel technology to provide accurate emulation 
for Intel's 80386 SX, 80386 DX, 80376, and 
80486 microprocessors. Special access to 
internal processor states provides information 
not available to emulators which simply 
monitor the external buses. Emulators which 
do not have access to the internal processor 
conditions cannot guarantee 
accurate display 
of instructions 
executed by the microprocessor. 


With an Intel In-circuit Emulator you can be 
certain that the emulator is displaying 
accurate execution history, even when 
executing code from the on-chip cache memory 
ofthe Inte1486. 


The DOS hosted Intel386 DX and Intel386 SX 
emulators feature a windowed, menu-driven, 
human interface which provides easy access to 
the powerful features of these emulators. This 
makes it easy for novice or infrequent users to 
get the most out of every debug session. This 
interface features multiple windows which 


• 
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allow you to simultaneously 
view source code, 
assembly code, memory, trace, variables, 
and 
registers. 
This interface 
is fully symbolic when 
used with Intel languages. 


All of the emulators 
feature 
a combination 
of 
powerful and flexible breakpoints. 
The 
products 
use a combination 
of software 
breakpoints, 
hardware 
breakpoints, 
and on· 
chip debug registers 
to provide a rich set of 
recognition 
logic. Flexible breakpoints 
make it 
possible to set breakpoints 
on instruction 
execution 
and/or 
any possible bus event. 


Trace filtering 
provides the ability to select the 
information 
captured 
in the trace buffer. 


ICE-386 SX allows capture 
of solely bus cycle 
information 
or both bus cycle and execution 
information. 
In addition, 
the ICE-386 DX can 
filter wait-state 
information 
from the trace 
buffer. ICE-486 provides the most flexible trace 
collection by allowing capture 
of information 
by any combination 
of bus cycle type including 
filtering 
of wait states, by instructions 
only, or 
by both bus cycles and instructions. 


Other features 
oflntel 
emulators 
include: 


• Unparalleled 
support ofthe Intel386 and 
Intel486 
architectures, 
notably the native 
protected 
mode 
• Emulation 
at clock speeds to 33 MHz, and 
full featured 
trigger and trace capabilities 
• The Intel386 family emulators 
are 
convertible 
using removable 
probes to 
support 
the 80386 DX and 80386 SX 
microprocessors. 
The Intel486 processor is 
also supported 
via a product upgrade. 


Relocatable Expanded Memory 


Designed to enhance 
your existing ICE-486 and 
the ICD-486 debugger (REM486 is included 
with ICE-486 and an option for ICD-486). This 
optional 
relocatable 
expansion 
memory board 
adds 2 Mbyte of memory which the ICE or ICD 
can use in place of memory on the user target 
board. 


ONCE-386and Transmuter 
Adapters 


If you have a surface mount Inte1386 SX 
microprocessor 
design using lOO-pin PQFP 
parts, Intel ICE emulators 
have on-circuit 
emulation 
(ONCE) capability. 
With surface 
mounted 
components, 
the ICE-386 SX 
emulator 
cabling clamps over the part, tri- 
stating 
the component, 
and allowing the 
emulator 
to operate. This allows you to debug 
manufactured 
boards without 
resoldering. 
For 
early target 
load development, 
a transmuter 
adapter 
can be used. The transmuter 
provides 
a better connection 
technique 
for debugging 
systems where the adapter 
cable will have to 
be attached 
and removed many times (like in 
prototype 
development). 


ICD-486In-Circuit Debugger 


The ICD-486 In-circuit 
Debugger provides a 
low-cost alternative 
for full speed in-target 
Intel486 development. 
ICD-486 implements 
a 
subset of ICE functionality 
including: 
symbolic 
debugging, debug of high-speed 
cached 
applications, 
software and debug register 
breakpoints, 
and in-circuit 
operation. 


Worldwide Service, Support, and 
Training 


To augment 
its developing tools, Intel offers 
field application 
engineering 
expertise, 
hotline 
technical 
support, and on-site service. 


Intel also offers Software Support which 
includes technical 
software information, 
automatic 
distributions 
of software and 
documentation 
updates, 
iCOMMENTS 
publication, 
remote diagnostic 
software, and 
development 
tools troubleshooting 
guide. 


Intel's 9O-day Hardware 
Support package 
includes technical 
hardware 
information, 
telephone 
support, warranty 
on parts, labor, 


material, 
and on-site hardware 
support. 


Intel Development 
Tools also offers a 3D-day, 
money-back guarantee 
to customers 
who are 
not satisfied after purchasing 
any Intel 
development 
tool. 
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Component 
Host 
Product 
i486 
386 
386 
DOS 
DX 
SX 
3.x and 5.0 


ASM-386 Macro Assembler 
'" 
'" 
'" 
'" 
iC-386 Compiler 
'" 
'" 
'" 
'" 
PLlM-386 Compiler 
'" 
'" 
'" 
'" 
FORTRAN-386 Compiler 
'" 
'" 
'" 
'" 
RLL-386 Relocation, 
'" 
'" 
'" 
'" 
Linkage, Library, Support 
Tools 


NUM-387 Libraries 
'" 
'" 
'" 
'" 
EMUL-387 Libraries 
NA 
'" 
'" 
'" 
In-Circuit Emulators 
'" 
'" 
'" 
'" 
In-Circuit Debugger 
'" 
'" 
DB-386 Software Debugger 
'" 
'" 
'" 
'" 


386/i486™ 
FAMILY 
DOS 
HOSTED DEVELOPMENT 
KIT 
ORDER CODES 
Software 
Order Codes 


All software supports 386 and 486 
microprocessor families except where 
indicated. 
DKIT386C 
Compiler Software 
Development Kit (See 
following content list). 


D86ASM386NL ASM macro assembler for 
PC-DOS systems. 


D86C386NL 
DOS resident, ANSI standard 
(ANS X3.159-1989) C 
compiler. 


D86PLM386NL 
DOS resident PL/M compiler. 


D86FOR386NL 
DOS resident Fortan 
Compiler. 


D86RLL386NL 
DOS resident software 
development package. 
Contains Binder (for linking 
separately compiled modules), 
a Builder (for configuring 
protected multi-tasking 
systems), a cross reference 
Mapper, and a Librarian. 
Use 
this tool in conjunction with 
Intel's 80386 compilers and 
macro assembler. 


DB386 
DOS S/W debugger. 
The Intel Basic Software Development Kit for 
the DOS hosted environment 
includes: 


iC386 compiler 
ASM386 assembler 
RLL386 relocation linker and locator 
NUM387 numerics library 
EMUL387 math coprocessor emulator 
library 
DB386 software debugger 
OMF386LOAD loader development object 
module format documentation 
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IN-CIRCUIT TOOL ORDER 
CODES 
All In-eircuit 
emulator 
codes include: control 
unit, power supply, processor module, Stand- 
Alone Self Test board, bus Isolation Board, and 
DOS host software and serial interface 
cable. 


ICE386SX25V 
ICE-386 SX In-eircuit 
emulator 
for the Intel386 
SX component 
to 25 MHz. 


pICE386SX20D 
ICE-386 SX In-eircuit 
emulator 
for the 80386 SX 
component 
to 20 MHz. 


pICE386DX25DZ 
ICE-386 DX In-eircuit 
emulator 
for the 80386 DX 
component 
to 25 MHz. 


ICE386DX33D 
ICE-386 DX In-eircuit 
emulator 
for the 80386 DX 
component 
to 33 MHz. 


ICD48650D 
In-eircuit 
debugger for the 
80486 microprocessor 
to 
50 MHz. 


ICE.486 In-eircuit 
emulator 
for the 80486 component 
to 
33 MHz. 


ICE CONVERSION KITS 
KBASECONC 
Converts ICE-486 to ICE- 
376, ICE-386 SX, or ICE-386 
DX. 
KBASECONV 
Converts ICE-386 SX or 
ICE-386 DX to ICE.486. 


TOICE386SX20D 
Converts ICE-386 DX to 
ICE-386 SX 20 MHz. 


TOICE386DX25D 
Converts ICE-386 SX to 
ICE-386 DX 20 MHz. 


TOICE48633D 
Converts ICE-386 SX or 
ICE-386 DX to ICE.486 33 
MHz. 


ADDITIONAL TOOL ORDER 
CODES 


386SXONCE 
Kit 


REM486A 


100 pin PQFP to 132 pin 
PGA adaptor 
kit. 


2 Mbyte relocatable 
expansion 
memory option 
for ICD-486 (included with 
ICE.486). 


To order your Intel Development 
Tool product, 
for more information, 
or for the number 
of 
your nearest 
sales office or distributor, 
call 
800-874-6835 (North America). For literature 
on other Intel products call8QO-548-4725 
(North America). Outside of North America, 
please contact your local Intel sales office or 
distributor 
for more information. 
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ISOCS6/S0ClS6 
SOFrWARE DEVELOPMENT TOOLSI 
_ 


• 


280809-1 


Intel supports application development for the SOCS6/S0ClS6 family of microprocessors' 
with a complete set of development languages and utilities. Intel software tools generate 
fast and efficient code and are designed to give maximum control over the processor. 
Most importantly 
they can decrease the design time of an embedded system and 
accelerate your product's time-to-market. 


FEATURES 
• Macro assembler for high-performance 
code 
• ANSI C compiler with numerous 
processor-specific extensions. 
• PL/M compiler for high-level language 
programs with support for many low- 
level hardware functions 
• Linker to link Intel-generated 
compiler 
and assembler modules together 
• Locator to generate files with absolute 
addresses for execution from ROM-based 
systems 


• Windowed, interactive source level 
debugger that works with all Intel 
languages 
• AEDIT Source Code and text editor 
• Library manager for creating and 
maintaining 
object module libraries 


• Complete SOS7/S0ClS7 
numeric 
libraries, including software emulator 
support 
• Object-to-hex conversion utility for 
EPROM support 
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ASM-S6 is used to translate 
symbolic assembly 
language 
source into relocatable 
object code 
where utmost speed, small code size and 
hardware 
control are critical. 


•• Macro facility saves development 
and 
maintenance 
time, since common code 
sequences 
need only be developed once. 


•• Simplified instruction 
set makes program 
development 
easier. 
•• Saves development 
time by performing 
extensive 
checks on consistent 
usage of 
variables 
and labels. Inconsistencies 
are 
detected when the program 
is assembled, 
before linking or debugging is started. . 


Intel's iC-86 brings the full power of the C 
programming 
language 
to embedded 
applications 
based on the SOCS6/S0Cl86 
family of microprocessors. 
iC-S6 can also be 
used to develop real mode programs 
to be 
executed on the SOC2S6or the Intel3S6TM 
microprocessors. 


•• Generates 
compact efficient code - 
easily 
loaded into ROM-based systems. 


•• Highly optimized with four levels of 
optimization, 
including 
ajump 
optimizer 
and 
improved register 
manipulation 
via register 
history. 


•• Produces 
ROMabie code - 
can be loaded 
directly into embedded target systems. 
Libraries 
completely 
ROMable, retargetable, 
and reentrant. 


•• Supports 
small, compact, medium, and large 
memory segmentation 
models. Allows 
memory modules to be mixed using "near" 
and "far" pointers. 
•• Extensive 
debug information, 
including 
type 
information 
and symbols, increases 
programming 
productivity. 
•• Built-in functions 
for automatic 
machine 
code generation 
improve compile-time 
and 
run-time 
performance. 
Eliminates 
need for 
in-line assembly code or making calls to 
assembly functions. 
Allows registers, 
I/O 
ports, interrupts 
and the numerics 
chips to 
be controlled 
directly in C and not in 
assembly code. 


•• ANSI C-conforming. 
Fully linkable with 
other Intel S0C86/SOCl86 languages 
such as 
ASM and PL/M. Allows programmers 
to 
choose optimallanguage(s) 
for application. 


PL/M-S6 is a high-level programming 
language 
designed to support the software 
requirements 
of advanced 
16-bit 
microprocessors. 
The PL/M language 
provides 
both the productivity 
advantages 
of a high- 
level language 
and access to the low-level 
hardware 
features 
found in the assembly 
language. 


•• Modular and structured 
programming 
support. 
Final applications 
easier to 
understand, 
maintain, 
and support. 


•• Includes extensive 
list of built-in functions, 
e.g., TYPE CONVERSION 
functions, 
STRING manipulations, 
and functions 
for 
interrogating 
hardware 
flags. 


•• Define interrupt 
handling 
procedures 
using 
the INTERRUPT 
attribute. 
Compiler 
generates 
code to save and restore all 
registers 
for interrupt 
procedures. 


•• Compile-time 
options to increase 
flexibility 
ofPL/M 
compiler. Options include four 
optimization 
levels, conditional 
compilation, 
inclusion of common PL/M source files from 
disk, symbol cross-referencing, 
and optional 
assembly language 
code in list me . 


•• Supports 
seven data types. Allows compiler 
to perform signed, unsigned, 
and floating- 
point arithmetic. 
•• Object modules compatible 
with all other 
object modules generated 
by Intel S0C861 
SOClS6 languages. 
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Link-86 combines multiple 
object modules into 
a single program 
and resolve references 
between 
independently 
compiled modules. 
Both tools can increase 
productivity 
by 
enabling 
the user to use modular 
programming, 
making applications 
easier to 
design, test, and maintain. 


• Incremental 
linking allows new modules to 
be easily added to existing software. 


• Final linked module can be either a bound 
load-time- locatable 
module or a relocatable 
module. 
• .EXE option allows modules to be generated 
that can be executed directly in a DOS 
system. 


• Standard 
modules can be reused in different 
applications, 
decreasing 
software 
development 
time. 


The LOC-86 tool converts relocatable 
8OC86/ 
8OC186 object modules into absolute object 
modules. Both will allow you to assign 
addresses. 


HIGHLIGHTS AND BENEFITS 
• Default address assignment 
algorithm 
automatically 
assigns absolute addresses 
to 
object modules prior to loading code into 
target system. Frees user from concern 
regarding 
the final arrangement 
ofthe 
object 
code in memory. 


• User has ability to override the control and 
specify absolute 
addresses 
for various 
Segments, 
Classes, and Groups in memory. 
• User can reserve various parts of memory. 
• Simplifies set up of bootstrap 
loader and 
initialization 
code for ROM-based systems. 
Very important 
and beneficial 
for embedded 
application 
development 
. 
• Optional print file containing 
diagnostic 
information 
helpful in debugging may be 
generated. 
• 
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Both Lib-86 creates and maintains 
libraries of 
software object modules. Standard modules 
can be placed in a library and linked 


OH-86 OBJECT-TO-HEXADECIMAL CONVERTER L 


The OH-86 utiltity converts Intel 80C86/186 
object modules into standard hexadecimal 
format, allowing the code to be loaded directly 


into PROM using industry standard PROM 
programmers. 


The 8027/8OC187 numerics libraries fully 
support the 8087 and 8OC187math 
coprocessors, with or without the math 
coprocessor in the final system; numeric 
functions may be processed by the math 
coprocessor or by the corresponding software 
emulator. 
Numerics Software Emulator 
• For applications without a math coprocessor 
• Executes instructions 
as though coprocessor 
present; functionality 
identical to math 
coprocessor. 


• Ideal for prototyping and debugging floating 
point application code independent of 
hardware; supports portable code. 


Numerics Support Library 
• For applications with a math coprocessor 
• Provide Intel ASM, C, PL/M, and FORTRAN 
users with enhanced numeric data 
processing capability; easy to do floating 
point math. 


• 4 functionally distinct libraries support 
floating point operations. 
• Common elementary 
function library: 
algebraic, logarithmic, exponential, 
trignometric 
and hyperbolic operations on 
real and complex numbers. Real-to- 
integer conversions 
• Initialization 
library: Set up the numerics 
processing environment 
(math 
coprocessor or software emulator). 


• Decimal conversion library: Converts 
floating point numbers from one binary 
storage format to another, from ASCII 
decimal strings to binary floating point 
format, or vise- versa. 
• Error handling library: Simplifies coding 
numerics exception handlers. 
• All support library modules in OMF-86 
format; can be linked with object output of 
any Intel language. 


• All library routines reentrant 
and ROMable. 
• Meets industry standard (ANSI/IEEE 
standard for binary floating point 
arithmetic, 
754-1985) 


DB-86 is a DOS-hosted, high-level source code 
debugger for programs written in C, PL/M, 
FORTRAN, and Pascal. Its powerful, source- 
oriented interface allows users to focus their 
efforts on finding bugs, not learning how to use 
the debug environment. 


• Drop-down menus and on-line help decrease 
learning time for beginning users. 


• Watch windows, conditional breakpoints, 
trace points and fixed and temporary 


breakpoints can be set and modified as 
needed. 


• Browse Source and Call Stack, review 
processor registers, observe watch window 
variables - 
all accessed via a pull down 
menu or single keystroke. 
• Uses extensive debug information available 
in Intel languages to display program 
variables in their respective type formats. 
• Provides support for overlayed programs and 
the math coprocessors. 
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Aedit is a full-screen 
text editing system 
designed specifically 
for software engineers 
and technical 
writers. 
The output file is the 
pure ASCII text (or HEX code) you input - 
no 
special characters 
or proprietary 
formats. 
Its 
numerous 
features 
and advanced capabilities 
make it an excellent 
tool to support the 8OC86/ 
8OC186 development 
environment. 


HIGHLIGHTS AND BENEFITS 
• Complete range of editing support-from 
document 
processing to HEX code entry and 
modification 
• Supports 
system escape for quick execution 
of PC-DOS System level commands 
• Full macro support for complex or repetitive 
editing tasks 
• Supports 
multiple 
operating 
systems 
including 
DOS and iRMX 
• Dual ftle support with optional split-screen 
windowing 
• No limit to file size or line length 


• Quick response with an easy to use menu 
driven interface 
• Configurable 
and extensible 
for complete 
control of the editing process. 


WORLDWIDE SERVICE, 
SUPPORT, AND TRAINING 


To augment 
its development 
tools, Intel offers 
a full array of seminars, 
classes, and 
workshops, 
field application 
engineering 
expertise, 
hotline technical 
support 
and on-site 
service. 


Intel also offers a Software Support package 
which includes technical 
software information, 
telephone 
support, automatic 
distribution 
of 
software and documentation 
updates, 
access to 
the "Tooltalk" 
electronic 
bulletin 
board. 
"iComments" 
publication, 
remote diagnostic 
software, and a development 
tools 
troubleshooting 
guide. 


Intel's Hardware 
Support package includes 
technical 
hardware 
information, 
telephone 
support, warranty 
on parts, labor, material, 
and on-site hardware 
support. 


Intel provides a complete software 
development 
toolset that delivers full access to 
the 8OC86/8OC186 microprocessors. 
The 
development 
tools are easy to use, yet 
powerful, with productivity 
boosting features 


such as source-level symbolic debugging and an 
up-to-date user interface. 
Each tool is designed 
to help you move quickly your application 
from 
the lab to the market. 


D86ASM86KIT 
ASM-86 
Assember 
for PC XT or AT system (or compatible) 
running 
DOS 3.0 
or higher 


D86C86NL 
iC-86 
Software Package for IBM PC XT/ AT running 
PC DOS 3.0 or 
higher 


D86PLM86NL 
PL/M-86 
Software Package for IBM PC XT/ AT running 
PC DOS 3.0 or 
higher 


D86EDNL 
AEDIT 
AEDIT Source Code Editor for IBM PC XT / AT running 
PC DOS 3.0 
or higher 
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Intel386TM DX AND Intel386™ 
SX IN-CIRCUIT 
EMULATORS 


ACCURATE 
AND SOPHISTICATED 
EMULATION 
FOR THE 
Intel386™ 
DX AND Inte1386™ 
SX MICROPROCESSORS 
Inte1386TMIn-circuit Emulators are the cornerstone of the optimum development 
solution for the Inte1386 Family of microprocessors. The ICETM-386family of 
development tools delivers complete access and control over the Inte1386. 


Inte1386 emulators feature realtime emulation to 33 MHz, source-level symbolic 
debugging, and a powerful windowed human interface. Intel product quality and world 
class technical support and service insure that your design requirements 
are met on time. 


And your investment in development tools is protected via interchangeable 
probes for the 
Inte1386 DX and Inte1386 SX microprocessors. Support for the Inte1486TMis provided via 
an ICE conversion package. An emulator for the Inte1386 SL processor is also available. 
Maximize your productivity with Intel development tools. Reduced time to market and 
increased market acceptance for your microprocessor-based product are the benefits 
when Intel is the choice. 
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• ICE-386 DX and ICE-386 SX emulators 
feature 
a powerful source-level, 
windowed 
human 
interface 


• Unparalleled 
support 
of all of the Intel386 
operating 
modes opens the door to the full 
potential 
of the Intel386 architecture 


• Non-intrusive, 
100% accurate 
emulation 
and 
execution 
history to processor speeds of 
33 MHz 


• Relocatable 
Expansion 
Memory (REM) 
Board options provide 2 MByte of mappable 
memory 


• Versatile 
event recognition 
makes short 
work of uncovering 
complex bugs 


• Dynamic trace display of bus and execution 
information 
during emulation 


• Support for PGA and PQFP component 
packages 


• Integrated 
software development 
environment 
provides complete access to the 
power of the Intel386 family 


• Available on DOS 
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100% ACCURATE 
EMULATION 


Intel386 Family In-Circuit Emulators utilize 
technology that accesses internal processor 
states that are otherwise invisible. Intel386 
microprocessors fetch and execute instructions 
in parallel; fetched instructions 
are not 
necessarily executed in any order. Because of 
this, an emulator without access to the core of 
the component is prone to error in determining 
what actually occurs inside the 
microprocessor. With Intel's technology, an 
Intel386 In-Circuit Emulator displays 
execution history with one hundred percent 
accuracy. 


OPENING THE DOOR TO 
PROTECTED 
MODE 
The Intel386 family ofIn-circuit 
Emulators 
opens the door to the full potential of the 
architecture 
with unparalleled 
support of 
protected mode. Not only does the emulator 
display and modify task state segments and 
global, local, and interrupt 
descriptor tables 
(with symbolic access to all descriptor 
components), but emulator functions are 
sensitive to the operating mode of the 
processor, greatly improving ease of use. For 
instance, while debugging protected mode 
code, it is easy to change any field in any 
descriptor, including privelege, level, segment 
limit, segment access rights, etc. 


The Intel386 family of In-circuit Emulators 
supports all aspects of protected mode 
addressing, including paged virtual memory. 
Processor tables are used to automatically 
translate 
virtual addresses to linear and 
physical addresses. Physical addresses can be 
translated 
to symbolic references to indicate 
the module, procedure, or data segment 
accessed. And when debugging a memory 
management 
system, components of the page 
table and directory can be displayed and 
modified. 


FLEXIBLE 
AND VERSATILE 
EVENT RECOGNITION 


Flexibility and versatility in event recognition 
makes short work of uncovering the most 
complex bugs. Bus event recognition circuitry 
may be used to trigger on specific or masked 
data input, output, read, write, or fetched 
values at a physical address or range of 
addresses. In addition, on-chip debug registers 
may be used to trigger on virtual, linear, or 
symbolic addresses being executed, accessed, or 
written. 


Versatility shows in other triggering options 
such as the ability to break upon a task switch, 
an external signal from another emulator or a 
logic analyzer, multiple occurrences of an 
event, a full trace buffer, halt or shutdown 
cycles, or interrupt 
acknowledge. And up to 
four sequential event triggers can be combined 
with a high-level construct to make it easier 
locating those hard to find real-time bugs. 


The Intel386 family ofIn-circuit 
Emulators 
captures all bus activity and, as an option, 
execution information, into a trace buffer of 
4 K frames. Information is captured in logic 
analyzer style, including the address and data 
busses, as well as a variety of important 
control signals. With PRE, POST, and 
CENTER collection modes it is possible to focus 
the trace buffer contents around a specified 
trigger event. ICE-386 DX also allows the user 
to selectively remove wait-states from trace. 
ACCESSING 
THE POWER 
The DOS hosted Intel386 DX and Intel386 SX 
emulators feature a windowed, menu-driven, 
human interface which provides easy access to 
the power ofthese emulators. This interface 
features pull-down menus, pop-up windows 
and templates for com~on actions such as 
configuring the emulator and setting 
breakpoints 


A source code window allows display of 
program code as high-level source and/or 
assembly code, and most importantly, 
allows 
"point and shoot" breakpoints. This powerful 
feature, combined with the ability to view any 
section of program code in the source window, 
means that setting a breakpoint anywhere in 
the program is as simple as moving the cursor 
to a line of code and hitting a function key. 
Multiple windows may be opened for 
simultaneous 
viewing of not only source code, 
but also memory, trace buffer contents, 
variables, and registers. All of these features 
are accessible from pull-down menus or 
function keys, making it easy for novice or 
infrequent users to get the most of every debug 
session. 
Customized procedures with variables and 
literal defmitions can be created to assist in 
debugging or for manufacturing 
test or field 
service applications. 
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SPEEDING DEVELOPMENT 
WITH SYMBOLICS 
Intel386 processor data structures, 
such as 
registers, descriptor tables, and page tables, 
can be examined and modified using symbolic 
names. And with the symbolic debugging 
information that is a feature of Intel 
languages, memory locations can be accessed 
using symbolic references to the source 
program (such as a procedure and variable 
names, line numbers, or program labels) 
rather than via cumbersome virtual, linear, or 
physical addresses. The type information of 
variables (such as byte, word, record, or array) 
can also be displayed. 


ADDITIONAL FEATURES 
The Intel386 In-circuit Emulator can be 
combined with a variety of devices. I/O lines 
synchronize emulation starts and triggers with 
external tools such as a logic analyzer or 
another emulator. An optional Time Tag 
Board synchronizes multiple Intel386 
emulators and records timestamp information 
in the trace buffer with 20 nanosecond 
resolution. An Optional Clips Pod allows 8 user 
defined data lines to be captured and displayed 
in the trace. The bus isolation board buffers 
the emulation processor from faults in an 
untested target. And with the Stand-Alone 
Self-Test board the emulator can be used to 
debug software before the target system is 
functional, as well as execute confidence tests. 


COMPONENT 
INTERCONNECT 


Component interconnect between the ICE and 
the processor on your system is accomplished 
using either direct probe connection to the 
target system, or by using an optional hinge 
cable adapter. Hinge cable adapters allow the 
ICE to access components in hard-to-reach 
cases and in the case of the Intel386 SX, to 
provide support for surface mounted devices 
via ONCE mode. ONCE mode is a mechanism 
oftri-stating 
the component pins, thus 
allowing a system with a surface mounted CPU 
to be emulated without removing the 
component. The dimensions and clearance 
requirements 
of the adapter are shown in the 
386SXONCECBL Adapter Dimension figure on 
the following pages. In addition, a new, more 
reliable means of connecting to 100 pin PQFP 
Intel386 SX processors will be available in Q4, 
1992. See diagram oftransmuter 
adapter for 
dimensions. 


THE INVESTMENT PICTURE 
As designs move from one Intel386 Family 
processor to another, the reinvestment 
cost is 
limited to probes that adapt the emulator base 
to the specific processor. Beside cost savings, 
migration from one processor to another is 
accomplished with minimum disruption in the 
engineering environment, 
as the same 
command language applies to the entire 
emulator family. 
A conversion kit is also available to support 
the Intel486TM family of microprocessors and 
an emulator is also available to support the 
Intel386 SL microprocessor. 
• 
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SOFTWARE 
COMPLETES 
THE 
SYSTEM 
Intel wraps a comprehensive software 
development system around the emulator to 
deliver the most complete development 
environment 
available from a single vendor. 
Like the emulator, Intel's software 
development system supports every aspect of 
the Inte1386 architecture. 


Overlooked at times is the fact that a 
significant part of developing a system is 
making sure the code works. Intel languages 
and software debugger integrate seamlessly 
with the Inte1386 emulator and provide the 
symbolics so important 
for efficient debugging. 
By using Intel software tools with the Inte1386 
emulator the full power of Intel development 
solution can be utilized. 


The software development system offers a 
broad choice oflanguages 
with object code 
compatibility so performance can be 
maximized by using different languages for 
specialized, performance critical modules. 
Architectural 
extensions in the high-level 
languages allows hardware features such as 
interrupts, 
input/output, 
or flags to be 


controlled directly, avoiding the tediousness of 
coding assembly language routines. 


Intel's software portfolio includes a unique, 
sophisticated, and very powerful system 
builder, which simplifies the generation of 
protected mode systems from simple flat model 
systems to the most complex paged multiple 
privelege level, multi-tasking 
systems. To 
further reduce the effort necessary to integrate 
software into the final target configuration, 
Intel tools produce ROM-able code directly 
from the development system. 
WORWWIDE SERVICE, SUPPORT, AND 
TRAINING 
To augment its development tools, Intel offers 
a full array of seminars, classes, workshops, 
field application engineering expertise, hotline 
technical support, and on-site service. 


Intel also offers a Software Support contract 
which includes technical software information, 
automatic distributions 
of software and 


documentation 
updates, iCOMMENTS 


publication, remote diagnostic software, and a 
development tools troubleshooting 
guide. 


Intel's 9o-day Hardware Support package 
includes technical hardware information, 
telephone support, warranty on parts, labor, 
material, and on-site hardware support. 
Intel Development Tools also offers a 3o-day, 
money-back guarantee 
to customers who are 


not satisfied after purchasing any Intel 
development tool. 


ICETM·386FAMILY SPECIFICATIONS AND 


REQUIREMENTS 


Unless otherwise noted, the following 
specifications apply to ICE-386 DX and 
ICE-386SX. 
HOST SYSTEM REQUmEMENTS 
The user supplied host system can be either an 
IBM' PC/ AT' or Personal System/2' 
Model 
60. Host system requirements 
to run the 
emulator include the following: 
• DOS version 3.3, 4.01 or 5.0 
• 640 KBytes of RAM in conventional memory 


• 1 MByte of expanded memory (e.g., an 


Above™ board managed by a driver such as 
EMM.SYS, or an expanded memory manager 
such as QEMM' or 386MAX which conforms 
to the Lotus' /Intel/Microsoft' 
Expanded 


Memory Specification, version 4.0 or later) 


• A 20 MB hard disk 
• A serial port or the National Instruments 


GPIB-PCII', GPIB-PClIA', or MC-GPIB' 
board 
• A math coprocessor if either the optional 


time tag board is used or if a math 
coprocessor resides on the target system 
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ICETM·386FAMILY SPECIFICATIONS AND 
REQUIREMENTS 


ELECTRICAL 
CHARACTERISTICS 


100-120Vor 
220-240V 
selectable 
50-60Hz 
2 amps (AC max) 
@ 120V 
1 amp (AC max) 
@ 240V 


TESTED HOT SYSTEMS INCLUDE: 


• IBM PCI AT (286) with MS-DOS 3.3 and an 
Intel Above Board with 1.5 MBytes of 
memory 
• IBM PCI AT with Intel Inboard 386 with MS- 


DOS 3.3 and 3 MBytes of memory with a 
QEMM' 
or 386Max' 
memory manager 
• Compaq' 
DESKPRO 386' with COMDOS 
3.31 and 3 MBytes of memory with QEMM or 
386MAX memory manager 
• Intel Sys 301 with MS-DOS 3.3 and 2 MBytes 
of memory with a QEMM, EMM, or 386Max 
memory manager 
• IBM PS/2 Model 80 with PC-DOS 4.01 and 2 
MBytes of memory with QEMM or 386Max 
memory manager 
Note: 
Future 
versions 
of ICE-386 Family 
emulators 
will 
use DOS extenders. 
Host systelDB will need at least 
a 386 SX or 386 DX based 
host with 4 MBytes 
of 
RAM. 


ENVIRONMENTAL 
CHARACTERISTICS 


Operating 
temperature: 
+ 10"C to +40"C 
(5O"Fto 104°F) 
Operating 
Humidity: 
Maximum 
of 85% 
relative 
humidity, 
non-<:ondensing 


Width 
Height 
Length 
Unit 
inches 
cm 
inches 
cm 
inches 
cm 


Base Unit 
13.4 
34.0 
4.6 
11.7 
11.0 
27.9 
Processor 
Module 
3.8 
9.7 
0.7 
1.8 
4.4 
11.2 
Optional 
Isolation Board 
3.8 
9.7 
0.5 
1.3 
4.4 
11.2 
Power Supply 
7.7 
19.6 
4.1 
10.4 
11.0 
27.9 
User Cable 
1.9 
4.8 
17.3 
43.9 
1QO-PinTarget-Adapter 
Cable 
2.3 
5.3 
0.5 
1.3 
5.1 
13.0 
88-Pin Target-Adapter 
Cable 
2.3 
5.3 
0.5 
1.3 
5.8 
14.7 
Serial Cable 
144 
366 
Optional 
Clips Pod 
3.3 
8.4 
0.8 
2.0 
6.0 
15.2 


00-1----------H----26.7" 
1;::=::;1 
1.2" 


• 
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ICETM·386FAMILY SPECIFICATIONS AND 
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ICETM-386FAMILY SPECIFICATIONS AND 
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Symbol 
Parameter 
Minimum 
Maximum 
Notes 


tl 
CLK2period 
40nS 
tlMax 
t2a 
CLK2 high time 
t2aMin+2 
nS 
@2V 
tab 
CLK2 low time 
t3b Min+2 nS 
@0.8v 
t6 
A2-A31 valid delay 
t6 Min + 3.5 nS 
t6 Max + 24.6 nS 
CL= 120 pF 
t7 
A2-A31 float delay 
tl4 Min + 5.5 nS 
tl4 Max + 32.6 nS 
tB 
BEO# - BE3# , LOCK# valid delay 
tB Min + 3.5 nS 
tBMax+24.6 
CL=75pF 
t9 
BEO# - BE3# , LOCK# float delay 
tl4 Min + 5.5 nS 
tl4 Max + 32.6 
tlO 
WIR#, M/IO#, 
D/C#, ADS# valid delay 
tlO Min + 3.5 nS 
tlO Min + 24.6 
CL=75 pF 
tll 
W/R#, 
M/IO#, 
D/C#,ADS# 
float delay 
tl4 Min + 5.5 nS 
tl4 Max + 32.6 
tl2 
OO-D31write data valid delay 
tl2 Min + 4.5 nS 
tl2 Max + 20.6 
CL= 120 pF 
tl3 
OO-D31write data float delay 
7.5nS 
41.6 nS 
tl4 
HLDA valid delay 
tl4Min=3nS 
tl4 Max + 21.2 nS 
tl6 
NA# hold time 
tl6 Min + 10.6 nS 
tl8 
BSI6# hold time 
tl8 Min + 10.6 nS 
t20 
READY # hold time 
t20 Min + 10.6 nS 
t21 
OO-D31read setup time 
t21 Min + 8.5 nS 
t22 
OO-D31read hold time 
t22 Min + 7.6 nS 
t24 
HOLD hold time 
t24 Min + 10.6 nS 
t25 
RESET setup time 
t25 Min + 2.1 nS 
t26 
RESET hold time 
t26 Min + 2.1 nS 
t28 
NMI, INTR hold time 
t28 Min + 10.6 nS 
taO 
PEREQ, ERROR # , BUSY# hold time 
taO Min + 10.6 nS 


ICETM-386DX 25/33 Emulator 
DC Specifications 
Emulator 
Capacitance 
Specifications 


386 OX 
386SX 


Symbol 
Description 
386 OX 
w/Hinge 
and 376 
Typical 
w/Hinge 
Cable 
Cable 


CIN 
Input Capacitance 
CLK2 
35pF 
45pF 
55pF 
READY #, NMI, BSI6# 
25pF 
35pF 
35pF 
HOLD, BUSY #, 
10pF 
20pF 
20pF 
PEREQ, NA II, INTR, 
20pF 
30pF 
30pF 
ERROR#, 
RESET 


CoUT 
Output 
or I/O Capacitance 
DO-D31 
40pF 
50pF 
50pF 
A2-A31 
30pF 
40pF 
40pF 
BEO#-BE3# 
30pF 
D/CII 
, 
35pF 
45pF 
30pF 
W/RII 
40pF 
50pF 
55pF 
ADSII,M/IOII 
25pF 
35pF 
35pF 
LOCK#,HLDA 
25pF 
25pF 
55pF 


• 
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ICETM·386DX 25/33 Emulator 
DC Specifications 
without the Bus Isolation Board Installed 


Item 
Description 
Max 
Notes 


PM·Ice 
Processor 
Module Supply Current 
Component 
lee + 1.5A 


IIH 
Input High Leakage Current 
0.020 
f.LA 
1 
A2-A31, BEO#-BE3#, 
DO-D31, HLDA, 
0.010 
f.LA 
1 
NMI,BS16# 
ADS#, M/IO#, 
LOCK # , READY# 
0.010 
f.LA 
1 
W/R#,D/C# 
0.030 
f.LA 
1 
CLK2 
0.015 
f.LA 
1 
RESET 
0.005 f.LA 
2 


IlL 
Input Low Leakage Current 
A2-A31, 
BEO#-BE3#, 
DO-D31 
0.600 
f.LA 
1 
HLDA, NMI, BS16# 
0.010 
f.LA 
1 
ADS#, M/IO#, 
LOCK # , READY # 
0.010 
f.LA 
1 
W/R# 
0.110 
f.LA 
1 
D/C# 
0.610 
f.LA 
1 
CLK2 
0.015 
f.LA 
1 
RESET 
0.005f.LA 
2 


ICETM-386SX or ICETM-38620 MHz Emulator 
DC Specifications 
without the Bus Isolation Board Installed 


Item 
Description 
Max 
Notes 


PM-Ice 
Processor 
Module Supply Current 
3386SX·1cc + 940 mA 


IIH 
Input High Leakage Current 
A23-A1, 
BLE#, 
BHE#, 
D/C#, HLDA 
20f.LA 
1 
D15-DO 
60f.LA 
1 
ADS#, M/IO#, 
LOCK # , READY # , ERROR# 
10f.LA 
1 
W/R# 
30f.LA 
1 
CLK2 
40f.LA 
1 
RESET 
6Of.LA 
2 


IlL 
Input Low Leakage Current 
A23-A1, 
BLE#, 
BHE#, 
D/C# 
6OOf.LA 
1 
D15-DO 
6Of.LA 
1 
ADS#, M/IO#, 
LOCK # , READY # , ERROR# 
10f.LA 
1 
W/R# 
510f.LA 
1 
CLK2 
620f.LA 
1 
RESET 
6OOf.LA 
2 
HDLA 
20f.LA 
1 


Note 1: This specification 
is the DC input loading of the emulator 
circuitry 
only and does not include any component 
leakage 
current. 


Note 2: This specification 
replaces the component 
specification 
for this signal. 
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ICETM-386DX 25/33 Emulator DC Specifications 
with the Bus Isolation Board Installed 


Item 
Description 
Min 
Max 


BIB-Ice 
Bus Isolation Board Supply Current 
PM-Ice + 475 mA 


VOL 
Output 
Low Voltage (lOL = 48 mAl 
A2-A31, 
BEO#-BE3#, 
D/C# 
0.5V 
ADS # 
0.5V 
OO-D31, M/IO#, 
LOCK # , W/R#, 
0.44V 
HLDA (lOL = 24 mAl 


VOH 
Output High Voltage (IOH = 3 mAl 
A2-A31, 
BEO#-BEU, 
D/C# 
2.4V 
ADS # 
2.4V 
OO-D31, M/IO#, 
LOCK # , W/R#, 
3.8V 
HLDA (IOL = 24 mAl 


1m 
Input High Current 
CLK2,RESET 
1.0p..A 
READY # 
25p..A 


IlL 
Input Low Current 
CLK2,RESET 
1.0p..A 
READY # 
250p..A 


lIO 
Output 
Leakage Current 
A2-A31, 
BEO# -BEU, 
D/C#, ADS# 
±20p..A 
DO-D31, M/IO#, 
LOCK # , W/R# 
±20p..A 


Item 
Description 
Min 
Max 


BIB-Ice 
Bus Isolation Board Supply Current 
PM·Ice + 350 mA 


VOL 
Output 
Low Voltage (IoL = 48 mAl 
A23-Al, 
BLE#, 
BHE#, 
D/C, ADS# 
0.5V 
D15-DO, M/IO#, 
LOCK # , W/R# 
0.5V 
HLDA (IoL = 24 mAl 
0.44V 


VOH 
Output 
High Voltage (lOH = 3 mAl 


A23-Al, 
BLE#, 
BHE#, 
D/C, ADS # 
2.4V 
D15-DO, M/IO#, 
LOCK#, W/R# 
2.4V 
HLDA (IOL = 24 mAl 
3.8V 


1m 
Input High Current 
CLK2,RESET 
1.0p..A 
READY # 
25p..A 


IlL 
Input Low Current 
CLK2,RESET 
1.0p..A 
READY # 
250p..A 


lIO 
Output Leakage Current 
A23-Al, 
BLE#, BHE#, 
D/C, ADS# 
±20p..A 
D15-DO, M/IO#, 
LOCK # , W/R# 
±20p..A 


• 
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The synchronization 
input lines must be valid 
for at least four CLK2 cycles as they are only 
sampled on every other cycle. These input lines 
are standard 
'ITL inputs. The synchronization 
output 
lines are driven by 'ITL open collector 
outputs 
that have 4.7K-ohm pull-up resistors. 
The synchronization 
input and output signals 
on the optional 
clips pod are standard 
'ITL 
input and outputs. 


PROCESSOR MODULE 
INTERFACE CONSIDERATIONS 


With the processor module directly attached 
to 
the target system without 
using the bus 
isolation board, the target 
system must meet 
the following requirements. 
• The user bus controller 
must only drive the 
data bus during a valid read cycle of the 
emulator 
processor or while the emulator 
processor is in a hold state (the emulator 
processor uses the data bus to communicate 
with the emulator 
hardware). 


• Before driving the address bus, the user 
system must gain control by asserting 
HOLD 
and receiving HLDA. 


• The user reset signal is disabled during the 
interrogation 
mode. It is enabled in 
emulation, 
but is delayed by 2 or 4 CLK2 
cycles. 


• The user system must be able to drive one 
additional 
'ITL load on all signals that go to 
the emulation 
processor. 


When the target 
system does not satisfy the 
first two restrictions, 
the bus isolation board is 
used to isolate the emulation 
processor from 
the target system. With the isolation board 
installed, 
the processor CLK2 is restricted 
to 
running 
at 25 MHz. 


The processor module drives its DC power from 
the target 
system through 
the Intel386 
component 
family socket. It requires 
1500 mA, 
including 
the Intel386 DX component 
current 
or 1400 mA, including 
the Intel386 SX or 376 
component 
current. 
The isolation board 
requires 
an additional 
475 mA for the 
Intel386 DX component 
and 350 mA for the 
Intel386 SX or 376 components. 


INTEL386 
DX PROCESSOR 
INTERCONNECT 
The processor must be socketed. The printed 
circuit board design should locate the processor 
socket at the physical ends of the printed 
circuit board traces that connect the processor 
to the other logic of the target system. This 
reduces transmission 
line noise. Additionally, 
if the target system is enclosed in a box, pin 
one of the processor socket should be oriented 
to make connecting 
the processor module or 
target-adapter 
cable (TAC) easier. 


The emulator 
uses the Intel386 DX 
microprocessor's 
pins C7, E13, and F13. The 
Intel386 DX High Performance 
32-Bit 
Microprocessor 
With Integrated 
Memory 
Management 
data sheet specifies these pins as 
uN/C" (no connect). Ifthe 
target 
system uses 
any ofthese 
pins, you must do one of the 
following: 
• Use the bus isolation board 
• Use the hinge cable adapter 
• Build an adapter 
to disconnect 
pins C7, E13, 
and F13 (Le., a socket with these pins 
removed). 


INTEL386 
SX PROCESSOR 
INTERCONNECT 


The processor can be either socketed or 
surface-mount. 
Some examples 
of sockets 
which have been used include Textool 2-0100- 
07243-000 or AMP 821949-4 sockets. The 
standard 
ICE-386SX provides support for 
socketed components. 
To support 
surface- 


mount components, 
the optional 
386SXONCEKIT 
hinge cable adapter 
kit 
should be ordered. This kit includes an adapter 
that fits over a surface-mount 
Intel386 SX and 
tri-states 
its pins using ONCE mode. A 
transmuter, 
a new, more reliable surface- 


mounted 
PQFP adapter 
will be available 
for 
the ICE-386 SX in Q4, 1992. See the 
transmuter 
converter 
keep out diagram 
for 
dimensions. 


The printed 
circuit board design should locate 
the processor socket at the physical ends of the 
printed 
circuit board traces that connect the 
processor to the other logic ofthe 
target 
system. This reduces transmission 
line noise. 
Additionally, 
if the target system is enclosed in 
a box, pin one of the processor socket should be 
oriented 
to make connecting 
the processor 
module or hinge cable adapter 
easier. 
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IN·CIRCUIT EMULATOR 
ORDER CODES 


All In-Circuit 
Emulator 
codes include: control 
unit, power supply, processor module. Stand- 
Alone Self Test board, bus Isolation 
Board, 
either DOS or HP9000 host software and a 
serial interface 
cable. 


pICE386SX20D 
ICE-386SX In-Circuit 
Emulator 
for the 80386 SX 
component 
to 20 MHz. 


pICE386DX25DZ 
ICE-386DX In-Circuit 
Emulator 
for the 80386 DX 
component 
to 25 MHz. 


ICE386DX33D 
ICE-386DX In-Circuit 
Emulator 
for the 80386 DX 
component 
to 33 MHz. 


IN·CIRCUIT EMULATOR 
CONVERSION 
KITS 
KBASECONC 
Converts ICE-486 to 
ICE-386SX or ICE-386DX. 


TOICE386SX20D 
Converts ICE-386DX 
to ICE-386SX 
20 MHz. 


TOICE386SX25D 
Converts ICE-386DX 
to ICE-386SX 
25 MHz. 


TOICE386DX25D 
Converts ICE-386SX 
to ICE-386DX 
25 MHz. 


TOICE48633D 
Converts ICE-386SX 
or ICE-386DX to ICE-486 
33 MHz. 


IN·CIRCUIT EMULATOR 
OPTION 
ORDER CODES 


p88GAADAPT 
Adaptor for ICE376 
emulator 
to support 88 pin 
PGA component 
packaging. 


386SXONCECBL 
ONCE (On-Circuit 
Emulation) 
hinge cable 
adapter 
for ICE-386 SX to 
support 
100 pin PQFP 
component 
packaging 
in 
surface-mount. 
The 
standard 
ICE product 


includes a hinge cable 
adapter 
for socketed 
components. 


pICE3XXCPO 
Clips Pod Option for 
ICE386SX 16 or 20 MHz, 
ICE386 25 MHz, and 
ICE386DX 33 MHz 
emulators. 


pICE3XXTTB 
Time Tag Board Option for 
ICE386SX 16 or 20 MHz, 
ICE386 25 MHz, and 
ICE386DX 33 MHz 
emulators. 


386SXONCE 
Kit includes 
100 pin PQFP 
KIT 
386SXONCECBL 
adapter 
and SAST with 100 PIN 
PQFP dummy component. 


i3SXCONV1ooPQ 
Kit includes 100 pin PQFP 
transmuter 
adapter 
and 
SAST. 
• 
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INCLUDING PARADIGM DEBUG/ICE WINDOWED 
INTERFACE 
PRODUCT OVERVIEW 
The Intel ICETM-186/188 family ofln-Circuit 
Emulators 
deliver outstanding 
16 MHz and 
20 MHz real-time 
emulation 
for the 8OC186/8OC188 family of microprocessors: 
8OC186EB/Cl88EB, 
8OC186XL/C188XL, 8OCl86EAlCl88EA, 
8OC186EC/Cl88EC, 
8OC186/C188, and 80186/188. The emulator 
is a versatile 
and efficient tool for 
developing, debugging, and testing products designed with Intel microprocessors. 
Included with the emulator 
is the standard 
Intel Windowed Interface 
and the Paradigm 
DEBUG/ICE 
Interface 
(based on Borland's 
Turbo Debugger), allowing you to choose the 
interface 
best suited for your needs. Both interfaces 
support Intel, Borland, and Microsoft 
languages 
including 
C++ 
to meet your embedded design needs and accelerate 
your time 
to market. 
FEATURES 
• Reliable full speed emulation 
up to 16 
MHz and 20 MHz 
• One probe, jumper-configurable 
for 186 
or 188 support 
• Two powerful windowed human 
interfaces 
with mouse support 


• Source level debug with source code 
window, symbolic debug. and watch 
window operations 
• Supports 
Intel, Borland, and Microsoft 
languages 
including 
C++ 


Paradigm DEBUG and Paradigm LOCATE are trademarks of Paradigm Systems. 
Turbo Debugger 
is a registered 
trademark 
of Borland 
International. 
Microsoft 
and MS-DOS 
are registered 
trademarks 
of Microsoft 
Corporation. 


Link and Locate + + is a registered 
trademark 
of Systems 
and Software. 
Inc. 
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• 512K or 1 MB of zero wait-state 
mapped 
memory 
• 4K frames dynamic trace buffer can be 
displayed without 
stopping emulation 
• Powerful 
GO command with two-level 
breakpoints. 
event counters 
and single 
stepping 
capability 
• 8OC187 numberic 
coprocessor support 
• Emulation 
support 
for all Intel component 
packages 
• High speed RS-232C and GPffi 
communication 
link 
• Stand Alone Self Test (SAST) unit for 
software development 
and self test 
• Complete Intel service and support 


PRODUCT HIGHLIGHTS 
• Superior 
Intel component 
bondout and 
advanced 
cable technology 
ensures 
accurate 
and reliable 
high speed emulation 
• Zero power consumption 
difference between 
using the emulator 
and the component 
• Supports 
debugging target systems with 
8OC187 numeric 
coprocessor 
• Supports 
all Intel software products, 
including 
C, assembler, 
and PL/M. Also 
accepts Microsoft and Borland object code. 
including 
C++ 
, when used in conjunction 
with either Paradigm 
Systems LOCATE or 
Systems and Software, Inc. LINK and 
LOCATE+ 
+ 
• Paradigm 
DEBUG/ICE 
product includes 
Paradigm 
LOCATE, OMFCVT and 
TDCONVRT: everything 
necessary 
to 
support your embedded application 
• Includes two powerful windowed human 
interfaces: 
the standard 
Intel interface 
and 
the Paradigm 
DEBUG/ICE 
interface, 
based 
on Borland's 
Turbo Debugger 
• Each windowed interface 
enables user to 
open multiple 
windows simul- taneously, 
providing source code, watch variables, 
memory, and trace information 
• Display and modify all on-chip peripheral 
registers 
• Powerful 
GO command permits 
precise 
emulation 
control through 
versatile 
event 
recognition, 
condi- tional constructs, 
and 
internal 
actions (e.g., full trace buffer, event 
counters) 
• Set software breakpoints 
easily in source 
code, hardware 
breakpoints 
on execution 
and 
bus addresses; 
memory and I/O cycles 
• Break and trace on address and/or 
data 
specification 
based on single value, range, or 
"don't cares" 


• Flexible STEP command, 
enabling 
forward/ 
reverse stepping and into or over function 
calls 
• Define all or sections of map memory as 
Guarded, 
ICE, or User 
• 4K trace buffer collects both execution 
and 
data bus activity in real-time. 
Display either 
instructions, 
cycles, or both 
• Stand Alone Self Test (SAST) Unit in 
conjunction 
with emulator 
map mem- ory 
facilitates 
early software debug- ging and 
emulator 
confidence testing 
• 512K and 1 MB zero wait-state 
memory 
modules can be used in place of target 
memory for code debugging 
• Programmable 
fastbreak 
for monitoring 
target 
system while in emulation 
• Refresh, DMA, and HOLD/HOLDA 
cycles 
honored when emulator 
halted 
• RS-232C serial link provides transfer 
rate up 
to 57.6 Kbytes per second. GPffi driver (in 
conjunction 
with a user supplied National 
Instruments 
(lEEE-488) GPffi 
communication 
board) provides parallel 
transfers 
at rates up to 115 Kbytes per 
second 
• Logic analyzer 
support 
included via a 6O-pin 
connector to emulator 
• All component 
packages supported, 
either 
directly on the probe or through 
adapters 
• World-wide service, support, 
and training 
available 


BENEFITS 
• Supports 
low power application 
needs. Probe 
draws low power current, 
supports 
true 
CMOS voltage input/output 
• Both the Intel and Paradigm 
windowed 
interfaces 
increase 
productivity 
for both 
expert and casual users. Pull-down menus, 
on-line help, and mouse support 
simplify 
debugging and speeds up learning 
curve 
• Source code window automatically 
updated 
when emulator 
halts, high-lighting 
next 
instruction 
to be executed 
• Software and hardware 
breakpoints 
may be 
set directly in the source code window to 
facilitate 
precise emulation 
control 
• Emulator 
can track user-defmed 
program 
variables 
using the watch window. Emulator 
tracks the variable, 
not the user! 
• Intel interface 
offers "C" -based macro 
commands 
to facilitate 
customized 
or 
repeated 
debug sessions. Extremely 
useful 
for automated 
manufacturing, 
testing and 
debugging 
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• Powerful 
trace collection and display 
commands 
allow user to collect and display 
only the trace information 
pertinent 
to the 
debug session; no unwanted 
trace data filling 
up trace buffer 
• Dynamic trace allows user to view trace 
buffer or modify trace conditions 
without 
stopping emulation 
• Software developers 
may debug application 
code before target 
hardware 
is available 
using the Stand Alone Self Test (SAST) Unit 
with emulator 
map memory 
• Early debugging 
of ROM memory simplified 
using emulator 
map memory. Memory 
addressable 
in 32 Kbyte increments. 
Supports 
debugging ROM-based applications 
over entire 
1MB addressing 
range 
• Mappable 
I/O ports, addressable 
in 4 Kbyte 
increments, 
enable user to debug suspect I/O 
behavior. 
PC resources 
allow data 'input' 
from keyboard 
and data 'output' 
to the 
screen 
• Source code window displays source code in 
original 
high-level language 
used to produce 
the object code. Simplifies and accelerates 
debug process 
• Investigate 
privileged 
processor information 
during emulation 
using the Fastbreak 
feature 
(e.g., PCB, registers, 
target 
memory) 
• DRAM refresh signals continue 
even when 
emulator 
halted and ensures 
DRAM memory 
not lost or corrupted. 
Also permits 
emulation 
in cost-sensitive 
applications 
that do not 
include DRAM controllers 
• Continuous 
timer function 
while emulator 
halted allows emulator 
to respond to on-chip 
and external 
interrupts 
in real-time. 
Useful 
for critical applications 
where continuous 
interrupt-service 
is a requirement 
• Detailed timing of specific events possible 
using a logic analyzer 
connected 
to the 
emulator. 
An external 
sync signal can 


trigger the logic analyzer, 
enabling 
complex 
event triggering 


SERVICE, SUPPORT, AND 
TRAINING 
• Intel offers full array of seminars, 
classes, 
workshops, 
field application 
engineering 
expertise, 
hotline technical 
support, 
and on- 
site service 
• Software support contract 
available, 
providing technical 
software information, 
telephone 
support, automatic 
software and 
manual 
updates, 
'iComments' 
publication 
and a development 
tools Trouble-Shooting 
Guide 
• 9Q-day software warranty 
and one year 
hardware 
support 
package are standard. 
Includes technical 
hardware 
information, 
telephone 
support, warranty 
on parts, labor, 
material, 
and on-site hardware 
support 
• Intel Development 
Tools offers a 3Q-day, 
money-back guarantee 
to customers 
who are 
dissatisfied 
with their Intel development 
tool 


SUMMARY 


The IeETM-186/188 
family ofIn-eircuit 
Emulators 
provide a versatile 
and efficient tool 
for developing, 
debugging, and testing products 
designed with the 8OC186/8OC188 family of 
micropro- cessors. The emulator 
includes 
numerous 
productivity 
boosting features 
to 
enable you to move your products to market 
as 
quickly as possible. Intel, the inventor 
of the 
8OC186/8OC188 family of micro pro- cessors, 
offers the most complete line of development 
tools from a single vendor to meet all of your 
development 
needs for your embedded design. 
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ICETM_186/188 FAMILY IN-CIRCUIT 
EMULATOR 1_ 


PHYSICAL DESCRIPTION AND 
CHARACTERISTICS 


For all the ICE-18x emulators 
the maximum 
probe power draw from the target 
is 90 mA 
(same as the component). 


Width 
Height 
Length 
Unit 
In. 
em 
In. 
em 
In. 
Cm 


Emulator 
Control Unit 
10.4 
26.4 
1.7 
4.32 
0.7 
52.6 
Power Supply 
7.7 
19.6 
4.1 
10.4 
11.0 
27.9 
Memory Module 
4.8 
12.1 
0.6 
1.4 
5.2 
13.2 
User Probe 
4.0 
10.2 0.65 
1.6 
7.0 
17.8 
User Probe Adapter 
Cable 
3.4 
8.6 
Stand Alone Self Test 
4.3 
10.9 0.60 
1.5 
6.7 
17.0 
Serial Cable 
144.0 
366.0 


Width 
Height 
Length 
Unit 
In. 
Cm 
In. 
em 
In. 
em 


Emulator 
Control Unit 
10.4 
26.4 
1.7 
4.3 
20.7 
52.6 
Power Supply 
7.7 
19.6 
4.1 
10.4 
11.0 
27.9 
Memory Module 
4.8 
12.1 
0.6 
1.4 
5.2 
13.2 
User Probe 
4.0 
10.2 0.65 
1.6 
7.0 
17.8 
User Probe Adapter 
Cable 
3.4 
8.6 
Stand Alone Self Test 
4.3 
10.9 
0.60 
1.5 
6.7 
17.0 
Serial Cable 
144.0 
366.0 
•• 
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ICETM-186/188 FAMILY 
IN-CIRCUIT 
EMULATOR L 


Width 
Height 
Length 
Unit 
In. 
Cm 
In. 
Cm 
In. 
Cm 


Emulator 
Control Unit 
10.4 
26.4 
1.7 
4.3 
20.7 
52.6 
Power Supply 
7.7 
19.6 
4.1 
10.4 
11.0 
27.9 
Memory Module 
4.8 
12.1 
0.6 
1.4 
5.2 
13.2 
User Probe 
4.0 
10.2 
0.65 
1.6 
7.0 
17.8 
User Probe Adapter 
Cable 
3.4 
8.6 
Stand Alone Self Test 
4.3 
10.9 0.60 
1.5 
6.7 
17.0 
Serial Cable 
144.0 
366.0 


Intel Interface 
Paradigm 
IDI:BUGiICE 
Interface 


Computer 
IBM PC, PS/2 or compatible, i386 
IBM PC, PS/2 or compatible, i386 


recommended 
recommended 


Operating System 
MS-DOS/PC-DOS 3.3/5.0 
MS-DOS/PC-DOS 3.0 or later 


System RAM 
520Kbytes 
384 Kbytes 


Expanded Memory 
1.5MB(l) 
Recommended for optimal 
performance 


Hard Disk 
3MB 
1MB 


Communication 
Serial Port (COMl or COM2) 
Serial Port (COMl or COM2) 


supporting at least 9600 Baud Rate 
supporting at least 9600 Baud Rate 
OR 
OR 
National Instruments 
GPIB-PCIIA 
National Instruments 
GPIB-PCIIA 
board 
board 


Math Coprocessor 
Required 
Not required 
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Emulator 
Component 
Speed 
Description 
(Host) 
Support 
(MHz) 


ICE18XEAXLP 
8OC186XL/C188XL 
16 
68-pin PLCC. Includes Control Unit, probe, power 
(DOS) 
BOCl86EA/Cl88EA 
supply. SAST, Intel and Paradigm interfaces and 


BOC186/Cl88 
PLCC to LCC adapter. Requires MEM512 or 


80186/188 
MEM1MB memory option. 


ICE18XEAXLP20 
BOCl86XL/Cl88XL 
20 
68-pin PLCC Includes Control Unit, probe, power 
(DOS) 
BOC186EA/Cl88EA 
supply SAST, Intel and Paradigm interfaces. 
PLCC to LCC adapter and 512K Map Memory. 


ICE18XEBP 
BOC186EB/Cl88EB 
16 
84-pin PLCC. Includes Control Unit, probe, power 


(DOS) 
supply, SAST and Intel and Paradigm interfaces. 
Requires MEM512 or MEM1MB memory option. 


ICE18XEBP20 
8OC186EB/C188EB 
20 
84-pin PLCC includes Control Unit, probe, power 
(DOS) 
supply, SAST and Intel and Paradigm interfaces 
and 512K Map Memory. 


ICE18XECQ 
BOCl86EC/Cl88EC 
16 
lOD-pinQFP. Includes Control Unit, probe, power 
(DOS) 
supply, SAST, and Intel and Paradigm interfaces. 
Requires MEM512 or MEM1MB memory option . 


Probe 
Component 
Speed 
Description 
(Host) 
Support 
(MHz) 


UP18XEANLP 
BOC186XL/Cl88NL 
16 
68-pin PLCC. Includes probe, SAST, Intel and 
(DOS) 
BOC186EA/C188EA 
Paradigm interfaces and PLCC to LCC adapter. 


BOC186/C188 
80186/188 


UP18XEBP 
8OCl86EB/C188EB 
16 
84-pin PLCC. Includes probe. SAST and Intel and 
(DOS) 
Paradigm Interfaces. 


UP18XECQ 
BOCl86EC/Cl88EC 
16 
lOD-pinQFP. Includes probe, SAST, and Intel and 
(DOS) 
Paradigm Interfaces. 


Memory 
Memory Size 
Description 


MEM512 
512KBytes 
512K Emulator Map Memory for ICE-18x Emulators 


MEM1MB 
1MByte 
1 MB Emulator Map Memory for ICE-18x Emulators 
• 
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IN· CIRCUIT 
EMULATOR 
1_ 


Emulator 
Software 
Deacrlption 
(Host) 


PDICE18XKIT 
Paradigm Debug/ICE Software for old ICEI86N, ICEI88N, ICEI8616N and 


(DOS) 
ICEI8816N emulators. Based on Borland Turbo Debugger. Supports all 
Emulator Control Units. 


PDICE18XEBKIT 
Paradigm Debug/IcE Software for ICE18XEBP and ICEI8XEBP20 
(DOS) 
emulators. Based on Borland Turbo Debugger. 


SWICEI8XKIT(l) 
Intel Windowed Human Interface for old ICEI86N, ICEI88N, ICEI8616N 


(DOS) 
and ICEI8816N emulators. Supports all Emulator Control Units. 


SWICEI8XEAXLKIT(l) 
Intel Windowed Human Interface for ICE18XEAXLP and 


(DOS) 
ICEI8XEAXLP20 emulators. 


SWICEI8XEBK!T<l) 
Intel Windowed Human Interface for ICE18XEBP and ICE18XEBP20 
(DOS) 
emulators. 
, 


SWICEI8XECK!T<1) 
Intel Windowed Human Interface for ICE18XECQ emulator. 


(DOS) 


SWICEI8XDIAG(l) 
Emulator Confidence Tests for ALL ICE-18 and UP18x products. Supports 


(DOS) 
all Emulator Control Units. 


Adapters 
Emulator 
Deacrlption 
Support 


ICEXEBONCE 
ICE18XEBP 
84-pin PLCC ONCE adapter for On-Circuit Emulation. 


ICE18XEBP20 


ICEXEAXLONCE 
ICE18XEAXLP 
68-pin PLCC ONCE adapter for On-Circuit Emulation. 


ICE18XEAXL20 


ICEXLCC 
ICE18XEAXLP 
Adapter to convert probe from 68-pin PLCC to 68-pin 
ICE18XEAXLP20 
LCC. 


ICEXPGA 
ICE18XEAXLP 
Adapter to convert probe from 68-pin PLCC to 68-pin 
ICE18XEAXLP20 
PGA. 


I18XEBCONVSOQ 
ICE18XEAXLP 
Conversion kit to convert probe from 84-pin PLCC to 
ICE18XEAXLP20 
8O-pinQFP. 


I18XXLCONVSOQ 
ICE18XEAXLP 
Conversion kit to convert probe from 84-pin PLCC to 
ICE18XEAXLP20 
68-pin PLCC to 8O-pinQFP. 


I18XECCONVl00PQ 
ICE18XECQ 
Conversion kit to convert probe from l00-pin QFP to 
l00-pin PQFP. 


QI18XXLCONVSOQ 
ICE18XEAXL 
EA 8O-QFPto XL 8O-QFPconversion kits. 


Multitasking 
Source Level Debugger 


The DB86A ARTIC debugger from Intel is a powerful source-level 
debugger designed to 
support 
the development 
of multitasking 
applications 
targeted 
to run on the full family 
of IBM· ARTIC cards. The DB86A ARTIC debugger is hosted on an IBM PC/AT·, 
PS/2· 
or compatible 
computer 
running 
DOS or OS/2· 
(DOS compatibility 
box only). Using an 
RS232 link to an IBM ARTIC card, the debugger contains 
control and monitoring 
capabilities 
for on-target 
software debugging. The DB86A debugger delivers an optimum 
debugging environment 
for application 
code generated 
by IBM C/2·, IBM MASM/2·, 
Microsoft C·, and Microsoft MASM·. 


The DB86A debugger features 
a contemporary 
windowed human 
interface, 
symbolic 
source level debug, tasking 
controls, extensive 
breakpoint 
modes, and flexible stepping 
capabilities. 
This multitasking 
debug environment 
boosts productivitiy 
by allowing you 
to focus efforts on finding bugs more quickly, and reducing time-to-market. 


DB86A Debugger Features 


• Menu-driven 
Windowed Human 
Interface 
• Source Level Debug with various Source 
Window and Watch Window Operations 
• Multitasking 
Debug Support 
• High-level and Assembly Language 
Symbolic Debugging 


• Extensive 
Breakpoint 
and Stepping 
Capabilities 
• Powerful 
Procedural 
Command 
Language 
• On-line Help Facility 
• Built-in Assembler 
and Disassembler 
• Memory and Register Manipulations 
• Intel Service and Support 


• 


Windowed Human Interface 


The DB86A Artic Debugger offers a windowed 
user interface that is easy for both experienced 
and new users. 
Pull-down menus provide a set of commonly 
used debug operations, shortening learning 
curves. Many debugging functions can be 
executed with a single key stroke. Custom 
debug commands and the command line 
interface offer experienced users increased 
efficiency. Multiple windows simultaneously 
display source code, watch variables, and 
registers. Source breakpoints 
support the 
point-and-shoot technique of debugging, or 
breakpoints 
can be easily set through the 
source window. When the debugger completes 
a breakpoint 
or stepping operation, the various 
windows are updated. The watch window can 
track up to six program variables. The on-line 
help facility provides command syntax and 
explanation 
as well as error descriptions. 


Event Monitor Capability 
DB86A provides many ways to monitor events. 
There are four conditional breakpoints, 
ten 
source breakpoints, 
ten temporary 
breakpoints, 
and ten passpoints. Each type of 
breakpoint 
meets different debugging needs. 


The stepping commands not only allow 
execution of one machine-level instruction 
or 
one high-level language statement 
at a time, 
they also permit stepping over or,stepping 
through a procedure until it returns. 


Procedural 
Command Language 


The command language of the DB86A 
debugger provides control constructs, 
procedures, and debug variables allowing the 
user to extend and customize the functionality 
of the debugger. Control constructs (e.g. 
If...else, do...while) facilitate the grouping of a 
sequence of debugger commands and control 
the execution of the sequence. For debug 
sequences that are repeated frequently, the 
user can define debug procedures containing a 
sequence of debugger commands, control 
constructs, and debug variables. DB86A 
debugger comes with a set of predefined debug 
procedures that display various ARTIC system 
data structures 
such as interface blocks, task 
tables, and task control block tables. 


Multitasking 
Debug Support 


The DB86A debugger delivers control and 
monitor capabilities to simplify multitasking 
debug. You can download multiple tasks to the 
target system, and easily select any task for 
viewing and debugging. 


Corresponding windows are automatically 
updated when a task hits a breakpoint. 
Tasks 
can be suspended and resumed. Breakpoints 
can be set for all, or for specific tasks. 
Qualifiers are provided with the debugger 
commands to facilitate multitasking 
debug. 


Symbolic Debug Capabilities 
The debugger makes full use of the symbolic 
and typing information 
passed by the code 
translators. 
Source code symbolics are enabled 
in debugging operations and displays. The 
debugger supports easy browsing through 
modules in each task. The Callstack feature 
creates a snapshot ofthe active call chain, and 
call stack browsing lets you navigate through 
the source code of the procedure call chain. 
Task memory and registers can be displayed 
and modified easily. An on-line assembler is 
provided for in-target code patching. 


Worldwide Service, Support, and 
Training 
To augment its development tools, Intel offers 
field application engineering expertise, hotline 
technical support, and on-site service. 
Intel also offers software support which 
includes technical software information, 
telephone support, automatic distributions 
of 
software and documentation 
updates, 
iCOMMENTS 
magazine, remote diagnostic 
software, and a development tools 
troubleshooting 
guide. 
Intel Development Tools also offers a 3O-day, 
money-back guarantee 
to customers who are 
not satisfied after purchasing any Intel 
development tool. 
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Host System Requirements 


IBM PC/ AT or IBM PS/2 or fully compatible 
computers 
with the following minimum 
configurations: 
• Minimum 
of 900Kbytes free hard disk space 
forDB86A 
• 640Kbytes of RAM recommended; 
DB86A 
uses a minimum 
of 360Kbytes of RAM 
• A serial port (COMl or COM2) 
• OOS V3.3 or later, OS/2 V1.2 (OOS 
Compatibility 
Box Only) 
• One floppy drive capable of reading 
5.25" 
diskettes 
or 3.5" diskettes 


Target System Requirements 
• One ARTIC RS232 serial port 
• 8 Kbytes free RAM on the target ARTIC 
Board for DB86A debug support task 
• Target system containing 
one of the 
following ARTIC cards: 
IBM Realtime 
Interface 
Coprocessor 
IBM Realtime 
Interface 
Coprocessor 
Multiport 
IBM Realtime 
Interface 
Coprocessor 
Multiport 
Model 2 
IBM X.25 Interface 
Coprocessor/2 
IBM Realtime 
Interface 
Coprocessor 
Multiport/2 
IBM Realtime 
Interface 
Coprocessor 
Portmaster/ 
A 
• 


